Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa
File: tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa (raw, json)
Hash identifier: Mz8v6+YcC5LwNUyg6BoLOLhL5ks8b6FyVn29SuKol3M=
Subject key identifier: B6:73:DD:21:86:7F:5E:0D:63:95:B0:3B:38:E2:D5:13:97:9E:09:E7
Certificate issuer: /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial: 0194252082351737FCAF03B0FACC34367B2B
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25301
IP address blocks: 212.94.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:82:35:17:37:fc:af:03:b0:fa:cc:34:36:7b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b673dd21867f5e0d6395b03b38e2d513979e09e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:17:d1:9a:d1:92:ca:f5:c6:75:0c:cd:26:
42:21:4f:df:65:fe:56:82:4f:a2:08:80:52:f9:eb:
a2:36:d1:bf:af:2c:db:7f:71:9b:a4:e1:74:30:23:
14:3e:80:5c:7f:26:9a:8c:0e:16:76:25:d4:03:06:
26:ae:f5:71:fc:c1:c0:8e:c5:ff:25:bd:6d:78:0f:
b5:9c:9d:9c:62:57:60:f0:b8:5d:ae:9f:18:1c:13:
e6:a9:f0:56:ef:1a:5f:77:7e:eb:c1:6a:a6:c0:64:
f5:1f:45:46:86:16:86:b1:e2:4d:36:70:1e:fd:1e:
a9:50:50:2d:60:a5:6e:de:9e:18:f7:e4:db:c1:2e:
fb:59:71:61:f5:a8:8f:a7:30:2f:1e:4d:3d:2a:37:
64:b3:7d:91:78:a6:b2:00:c2:97:96:52:f3:81:0d:
37:90:61:25:25:85:f9:24:b7:49:5e:b9:fc:85:32:
1c:6e:64:39:02:42:6f:a7:b5:05:58:f1:fa:89:96:
0a:d6:43:b3:29:97:d0:19:97:88:f6:e3:bc:8a:90:
a7:be:f1:ff:52:a3:67:fe:2d:23:ac:35:b3:93:85:
df:21:9a:9e:45:51:57:20:43:6c:dd:bf:2c:2f:be:
17:58:98:92:64:9a:24:1b:ee:f6:49:7b:09:0b:bd:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:DD:21:86:7F:5E:0D:63:95:B0:3B:38:E2:D5:13:97:9E:09:E7
X509v3 Authority Key Identifier:
keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.128.0/19
Signature Algorithm: sha256WithRSAEncryption
79:ba:7f:52:83:df:12:24:97:0b:94:4c:fa:cf:04:b0:0e:fa:
c6:e2:cb:86:1c:33:1d:d3:05:67:de:b1:ad:a5:27:81:d3:da:
0c:0f:ad:b7:fc:f5:47:94:24:75:a4:42:8b:12:09:87:13:1e:
1e:49:c7:a3:3a:29:aa:a9:ed:62:bc:26:dd:64:b7:75:02:59:
fc:81:ab:17:11:89:73:f8:70:9d:6d:d0:d7:fc:a7:33:5c:3b:
1a:a7:89:e1:9c:3e:7b:3c:bf:0c:65:d6:49:dc:95:68:c5:78:
24:2d:06:7c:3e:79:ea:6c:bc:68:16:b4:9d:3d:fd:07:6b:c2:
57:92:47:8a:b6:8a:4f:0d:49:92:97:84:bd:04:c2:e0:0a:90:
89:be:88:e3:ba:79:41:a0:aa:95:b1:e9:d8:fb:9e:30:27:5d:
91:e8:7a:10:47:1a:54:ce:ab:bb:88:60:ca:ef:78:69:93:ba:
c6:43:24:33:8b:0b:9c:e3:01:b4:27:6e:24:46:2d:c5:31:d9:
13:83:4e:97:2a:3a:25:b8:ff:fb:16:6f:ba:f2:4c:9c:61:45:
8c:e9:98:3d:f4:48:17:c8:0b:36:cc:ad:9c:b6:41:48:96:8b:
63:e5:57:2c:95:36:78:7c:0b:c7:fc:53:79:6f:39:17:01:ad:
dd:ce:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:20 2025 by rpki-client