Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/tfiDnjoV2YZydLPxeBd8i8P3-ac.roa
File: tfiDnjoV2YZydLPxeBd8i8P3-ac.roa (raw, json)
Hash identifier: QWnZO/beLukRR7HGE0jDW2zCDM2WlWehRomH0Unkl8Q=
Subject key identifier: B5:F8:83:9E:3A:15:D9:86:72:74:B3:F1:78:17:7C:8B:C3:F7:F9:A7
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 018438C5FC7BC35B53DF5345EBA3009B323E
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/tfiDnjoV2YZydLPxeBd8i8P3-ac.roa
Signing time: Wed 02 Nov 2022 14:36:50 +0000
ROA not before: Wed 02 Nov 2022 14:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:c5:fc:7b:c3:5b:53:df:53:45:eb:a3:00:9b:32:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Nov 2 14:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f8839e3a15d9867274b3f178177c8bc3f7f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:26:1d:3b:ff:7b:e2:5a:47:d3:55:54:81:
d0:e5:dc:7c:f7:b1:f1:ae:16:37:1d:92:99:30:37:
99:20:90:66:e6:e7:46:3d:43:83:fd:6f:3a:fc:b0:
43:7a:b1:13:7d:02:45:e5:1e:5e:99:b1:c9:8a:8a:
c1:38:30:5a:55:a0:f8:fe:5b:1f:fd:af:5f:75:74:
e9:2e:32:7d:a4:66:22:0c:e2:c0:71:97:a8:f2:61:
01:78:fe:c1:fe:0c:0c:cb:e5:d4:19:7e:d2:cf:a8:
c9:7e:f5:7a:fb:a7:a3:36:33:82:6a:3e:be:3a:43:
ca:67:b8:06:2d:0c:8f:71:86:92:46:2a:49:0c:c0:
e8:cd:58:ff:1b:e9:23:81:d5:ea:c4:c3:d1:4d:b9:
f0:94:d0:18:62:27:65:c1:86:f0:4d:8d:2f:6e:3f:
3a:da:f7:d5:3a:7c:f0:90:78:86:be:ad:e9:37:c6:
2e:a9:86:c0:25:45:e9:bb:54:b4:75:bd:7a:74:46:
14:4f:47:bd:4f:ca:7e:1a:b6:3f:8d:f4:59:47:65:
a8:90:a1:94:37:d1:0c:4e:53:b8:1f:9b:11:85:84:
83:31:bb:95:b6:bb:36:75:1b:ea:b8:de:28:ba:81:
45:26:d3:f7:b5:6c:c4:9e:dd:f4:38:28:a8:cc:0c:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:83:9E:3A:15:D9:86:72:74:B3:F1:78:17:7C:8B:C3:F7:F9:A7
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/tfiDnjoV2YZydLPxeBd8i8P3-ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/23
Signature Algorithm: sha256WithRSAEncryption
01:fa:4e:cd:0a:d6:52:2d:19:d4:11:5c:fa:6c:9f:a6:3b:fd:
73:a2:64:ff:6b:dc:ee:33:46:51:18:d5:fe:d0:6e:6e:02:11:
d9:57:bb:51:a0:7f:90:0f:c4:c7:a4:f3:aa:55:29:8d:d8:6e:
50:ee:a8:8c:de:82:20:31:a5:52:d5:13:f2:8d:72:80:aa:ba:
12:f6:9a:1a:19:d9:61:79:02:f0:ba:95:4d:89:94:6f:a0:c0:
52:1f:2f:e9:fe:8f:8b:4e:10:59:9b:be:e6:20:3d:ed:78:07:
19:d8:9c:b7:f7:72:f5:13:ae:38:e0:31:dc:a5:8d:a1:99:08:
82:b2:2c:8d:41:a0:9c:97:b3:8e:55:d8:17:99:5d:59:e2:9e:
36:c7:e5:ff:c4:4d:eb:d8:e2:90:3d:37:5a:21:c2:e6:68:21:
4c:b9:c1:47:36:29:76:a1:4d:59:2f:19:11:2b:cb:35:29:34:
97:27:a0:4f:72:cd:99:c3:55:4b:2a:4b:dd:93:1f:e6:f5:55:
69:12:72:f6:9b:ba:12:2e:1b:0a:82:13:e9:f7:f6:30:c7:b8:
54:0d:a5:69:ab:d2:78:ad:77:2e:3d:1f:d4:56:8d:e5:93:de:
92:ac:fd:45:61:17:74:19:b5:3e:bd:fc:95:88:73:4c:5b:17:
c3:02:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:50 2025 by rpki-client