Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/tfLXGQ5PJkMa3PshyPbQs6SgEew.roa
File: tfLXGQ5PJkMa3PshyPbQs6SgEew.roa (raw, json)
Hash identifier: 8rcVApOGw4v1UyjSDglLR5/i6c9sG5r3XdZlHqPb4QI=
Subject key identifier: B5:F2:D7:19:0E:4F:26:43:1A:DC:FB:21:C8:F6:D0:B3:A4:A0:11:EC
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 01942444856376F611029075E737BD54C75B
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/tfLXGQ5PJkMa3PshyPbQs6SgEew.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 93.157.106.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:85:63:76:f6:11:02:90:75:e7:37:bd:54:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5f2d7190e4f26431adcfb21c8f6d0b3a4a011ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:25:f8:43:e4:7b:17:e6:3e:af:be:93:94:
d6:75:32:a1:1f:9f:18:d6:6c:50:12:ae:c9:1b:27:
43:6e:d4:06:e0:e7:f7:dd:80:a4:05:7f:a7:13:7f:
59:dd:57:6b:ae:48:0c:70:74:12:6e:c6:37:35:01:
47:06:74:4d:51:79:2b:35:8f:b5:78:26:16:f1:cb:
51:2e:4d:c4:9f:21:ec:42:d7:43:9d:cd:ac:96:a8:
6f:05:45:1c:72:1c:56:f2:da:d2:2c:ff:33:17:67:
81:3b:c1:f2:a9:5c:5b:c3:97:3b:00:9f:0b:70:6c:
24:6b:95:d9:24:57:53:ce:8a:b5:86:7e:45:c5:da:
58:65:1a:32:ab:2b:fd:60:c7:99:a3:e9:a7:06:3f:
c2:3a:19:04:00:ae:62:be:91:d3:e8:f8:98:92:3d:
35:23:61:03:07:f7:a9:cf:61:7b:72:6c:4b:a7:75:
f4:4d:3a:a5:b2:1a:ec:0b:ad:c5:37:21:1a:24:11:
24:dc:a7:0a:79:d7:18:f0:c8:11:45:c3:5f:9f:b1:
0a:35:04:aa:99:90:d8:ab:df:8e:fe:f8:07:ef:71:
be:a6:45:9a:bc:54:ef:fc:c2:94:a7:21:ba:99:d8:
5e:c7:76:b6:2a:da:3a:70:ed:72:9d:19:65:56:23:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:D7:19:0E:4F:26:43:1A:DC:FB:21:C8:F6:D0:B3:A4:A0:11:EC
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/tfLXGQ5PJkMa3PshyPbQs6SgEew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
94.103.188.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:85:f4:8b:c3:0c:6a:76:25:47:bb:79:7b:5b:a2:ce:27:19:
94:7e:24:41:a1:fe:b6:e8:67:27:b3:0a:8c:c8:23:f8:7b:e1:
be:d1:24:f9:ae:9e:02:7f:c0:4f:f6:89:c0:83:66:87:23:4c:
2d:b0:7a:71:d5:f1:4c:a1:57:bd:99:d5:c4:15:f1:4e:2a:fc:
b4:65:ef:61:6e:0b:53:1b:38:4e:bc:03:92:0d:b8:5d:34:a8:
e3:b8:9d:10:83:f6:a0:0b:07:9c:83:a6:a8:1e:ce:33:f6:a1:
17:b5:a6:48:54:ed:e8:5f:70:d5:9c:71:fb:cd:10:d8:c9:2c:
fb:77:6d:97:90:8b:bb:68:81:76:30:31:13:0e:9d:d0:86:e4:
79:fd:85:2d:93:92:a7:ef:15:4a:47:3c:51:5b:3a:fc:1a:96:
f7:49:0c:ee:56:ee:11:f1:14:c2:14:44:b2:76:a1:ea:6e:41:
fb:c9:1d:c9:d7:96:e9:ba:f9:63:0c:7d:91:d1:da:fd:72:86:
95:50:e1:56:0d:cd:06:1c:ea:28:38:ef:6f:78:85:05:6f:1d:
84:69:51:de:51:32:5b:86:d8:05:89:dc:c7:41:ca:d8:92:65:
da:b2:4f:fb:d6:55:f9:5a:77:1c:4b:ef:46:9e:bb:53:8d:4f:
08:3d:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:55 2025 by rpki-client