Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TXY1I130XvsaTvWkchtuWI-PM9g.roa
File: TXY1I130XvsaTvWkchtuWI-PM9g.roa (raw, json)
Hash identifier: TIrFe9IGuWpgbdyOP5J+JnA8eNzT/AVIEYMB6nU7cvM=
Subject key identifier: 4D:76:35:23:5D:F4:5E:FB:1A:4E:F5:A4:72:1B:6E:58:8F:8F:33:D8
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01950EA4E61539A4EA31F051F093280E9694
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TXY1I130XvsaTvWkchtuWI-PM9g.roa
Signing time: Sun 16 Feb 2025 12:04:02 +0000
ROA not before: Sun 16 Feb 2025 12:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 193.142.146.0/24 maxlen: 24
2a0f:ca80:617::/48 maxlen: 48
2a0f:ca80:618::/48 maxlen: 48
2a0f:ca80:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:a4:e6:15:39:a4:ea:31:f0:51:f0:93:28:0e:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 16 12:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d7635235df45efb1a4ef5a4721b6e588f8f33d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:4b:7c:ff:36:fa:c7:0f:3c:20:f3:d6:45:
01:c7:b1:4e:4a:c8:0e:fc:d0:fb:c6:11:89:5d:ea:
ad:2b:94:4c:c7:e3:37:58:3a:d4:c6:f9:64:76:67:
c5:1f:8a:dd:51:73:72:c2:ec:9a:0a:66:e2:87:f4:
af:44:3f:c1:d6:6e:e4:e1:9f:5a:10:d9:d3:7c:e3:
81:5f:f0:b7:f5:34:f1:63:b2:de:63:e5:2c:42:c8:
63:ec:ad:28:d5:1a:14:fb:2a:78:81:13:6e:17:dd:
c5:86:b5:d8:e2:a4:d4:57:65:a9:ac:ab:b8:7a:04:
e2:fb:99:2f:d6:9d:cd:e4:32:6e:5a:8b:e7:71:77:
2c:47:98:ec:4f:c8:49:f4:43:76:06:ff:57:09:1d:
26:4b:a9:ff:fa:13:5c:c9:0a:40:6b:80:1a:c4:f0:
b2:8f:33:49:45:d8:0e:97:e2:f1:ca:47:e5:86:3f:
38:0c:3f:76:56:92:e1:1e:6f:40:0b:a1:39:23:f0:
63:b8:85:ee:61:99:d4:56:eb:be:e1:71:e7:e9:bf:
5b:30:c7:50:76:da:36:a5:e3:47:e6:5a:36:b1:a4:
bc:5d:dd:dd:dd:a5:1b:d9:c0:76:a1:8a:2c:ac:ad:
97:82:8c:05:a6:47:7e:7b:c1:b8:22:35:e8:c2:37:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:35:23:5D:F4:5E:FB:1A:4E:F5:A4:72:1B:6E:58:8F:8F:33:D8
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TXY1I130XvsaTvWkchtuWI-PM9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/24
IPv6:
2a0f:ca80:617::-2a0f:ca80:618:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:1200::/40
Signature Algorithm: sha256WithRSAEncryption
77:7f:4f:18:55:36:b5:e2:3b:7e:d0:a9:64:ce:e7:bc:29:53:
dd:ef:97:85:fc:fb:e1:e4:c5:34:1d:75:05:1a:ed:a3:38:48:
30:7f:ce:ac:02:0b:17:b3:25:70:dd:28:4d:4d:c1:77:00:4a:
c4:41:7a:47:c3:7c:f8:d9:17:ab:59:1c:4d:29:8b:b9:51:32:
53:2f:98:c5:be:df:83:eb:b9:ec:7f:a8:51:e0:1b:40:1a:c6:
f6:8b:0a:8c:7a:49:cc:91:ee:72:d5:3b:29:e7:5c:0b:a2:67:
f2:e9:55:e9:1e:03:c6:ae:fd:18:be:da:c0:af:40:40:35:cd:
26:9f:0b:31:3e:46:d6:11:a3:c0:52:c2:8e:5f:7d:0b:2f:f2:
7e:64:7b:92:4d:fe:4e:7c:09:7b:42:8a:a4:bd:9e:4a:08:ff:
84:1c:ac:8e:8d:63:16:77:78:6c:cb:04:1c:5d:f1:b7:c7:a2:
28:1e:71:58:e6:8f:eb:a1:36:8f:b3:08:93:03:36:09:c3:03:
3b:96:21:46:35:67:b2:20:bf:3b:cc:98:85:00:9d:4f:6f:51:
2e:3e:8e:05:7d:e0:fb:c9:bd:1c:71:7d:f7:5c:c6:85:f4:47:
cb:11:e5:cc:2c:88:5d:fa:19:6e:90:d3:db:c8:dd:81:d8:65:
56:13:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:09 2025 by rpki-client