Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rZ6TISWhkf_039jdEYiduPMsTL4.roa
File: rZ6TISWhkf_039jdEYiduPMsTL4.roa (raw, json)
Hash identifier: MVBUJASG9KTbA2UFdWuHuJs9SZpHAsSa5QNRB1tPVVg=
Subject key identifier: AD:9E:93:21:25:A1:91:FF:F4:DF:D8:DD:11:88:9D:B8:F3:2C:4C:BE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194F8E2D5C9B1A2E48681A47FC24F2B9D1E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rZ6TISWhkf_039jdEYiduPMsTL4.roa
Signing time: Wed 12 Feb 2025 06:40:02 +0000
ROA not before: Wed 12 Feb 2025 06:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399114
IP address blocks: 193.22.157.0/24 maxlen: 32
193.22.158.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:e2:d5:c9:b1:a2:e4:86:81:a4:7f:c2:4f:2b:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 12 06:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad9e932125a191fff4dfd8dd11889db8f32c4cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:70:fa:8c:00:f1:54:8b:e9:f0:b9:e8:7e:
fb:15:a4:8e:06:aa:42:c3:74:44:3b:7f:b0:c9:6d:
0f:a1:16:19:b5:27:dd:87:d9:b8:9d:d8:75:41:57:
be:6e:ee:7e:6c:86:60:be:6c:ba:20:d7:15:bd:d6:
a3:90:91:e0:21:bc:c9:af:fd:b4:11:dc:54:c8:85:
dd:03:7d:8a:b3:96:37:fa:50:a5:53:43:db:06:46:
47:11:5c:b6:dd:32:52:d6:d7:2c:2a:47:2b:3b:51:
19:a8:82:81:78:bf:c1:3a:a5:9f:73:65:37:58:93:
b7:64:1d:6f:72:e8:8d:dd:59:ff:65:1f:19:81:16:
2b:8f:01:1c:be:33:5a:57:34:95:27:3f:1d:56:37:
b5:8c:d9:ff:d9:ae:ca:ba:f8:d2:d1:45:f5:5c:36:
85:ec:94:67:3b:04:2d:a7:83:16:d3:08:e5:b8:74:
41:f6:da:d5:d3:89:4d:05:8f:32:64:c9:fb:4e:7c:
b0:99:9e:4f:51:82:09:ca:18:44:73:75:e2:1c:9f:
be:a9:81:24:43:af:cd:44:e9:6f:12:2f:4b:e0:d2:
4d:4d:99:b7:b8:4b:75:18:c8:92:23:a2:7c:3f:cf:
17:a3:fd:e8:73:a3:32:28:35:19:0a:68:42:df:47:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:93:21:25:A1:91:FF:F4:DF:D8:DD:11:88:9D:B8:F3:2C:4C:BE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rZ6TISWhkf_039jdEYiduPMsTL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.157.0-193.22.158.255
Signature Algorithm: sha256WithRSAEncryption
02:66:95:0f:06:5f:b3:c0:7d:b4:66:2b:97:f6:07:82:30:8f:
03:3f:bd:fa:f1:da:66:54:ad:47:ae:e9:c6:5c:85:fc:ba:65:
4a:96:d7:eb:e7:ab:b5:dc:a8:a3:27:a2:e4:f5:dc:2c:42:12:
62:7e:9a:80:c9:ab:46:f7:a4:06:8b:43:6e:06:f0:d9:a8:2b:
b8:92:b3:65:ff:50:77:54:91:3f:66:41:ef:63:6d:71:96:f0:
66:e5:89:b8:45:40:c4:4c:1b:4e:db:a9:e4:ed:b1:c0:1c:08:
0b:df:c0:dc:5e:ed:c4:1b:e4:24:22:fd:22:ca:1c:2e:51:63:
50:c8:6e:66:40:1f:77:9d:7a:ef:fa:78:48:fd:65:c8:97:85:
20:70:33:ef:05:1d:f8:0c:f5:97:cd:80:c3:fd:fd:d6:db:20:
e4:7a:36:c2:9f:68:ca:6a:f1:48:77:0c:df:26:42:bd:9f:1e:
04:45:6a:4f:5d:fb:39:9d:d1:65:d3:e8:b4:b3:68:54:90:e1:
eb:2e:70:ea:8e:81:be:dd:4d:e0:a2:a0:c6:e2:bf:b2:4b:1b:
ae:fd:c3:e3:23:a5:11:6d:ca:36:42:49:12:2d:0a:90:1d:0f:
c1:72:7e:05:86:35:2d:c2:ea:9f:92:9b:d2:f9:af:dc:1b:14:
82:0b:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:38:19 2025 by rpki-client