Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Tr1zm4GBLvsaqdSty4Zw64OCONY.roa
File: Tr1zm4GBLvsaqdSty4Zw64OCONY.roa (raw, json)
Hash identifier: pRv5+JW5pur/m75qgWopOAyecQEuutGW2gEl3aeD3MM=
Subject key identifier: 4E:BD:73:9B:81:81:2E:FB:1A:A9:D4:AD:CB:86:70:EB:83:82:38:D6
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B7B63FB57F9B6DE476C9044D63AA
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Tr1zm4GBLvsaqdSty4Zw64OCONY.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197897
IP address blocks: 78.142.22.0/23 maxlen: 24
79.124.80.0/23 maxlen: 24
91.92.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b7:b6:3f:b5:7f:9b:6d:e4:76:c9:04:4d:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ebd739b81812efb1aa9d4adcb8670eb838238d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:bb:ee:75:ca:32:e4:f6:a9:7c:50:03:8c:
9b:fc:35:40:0c:cd:87:5b:e7:05:8b:9b:21:66:dc:
44:a8:e7:3d:42:59:b7:92:02:16:8d:a3:88:7a:dd:
64:88:8a:23:b8:5f:5b:aa:93:0f:3b:41:83:0f:fc:
45:66:9e:65:18:aa:3b:ff:a4:81:58:58:26:b3:83:
41:05:6e:a5:e1:54:ba:87:04:76:86:9f:c2:64:67:
7b:1e:f9:34:c3:a0:52:58:0a:69:16:f6:bd:4f:11:
01:d6:f5:35:73:6b:3f:be:dc:d0:a7:ee:2c:b3:b1:
0b:90:a6:91:63:0b:92:7a:a8:95:bd:17:75:af:07:
a4:63:c3:94:4e:e9:f7:fc:1f:e3:67:54:84:f4:1b:
e5:ec:4b:f8:2c:f6:0e:83:58:5e:10:f8:cf:67:99:
e9:e8:5e:e1:a6:57:3b:63:eb:84:21:14:85:79:4c:
74:34:0a:e2:f3:02:66:d9:b1:b1:e2:17:06:13:21:
8b:d4:fa:62:aa:6c:9d:15:f1:37:45:a0:37:39:66:
81:2e:44:be:2b:82:89:57:86:5f:68:47:53:70:10:
dc:8c:96:4c:2b:96:ef:ae:12:8e:43:d6:06:ee:71:
f9:5d:81:d1:dc:44:3e:e5:5a:04:69:cc:e7:c4:54:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BD:73:9B:81:81:2E:FB:1A:A9:D4:AD:CB:86:70:EB:83:82:38:D6
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Tr1zm4GBLvsaqdSty4Zw64OCONY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.22.0/23
79.124.80.0/23
91.92.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9f:e8:3c:da:e2:20:1c:1b:d7:a4:a2:dd:47:cd:09:85:a0:
3d:80:87:7c:c8:2c:bd:5b:40:65:ff:4a:2b:d8:06:87:21:1b:
c1:c1:f1:b7:9e:bf:54:ed:4a:69:ce:35:7a:41:71:3b:06:1a:
1f:57:14:65:3a:89:57:f2:c4:81:3c:32:e8:15:9b:2e:ac:dc:
50:02:fc:0d:1a:c6:b3:6a:dd:95:26:ce:06:4d:c7:42:be:7d:
50:4d:6c:0c:9f:89:d7:dd:07:c2:49:99:39:6c:41:88:47:0b:
94:66:c0:d7:9f:c1:60:df:b5:dd:87:14:a2:67:4a:8a:f8:fc:
bd:a7:c6:ed:60:3e:1b:61:58:56:19:4b:1e:a9:c8:2c:87:79:
0c:53:70:dd:20:d1:73:65:b5:26:33:75:89:9b:b8:82:d3:14:
e2:68:93:4a:b0:4a:49:8c:07:47:91:a4:fe:63:ea:bb:78:cd:
d7:0b:39:ed:b2:d3:bb:13:2e:8b:a9:59:b9:19:e4:4e:ba:e8:
55:ca:2c:f1:76:f8:44:4e:5d:6e:a5:61:37:8a:f5:d1:15:e2:
4a:48:1b:59:89:12:06:0b:3b:cb:00:c6:7a:12:a2:c3:19:32:
79:1d:31:df:df:7f:6c:f1:80:a1:85:f1:df:6e:e6:d3:6e:4b:
89:d7:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:18 2025 by rpki-client