Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/tBxPyLjnbIx5xjl0-BWQAg4xwJQ.roa
File: tBxPyLjnbIx5xjl0-BWQAg4xwJQ.roa (raw, json)
Hash identifier: Tp5u25aISW3QaELFHzvAfNUBuWIKg6RyRE4Kd/gkvCQ=
Subject key identifier: B4:1C:4F:C8:B8:E7:6C:8C:79:C6:39:74:F8:15:90:02:0E:31:C0:94
Certificate issuer: /CN=5c0b45d54e5ff2f779cf2ad13699642c746ba40c
Certificate serial: 0D62F2E1
Authority key identifier: 5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAtF1U5f8vd5zyrRNplkLHRrpAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/tBxPyLjnbIx5xjl0-BWQAg4xwJQ.roa
Signing time: Mon 28 Feb 2022 07:28:14 +0000
ROA not before: Mon 28 Feb 2022 07:28:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34307
IP address blocks: 193.239.116.0/22 maxlen: 22
2001:7f8:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224588513 (0xd62f2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0b45d54e5ff2f779cf2ad13699642c746ba40c
Validity
Not Before: Feb 28 07:28:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b41c4fc8b8e76c8c79c63974f81590020e31c094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:3d:50:2e:69:3d:2c:d1:db:10:60:dc:6f:
91:cb:22:14:65:99:83:09:89:a4:2f:9c:ea:68:69:
f0:f3:8b:f7:a3:1e:55:df:36:50:b1:44:2f:3e:7c:
42:6c:2f:a9:d5:8c:c7:d5:a1:64:73:bd:a6:ac:b3:
a5:a4:e5:73:2a:7c:eb:83:d2:8e:ba:9c:a0:f4:38:
4b:27:33:9a:59:48:fa:18:58:2f:4c:3e:16:d1:1e:
d2:6e:2e:b4:5b:92:2e:dc:31:f0:01:41:fc:74:fc:
5e:74:29:f1:bc:ef:1d:2b:9a:2f:0c:1e:ce:e0:4a:
e8:97:d3:20:db:aa:85:7e:aa:9d:b3:74:11:66:c3:
44:be:b9:8d:91:97:09:02:6f:6b:d6:b2:16:80:55:
01:42:5c:47:a9:34:a9:a3:aa:d0:b7:59:6d:a6:69:
e0:7b:73:4a:84:e1:dd:14:e1:bd:35:31:1e:32:6d:
50:e1:55:c2:08:a6:a4:69:cf:c5:33:13:8f:5d:c0:
ed:ac:f1:56:64:61:93:f9:c8:42:90:6b:87:0f:e5:
c6:19:4e:08:8a:f2:69:17:20:3f:af:20:13:6c:88:
45:6f:6b:cd:74:ea:a3:c1:da:39:b5:03:97:20:f8:
11:30:f7:a3:3e:e3:ab:c1:da:ef:10:36:74:82:0b:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:4F:C8:B8:E7:6C:8C:79:C6:39:74:F8:15:90:02:0E:31:C0:94
X509v3 Authority Key Identifier:
keyid:5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAtF1U5f8vd5zyrRNplkLHRrpAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/tBxPyLjnbIx5xjl0-BWQAg4xwJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/XAtF1U5f8vd5zyrRNplkLHRrpAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.116.0/22
IPv6:
2001:7f8:13::/48
Signature Algorithm: sha256WithRSAEncryption
89:42:ce:21:a8:5d:b9:85:6f:3b:50:d8:65:b9:29:2d:e5:0b:
08:3a:7e:8e:66:41:50:e4:4d:35:e4:5e:8c:e9:bb:32:4a:9c:
ae:81:0a:55:75:ef:87:3d:5b:a2:08:e7:0c:7e:64:66:d7:6f:
bd:f7:68:15:ca:d4:12:91:d1:1e:75:0c:fa:c5:3d:1a:83:da:
a2:b7:87:87:4c:92:fc:2c:1c:68:ef:2a:01:6e:05:ac:38:fe:
a4:9d:50:11:95:35:5e:fc:6f:80:26:0f:2f:2a:75:6f:75:a2:
4b:e0:2e:60:cf:12:bb:6c:c2:00:80:0a:c3:50:e4:05:c7:b8:
9f:52:d6:27:cb:1d:f4:77:e2:3c:88:f3:e6:04:24:ed:71:1b:
5a:a4:d1:de:f3:f5:75:af:f7:94:36:d5:e2:39:8b:1c:af:9c:
84:d5:f6:f6:68:83:82:32:6f:6e:0e:dd:73:65:39:b3:6a:c3:
2a:5e:ed:b3:eb:12:dd:9f:98:4c:e9:ae:28:0b:15:13:c4:79:
e4:17:79:e7:9d:c6:d5:e9:e7:11:05:71:8d:2e:15:e9:5e:20:
23:cb:57:1f:cd:a2:03:56:8f:c3:51:89:06:88:4f:ce:5e:67:
bc:c1:fe:47:b7:a9:91:95:83:d0:5c:09:e2:fa:48:ee:7f:76:
ee:a6:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:02 2025 by rpki-client