Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa
File: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (raw, json)
Hash identifier: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=
Subject key identifier: 4C:F2:8F:F7:FB:C8:BF:76:70:37:CC:7C:D9:28:B7:86:A9:FC:4E:A6
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0194221F97DFF5C32121ECD86011F10A70F2
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210186
IP address blocks: 194.53.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:97:df:f5:c3:21:21:ec:d8:60:11:f1:0a:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf28ff7fbc8bf767037cc7cd928b786a9fc4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:c5:9e:e2:41:48:8e:41:76:98:56:36:f2:
b7:46:c3:89:99:f8:2d:10:d8:86:39:28:a0:69:68:
8e:57:7c:73:69:77:f6:e2:c4:c8:dc:45:b4:bf:66:
48:f0:46:54:59:61:d7:3b:be:9d:11:48:3a:1f:15:
4f:e7:dd:a1:14:a4:b5:c5:a8:13:a9:0b:ab:a6:13:
b3:56:ef:39:e4:21:3c:61:f9:2f:29:28:d4:15:72:
a5:05:b0:57:1e:03:10:7c:de:92:a0:72:db:9d:42:
cd:94:9a:7a:be:1e:4d:ef:33:1c:d8:7b:72:0c:5c:
63:44:55:98:63:8d:27:41:c0:56:1f:de:ed:7a:35:
87:89:2a:89:e1:1e:c7:ee:1a:27:c4:1e:3a:aa:10:
39:b9:4d:06:7f:b9:24:2d:82:fe:bf:2f:81:1a:5a:
7f:37:3e:c6:1a:36:a1:02:c2:e8:95:2d:47:de:67:
c8:4b:96:83:8c:b5:a9:6f:f2:a1:4c:fe:66:09:59:
b6:f8:bb:07:95:66:bd:bf:2a:74:47:64:67:6b:aa:
38:a7:63:3f:db:c2:34:bc:94:fb:b8:4e:dd:67:91:
ef:4c:84:72:fe:83:dd:52:84:a5:ff:a7:13:64:ae:
99:2f:2e:d8:b4:67:84:76:25:a0:4e:5a:69:b5:09:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:8F:F7:FB:C8:BF:76:70:37:CC:7C:D9:28:B7:86:A9:FC:4E:A6
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.196.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3b:45:f8:07:15:81:e7:de:64:22:46:52:5d:a7:6d:28:d8:
e6:21:1b:b1:15:36:a3:68:f5:e0:a0:e1:a5:5a:56:83:12:cd:
64:92:70:48:3d:7d:a6:f4:9a:b6:3b:12:30:68:4e:31:8a:f0:
65:cf:ef:fa:6d:4b:72:6e:de:39:7c:11:d7:c7:5e:69:83:91:
d2:af:ae:7e:e7:61:02:15:d6:f5:86:75:fc:bb:58:df:c9:0b:
e2:c5:45:c6:bd:e6:e3:98:5f:41:45:c4:46:60:8d:af:d4:2c:
92:56:0c:be:c7:9c:4b:44:f4:68:23:91:d3:ee:74:1f:21:36:
b7:6e:35:39:db:f1:9d:48:56:6e:59:62:69:55:9a:3a:62:df:
74:ff:e3:2a:8b:e0:75:28:88:c2:f1:84:be:ee:30:15:48:19:
37:24:aa:21:4a:a4:23:5c:50:e5:a4:ac:75:a1:94:6f:d0:e2:
d4:a6:12:c0:4f:d5:75:10:29:c8:09:c2:d7:08:51:25:9e:7b:
81:0e:10:cd:d6:e8:9c:7c:9e:ba:0f:5e:a5:e4:43:dd:ef:b6:
1a:32:85:3f:59:cb:15:dd:c6:cf:99:0a:da:81:7e:b5:8f:b1:
2b:ea:20:8b:f7:07:76:80:59:13:b8:03:58:de:03:ca:26:b5:
48:18:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:49 2025 by rpki-client