Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/TXQKCMY0RmQBnyUvmvlhv6lqsK0.roa
File: TXQKCMY0RmQBnyUvmvlhv6lqsK0.roa (raw, json)
Hash identifier: 52LSR/bxJz0XimbLZcBx48lFQEr+L0cbAn6X051+JaY=
Subject key identifier: 4D:74:0A:08:C6:34:46:64:01:9F:25:2F:9A:F9:61:BF:A9:6A:B0:AD
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 01B62A80
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/TXQKCMY0RmQBnyUvmvlhv6lqsK0.roa
Signing time: Mon 11 Apr 2022 08:48:21 +0000
ROA not before: Mon 11 Apr 2022 08:48:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28715648 (0x1b62a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Apr 11 08:48:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d740a08c6344664019f252f9af961bfa96ab0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:db:f9:12:ef:63:7c:bd:68:c8:bb:13:c8:
3b:03:8e:f8:09:82:bf:4c:bd:31:45:a0:8e:fb:ea:
b0:63:48:e9:3f:41:c3:be:b9:8f:67:ec:7c:a8:53:
17:e6:d3:7d:1a:f7:99:0f:9b:6c:83:8c:c6:4f:e1:
87:5d:2a:a1:18:b6:62:4f:d0:a7:90:da:09:48:57:
2e:aa:62:51:0a:b8:d7:10:7e:78:80:83:40:87:ce:
3e:94:3e:a2:fc:76:ff:07:40:01:bc:d0:4f:e5:57:
37:27:b1:55:e8:f5:70:57:62:95:03:ca:8d:0a:d8:
95:78:4d:e2:d6:cc:fb:22:b8:24:e9:80:50:98:12:
6c:bd:06:15:74:cb:a4:44:63:9c:81:96:24:a1:23:
c2:39:20:de:16:3b:2b:aa:ce:b2:df:e4:6b:c6:64:
87:3b:a9:56:22:1d:3b:3f:80:bc:14:0a:80:a6:95:
5d:91:fd:f9:b0:e5:ad:03:c7:ad:1c:2b:e4:b8:ee:
34:8e:d6:97:4e:a2:4f:ae:92:37:44:f6:3e:8c:6f:
b5:ce:c7:8e:52:7c:3c:33:d0:a7:1c:68:2e:c8:02:
6c:dc:79:79:50:bc:c3:e4:06:01:c8:d2:a3:cf:93:
00:20:61:0a:0c:61:13:58:a4:bb:55:05:7c:77:8d:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:0A:08:C6:34:46:64:01:9F:25:2F:9A:F9:61:BF:A9:6A:B0:AD
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/TXQKCMY0RmQBnyUvmvlhv6lqsK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6e:2f:dc:0e:9c:74:54:ab:96:52:23:0a:6a:3d:89:bf:a0:
25:c2:ea:2f:60:f0:57:38:56:4e:56:7c:eb:bb:6d:33:df:6b:
db:fe:56:19:bc:9c:37:9c:4f:ca:b3:b8:25:9c:02:36:2b:2f:
87:4a:f1:d8:4a:78:8c:30:03:6f:3a:8a:ab:74:e4:cd:83:d9:
df:2c:25:ec:2c:8e:e2:3f:b3:16:f4:bd:cc:b4:d2:38:c9:e6:
df:4b:52:51:b6:d4:58:55:54:a8:1d:ee:1f:d2:c6:f1:f3:f4:
6a:9e:ae:84:d6:6a:99:17:97:ab:31:d6:e0:8f:29:e1:af:44:
57:bc:aa:aa:91:b2:d4:84:ef:76:f1:6c:d8:c1:28:5d:55:9f:
5a:9b:ac:5b:ba:b5:ac:5f:d6:55:53:71:2b:2d:29:c9:e7:8d:
30:e4:67:22:1c:7f:af:bc:fa:fb:17:e1:c1:39:a8:36:13:eb:
9b:bc:7b:2a:19:d0:26:e4:f7:f6:9d:2f:c8:34:cf:26:b9:58:
2a:37:4f:b1:47:bf:93:23:e9:eb:b9:d6:28:1a:f8:50:fe:d0:
8f:cf:a9:39:99:17:49:b4:07:41:76:51:b2:5b:28:b1:83:95:
aa:36:2a:d3:d1:ee:b9:8b:dc:07:3d:aa:5e:96:44:98:a5:d4:
d9:ff:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:39 2025 by rpki-client