Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/TQEL8IwnXosJ9tazqGpCwWROOS0.roa
File: TQEL8IwnXosJ9tazqGpCwWROOS0.roa (raw, json)
Hash identifier: hxeCOROdTfJvx2OFbPtwuh0C0all8fInsfmaLo1rRnE=
Subject key identifier: 4D:01:0B:F0:8C:27:5E:8B:09:F6:D6:B3:A8:6A:42:C1:64:4E:39:2D
Certificate issuer: /CN=ed5356c1c81877a01f57123b3f58f3ab686147a9
Certificate serial: 0186DBA205EC4208AF207C24C96F387B03D0
Authority key identifier: ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/TQEL8IwnXosJ9tazqGpCwWROOS0.roa
Signing time: Mon 13 Mar 2023 15:41:13 +0000
ROA not before: Mon 13 Mar 2023 15:41:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43201
IP address blocks: 193.3.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:a2:05:ec:42:08:af:20:7c:24:c9:6f:38:7b:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5356c1c81877a01f57123b3f58f3ab686147a9
Validity
Not Before: Mar 13 15:41:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d010bf08c275e8b09f6d6b3a86a42c1644e392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:63:0b:07:35:f9:42:3e:3d:ad:f6:ca:49:
28:e9:f8:5a:f3:dd:f7:fa:b9:76:44:a8:5e:5c:a1:
57:f6:f9:35:ee:4c:c2:35:0f:02:5c:9f:bb:85:27:
bd:88:6b:47:f4:a1:87:91:af:0c:7a:3d:d8:b5:95:
8d:c3:bb:c5:25:c0:ad:fd:1f:76:f8:1a:a5:d1:51:
fc:d3:22:bb:87:80:af:40:06:5e:8c:34:ee:fe:11:
de:dc:90:26:37:38:11:51:4b:59:46:8c:44:76:da:
2e:21:b4:af:b2:c3:83:9e:2c:c6:5d:ce:e7:48:6b:
da:ea:fb:f0:95:17:8a:bb:1f:e1:c9:46:89:49:3d:
b0:96:13:a0:5c:c7:c4:db:ab:45:03:60:4d:1f:f5:
d3:ac:e1:83:d4:7a:bf:b0:f4:26:75:c7:5f:83:d1:
98:db:28:93:06:17:ee:62:fa:cb:4c:e7:e5:79:41:
b5:35:ce:95:58:d0:d3:ef:38:71:bd:9d:db:f0:3f:
e7:66:b9:eb:be:ea:a9:ca:08:dc:f7:79:61:61:c3:
ab:0d:da:e8:c0:2c:69:0a:e2:84:d8:ef:7c:a1:be:
96:d2:27:fd:4e:fe:4d:5d:43:8b:ae:98:b3:d9:7f:
02:3f:fa:ca:10:3f:ff:10:2a:ab:8e:04:09:2f:ff:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:0B:F0:8C:27:5E:8B:09:F6:D6:B3:A8:6A:42:C1:64:4E:39:2D
X509v3 Authority Key Identifier:
keyid:ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/TQEL8IwnXosJ9tazqGpCwWROOS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8a:0f:05:3a:00:39:87:8d:5a:95:4a:f2:65:1d:6a:43:e3:
21:9e:a0:49:7f:44:02:bd:5a:63:98:d4:f3:a2:de:a9:18:14:
e5:92:4b:b8:4d:2c:a9:62:e3:16:4c:a6:5c:b9:75:97:a5:84:
23:02:1b:f9:b7:bc:70:ed:f7:94:0e:fb:ae:89:80:53:d5:04:
c6:e1:e6:0b:72:71:b2:4d:1f:4e:75:82:eb:46:99:45:24:d1:
8f:36:a8:26:96:a7:bb:03:e3:f1:da:56:36:b1:90:b2:3e:05:
1a:6b:c5:8c:f9:48:ef:e2:75:0a:0f:e6:29:e4:58:9b:99:23:
ca:8d:c8:96:8e:90:c9:18:9c:04:a1:09:2d:06:04:49:f6:a5:
5e:4a:4d:df:fc:52:02:6a:20:93:90:b4:d1:59:1d:72:da:81:
25:cc:18:e8:4d:1c:58:61:ee:2f:54:b4:6f:c7:c7:39:fa:ac:
b3:04:a3:e1:8c:78:9e:ed:79:23:a9:ed:13:23:5b:cd:e9:22:
2f:b9:42:7a:35:0d:c2:6d:d9:79:1c:b7:fc:52:74:cc:38:a5:
61:f7:27:33:b2:81:29:1d:6f:b0:86:95:41:10:8c:70:f1:dc:
01:2f:45:ad:db:f6:e5:fc:34:07:78:43:a0:a2:37:dc:57:1b:
a0:07:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:46:15 2025 by rpki-client