Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/tcKM3LiJKMuWLZy1f452bVGFzLo.roa
File: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (raw, json)
Hash identifier: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=
Subject key identifier: B5:C2:8C:DC:B8:89:28:CB:96:2D:9C:B5:7F:8E:76:6D:51:85:CC:BA
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 019423D7D91492C96273C425FFAFD1612E53
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/tcKM3LiJKMuWLZy1f452bVGFzLo.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13244
IP address blocks: 194.9.170.0/24 maxlen: 24
194.153.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d9:14:92:c9:62:73:c4:25:ff:af:d1:61:2e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5c28cdcb88928cb962d9cb57f8e766d5185ccba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:30:a9:62:b9:e0:05:3b:96:09:89:eb:49:
e9:af:ce:c3:81:d3:f8:83:8b:70:93:77:dc:cd:c6:
d1:e8:af:ec:ac:da:87:34:52:50:97:ed:39:eb:cd:
73:2c:a5:ca:f9:2c:ea:28:30:8c:73:2b:ab:43:f6:
05:a7:c2:0c:31:78:e4:df:d0:0b:99:90:bd:c3:db:
f4:4c:0d:62:dc:03:29:a6:d6:03:08:c9:fe:98:f9:
8d:92:5e:ba:a9:db:0e:51:b7:ea:b5:fa:f7:a0:4b:
40:9e:1d:44:7c:2e:6f:eb:54:c0:34:be:36:de:2b:
d7:51:0a:1c:f5:e3:9d:fe:ce:f7:36:f1:c8:d9:6e:
be:5f:40:92:70:57:ea:51:8e:05:8b:8b:e7:36:48:
9c:29:a6:ce:ce:c1:f7:6c:78:80:20:51:c0:5b:5c:
39:d1:47:c7:5d:b4:e2:53:3a:94:53:d3:3b:83:63:
a2:8f:df:0b:dd:17:65:1a:75:43:27:07:15:f2:e1:
8f:4a:de:aa:c7:b6:25:00:21:ef:89:c4:5d:f7:c0:
8c:32:80:2f:fc:3a:21:11:23:35:35:7b:fb:ff:f3:
d5:79:d7:ee:21:8a:10:91:ea:39:a7:c4:d8:58:26:
0e:08:00:0e:ce:cc:cf:aa:c6:d1:78:72:24:35:42:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:8C:DC:B8:89:28:CB:96:2D:9C:B5:7F:8E:76:6D:51:85:CC:BA
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/tcKM3LiJKMuWLZy1f452bVGFzLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.170.0/24
194.153.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c6:bd:44:88:36:84:f1:a1:49:29:4d:af:67:0f:09:aa:2c:
d2:9e:95:6b:a8:24:0d:20:c2:b5:83:02:17:44:9d:bd:2e:e9:
5b:ef:71:df:03:de:2d:47:39:66:03:48:81:71:86:ff:87:40:
84:05:50:2e:b6:a6:fd:dd:04:14:94:3e:b3:1b:f1:d9:12:1e:
85:f8:04:21:79:59:be:1c:02:14:e9:e3:1b:c9:8b:a9:ba:bb:
8c:fa:b8:ac:b0:95:db:8c:a9:8d:22:5a:ac:e8:f9:fb:16:32:
83:06:cf:f6:9f:f0:b6:33:1a:b0:b9:cc:92:ed:d1:51:3c:99:
cd:6c:f1:37:bf:c4:aa:3b:9a:25:48:56:75:b6:cd:a5:43:c5:
48:db:1d:82:f5:a7:88:22:15:81:da:7f:a1:a9:e8:b4:af:b1:
b5:f8:f8:c8:0b:24:1c:79:64:7f:40:b9:44:98:e9:ee:5a:b5:
43:4f:ac:f9:f7:24:77:6f:99:66:13:7e:ca:18:75:1b:d5:ba:
8f:30:b1:7b:6d:28:b9:df:e1:67:b5:b2:9d:fe:18:ec:d7:5c:
86:d8:e1:94:c1:75:aa:03:e9:6c:67:dd:cc:a9:53:3c:dd:4f:
c5:10:ed:02:f2:33:e0:e6:ef:a7:78:98:84:85:43:cb:c4:59:
35:0c:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:02 2025 by rpki-client