Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/TSvZLiAEM2CqBOpzEquX-L_n02A.roa
File: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (raw, json)
Hash identifier: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=
Subject key identifier: 4D:2B:D9:2E:20:04:33:60:AA:04:EA:73:12:AB:97:F8:BF:E7:D3:60
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01942143CBC682DBA3C5A948DB3D3B9AC5C8
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/TSvZLiAEM2CqBOpzEquX-L_n02A.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15422
IP address blocks: 193.104.231.0/24 maxlen: 24
195.24.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:c6:82:db:a3:c5:a9:48:db:3d:3b:9a:c5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d2bd92e20043360aa04ea7312ab97f8bfe7d360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:4d:ab:f8:b2:71:c6:2a:e0:f4:60:d2:41:
d4:90:fc:2f:7f:be:79:39:a0:cc:21:60:7f:d2:0f:
51:5f:19:13:d4:3f:99:3a:9f:7a:38:fe:a6:21:bc:
65:05:b3:09:51:0b:20:22:20:fa:be:12:29:1c:ed:
36:0d:f0:4c:da:d1:bc:1a:9c:2f:1e:67:8d:4e:47:
b0:d9:53:2c:05:17:cd:c5:46:7e:e4:a4:b4:3d:e4:
1a:7d:0a:10:c0:cd:3b:3c:77:e5:30:d0:f2:84:a7:
6b:d9:1c:82:f2:55:58:9f:5b:78:86:0b:6e:51:7d:
65:e8:4c:19:8c:f6:53:b7:e8:ab:d6:f0:3d:88:68:
79:88:e2:03:f3:d5:f2:ee:49:ab:db:ae:c9:f1:37:
95:dc:e0:9d:a9:28:6e:e6:a8:4c:8c:bb:bf:f6:da:
b0:2b:fc:48:34:e4:bb:bf:2c:ad:8e:c4:25:82:39:
cb:3e:04:a9:b7:b5:af:05:50:5a:d9:6c:18:5c:62:
67:80:05:5a:44:c8:af:b4:26:9b:b8:08:4d:e0:5a:
68:3f:6b:b1:90:26:1a:0a:a7:de:d2:49:d9:a4:ad:
7d:e9:b6:f0:fb:e0:44:5b:ab:ad:d5:13:16:68:67:
86:ca:9d:66:63:f8:93:aa:89:d0:fe:88:ae:ab:f2:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:D9:2E:20:04:33:60:AA:04:EA:73:12:AB:97:F8:BF:E7:D3:60
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/TSvZLiAEM2CqBOpzEquX-L_n02A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.231.0/24
195.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
24:1e:91:77:b5:cf:eb:bb:fd:a2:65:d0:ae:a5:00:17:3d:6f:
b2:9d:38:ff:0e:d2:20:5c:00:5a:ff:b5:9e:14:65:aa:5c:5a:
73:f6:7d:9b:3b:48:30:25:61:39:66:03:b2:77:d3:79:41:9d:
00:44:78:e8:f5:e2:21:1a:4e:3e:20:77:b2:77:9e:41:d4:e4:
2b:99:47:22:0c:d0:56:3d:5f:4f:6b:84:cb:75:56:4c:a4:10:
c4:db:88:10:d0:82:1b:a2:89:06:14:cf:e2:09:bc:a5:21:93:
49:b1:94:e1:b1:34:5f:cd:6e:d9:8e:a4:df:e7:26:0d:cb:62:
df:a7:fb:02:2d:06:7f:da:dd:79:20:aa:7f:31:f7:11:12:8c:
28:d4:b4:73:3c:db:96:8b:85:da:10:16:38:c2:cf:8f:c2:ce:
9d:7c:ce:62:c6:f6:9b:b7:fb:7e:b5:50:ef:77:8c:27:12:71:
97:8d:ce:af:e5:c0:d4:fa:45:f1:34:64:b8:b0:fd:35:e9:ae:
d2:de:3c:4d:2a:f2:ba:1b:86:b3:f9:b6:bf:86:95:43:66:22:
63:3d:e5:84:cb:74:a6:f4:8b:42:2b:cd:ed:b7:ba:39:bf:ed:
75:b9:98:7b:4b:d2:ac:75:45:fc:93:c5:6e:f3:29:6b:c1:32:
ac:2b:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:55 2025 by rpki-client