Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/TZNlzSisEozO9bUPt3Ymc1srv8E.roa
File: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (raw, json)
Hash identifier: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=
Subject key identifier: 4D:93:65:CD:28:AC:12:8C:CE:F5:B5:0F:B7:76:26:73:5B:2B:BF:C1
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019421B22C87C1AADBE09FB2E477A08D2A3C
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/TZNlzSisEozO9bUPt3Ymc1srv8E.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.223.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2c:87:c1:aa:db:e0:9f:b2:e4:77:a0:8d:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d9365cd28ac128ccef5b50fb77626735b2bbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:32:85:d6:ab:29:6d:05:32:87:85:99:65:
aa:79:cf:89:bb:75:57:4c:ed:e6:ce:63:0c:87:6c:
aa:47:fe:c2:8e:11:27:9c:f4:91:a3:46:8f:e9:32:
d0:85:a4:29:b6:67:94:4f:81:0f:fc:e1:4e:c2:b4:
05:44:96:9b:40:4f:d0:2c:96:2f:8a:c6:48:06:37:
dc:49:83:5e:a1:33:dc:ff:85:68:78:1b:1a:a4:48:
0b:4b:c7:ea:fb:80:5b:54:1b:01:d3:bf:14:2e:37:
f1:19:49:cb:a7:0a:e2:09:31:5b:f1:b5:78:89:12:
b0:49:eb:70:ea:ee:e9:eb:00:37:34:21:1e:a1:52:
5c:bc:01:23:77:3a:3f:62:0b:25:70:47:9e:86:8a:
cf:ac:a9:83:11:93:8c:1e:37:ee:11:b3:82:bf:45:
16:f9:9c:5f:5e:a5:fc:81:9f:71:db:87:6d:98:27:
aa:db:30:eb:4a:32:7a:cd:c9:75:2c:b7:5f:99:54:
94:0a:1d:4d:75:62:67:eb:1e:42:57:f2:a0:31:ce:
88:b4:d2:9d:b5:d0:72:fb:06:53:84:d3:2e:65:0d:
ca:b3:99:3f:bc:71:84:f5:35:6a:98:6f:0c:d4:8d:
8f:1c:4a:f6:c8:5f:c6:52:86:52:84:53:7c:9b:29:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:65:CD:28:AC:12:8C:CE:F5:B5:0F:B7:76:26:73:5B:2B:BF:C1
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/TZNlzSisEozO9bUPt3Ymc1srv8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.102.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e0:53:c6:5c:50:e6:96:36:54:dd:f9:67:57:a4:91:23:1d:
bc:64:c0:e3:78:8e:91:b8:fc:53:68:4b:d1:a5:de:6a:d4:83:
4f:96:1a:17:90:18:54:41:78:20:3b:89:4e:25:19:c4:4c:d1:
4a:e4:71:41:7c:6e:5f:8a:db:03:90:e7:db:b0:18:2e:e2:b9:
9b:ff:fb:80:a0:8a:0d:4f:dc:7f:80:f8:23:27:fd:bb:57:a3:
37:67:ed:a8:5e:74:6e:1a:fb:c0:eb:5c:3e:c0:a0:45:8c:62:
91:03:25:e6:df:42:6d:ea:ca:3f:74:2f:c4:28:8c:b1:41:e4:
a8:85:34:17:de:b5:a3:ad:76:44:29:1b:89:86:f2:63:e2:80:
ee:6c:28:1b:d8:0c:9c:7b:05:b2:69:54:4f:78:57:06:d6:c3:
ec:2a:df:11:b8:dd:0e:d1:d5:3a:7a:81:6a:15:f6:72:ff:8f:
07:28:63:3f:87:c1:18:c2:46:49:48:91:3a:57:a7:e6:d0:c3:
ac:2a:ba:18:c7:53:42:8b:c6:78:08:00:8c:e3:73:cb:52:ae:
e4:83:5f:2e:1a:5a:8c:3f:e7:cc:40:db:36:30:ef:f3:0e:8e:
91:95:00:aa:0c:c1:aa:89:70:c2:32:d5:79:15:17:31:e8:eb:
1c:10:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:09 2025 by rpki-client