Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/mytf20wX2aBV2FUaQnt3tXEi67s.roa
File: mytf20wX2aBV2FUaQnt3tXEi67s.roa (raw, json)
Hash identifier: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=
Subject key identifier: 9B:2B:5F:DB:4C:17:D9:A0:55:D8:55:1A:42:7B:77:B5:71:22:EB:BB
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0194236A4FD5F408A1AA1EC04CBD2C85A003
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/mytf20wX2aBV2FUaQnt3tXEi67s.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 92.51.216.0/22 maxlen: 24
92.51.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4f:d5:f4:08:a1:aa:1e:c0:4c:bd:2c:85:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2b5fdb4c17d9a055d8551a427b77b57122ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:f6:fe:6e:5d:bd:e2:78:40:6b:c5:05:6a:
6e:23:86:42:4b:a8:07:bd:ab:0b:d5:d9:41:61:c4:
cd:5e:8e:26:1d:6e:22:da:12:a2:1d:54:4d:38:79:
ea:94:c7:f7:67:de:9d:ae:5d:14:5a:ca:6b:75:dd:
08:61:1a:04:a2:b9:28:e3:d7:ab:59:87:1a:59:ee:
30:b8:f8:a0:19:e3:2f:55:93:be:0e:52:68:4d:53:
9d:4b:06:37:6d:da:0e:82:df:41:37:a3:56:75:dd:
de:e7:19:f1:9f:84:d9:93:95:90:df:70:75:f3:2f:
e2:76:d5:b6:69:4a:25:21:8a:b2:2c:de:3b:ef:e4:
c5:5f:e3:2b:c9:00:57:07:fe:fc:32:71:5c:16:9b:
49:0d:c4:4b:52:bc:a7:45:ed:7f:f2:ea:d5:f4:e1:
a8:e3:52:84:a7:90:bf:3c:00:79:39:b0:89:08:de:
27:26:54:41:59:84:34:8b:51:44:c4:8d:50:de:bd:
10:97:ab:bf:72:72:81:b5:a7:da:7d:91:76:3a:e9:
63:13:9a:7a:c1:c0:3c:25:b5:fb:99:6b:8d:4a:51:
10:ca:c5:08:3b:7a:b1:af:5c:4f:68:d3:4c:ff:86:
45:0b:4d:b0:e3:cf:f9:c1:17:9a:48:03:41:5b:d1:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:5F:DB:4C:17:D9:A0:55:D8:55:1A:42:7B:77:B5:71:22:EB:BB
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/mytf20wX2aBV2FUaQnt3tXEi67s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
77:14:51:05:83:b0:5a:92:1c:7c:71:22:f7:79:d8:b1:14:59:
75:0a:04:5e:b4:49:86:22:d2:a8:cb:f5:58:45:0c:d0:54:ea:
90:c6:c4:10:0e:b3:eb:ab:32:1d:50:61:5f:e8:fd:c1:51:c3:
28:a3:47:d1:bf:5e:aa:63:eb:90:13:53:71:d9:b4:df:0f:9d:
a1:da:ef:d4:e4:12:64:9b:54:c2:b2:b2:b3:0e:d7:37:e4:d9:
1c:1d:10:26:51:22:dc:c0:32:a4:3d:95:79:e0:a4:eb:ca:61:
a9:53:3b:d6:0e:63:4d:f8:24:25:8d:fc:ce:7d:20:b0:70:55:
68:00:7e:40:02:bf:61:03:4b:62:17:c1:25:73:a3:9c:66:a3:
5d:8f:94:af:1c:d7:d3:51:48:8f:cf:b0:91:e5:df:b8:33:2d:
e2:b6:58:b6:81:03:9b:9d:38:fd:68:df:86:f0:f5:87:36:48:
2d:b8:10:de:51:1c:a5:37:fa:99:47:a2:3e:eb:76:a9:92:27:
41:a1:34:dc:70:cd:db:51:9d:ab:03:f6:c2:40:4b:c3:ba:5b:
59:73:42:dc:91:17:96:db:3c:d2:76:28:41:e6:97:95:d5:2f:
e9:f8:f0:c7:f8:66:dc:d7:58:f5:de:f1:10:7f:5b:66:6d:0a:
2e:6f:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:47 2025 by rpki-client