Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/Txjk9Q-NlKUyXpTGH5ggytB3s5M.roa
File: Txjk9Q-NlKUyXpTGH5ggytB3s5M.roa (raw, json)
Hash identifier: Kk2fD619t4BpgDLnszllBYvgehIp5jIrZidDnVb2ll4=
Subject key identifier: 4F:18:E4:F5:0F:8D:94:A5:32:5E:94:C6:1F:98:20:CA:D0:77:B3:93
Certificate issuer: /CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Certificate serial: B83AAF
Authority key identifier: A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/Txjk9Q-NlKUyXpTGH5ggytB3s5M.roa
Signing time: Sat 01 Jan 2022 06:06:31 +0000
ROA not before: Sat 01 Jan 2022 06:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203641
IP address blocks: 193.111.170.0/23 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12073647 (0xb83aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Validity
Not Before: Jan 1 06:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f18e4f50f8d94a5325e94c61f9820cad077b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:53:d8:0a:d1:86:c6:d8:4f:e8:ce:9b:ec:
43:f4:f4:10:75:75:3e:c5:77:2b:45:10:07:31:1e:
56:d0:50:be:31:79:dd:f9:99:89:f6:63:9e:70:7f:
94:42:4c:55:8e:18:15:03:24:50:25:09:0b:80:c4:
d7:75:89:26:11:42:73:02:1d:74:83:9b:a4:f7:56:
a8:26:71:c0:84:96:ff:3d:9b:cf:2b:48:cf:2e:c8:
f7:d5:89:0f:05:08:53:11:df:51:01:47:4a:70:39:
ae:0d:b1:c0:15:f1:6c:dd:4d:dd:5d:1a:6c:8a:f7:
4e:c3:d5:01:23:18:b7:0a:91:c2:a1:62:09:62:38:
e0:b8:6e:b5:ba:4d:57:7e:3b:d6:d8:93:00:ef:4c:
b7:82:1f:79:d6:8f:17:ed:d3:2b:e5:15:7a:b1:7a:
da:cc:49:f6:f0:e5:2e:40:2b:f0:58:58:73:37:29:
1c:5f:70:56:59:12:c7:b6:e7:a6:00:35:eb:7a:d7:
f5:ed:c3:fa:2d:c4:21:76:e0:06:1e:42:29:ff:c0:
9f:b4:8e:61:3a:67:74:0b:0e:b0:5b:4f:aa:32:3c:
cc:37:23:17:51:0b:2f:68:54:ea:2f:1a:11:36:37:
95:93:0f:cf:60:7f:2d:3f:b1:04:d2:a5:20:60:d2:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:18:E4:F5:0F:8D:94:A5:32:5E:94:C6:1F:98:20:CA:D0:77:B3:93
X509v3 Authority Key Identifier:
keyid:A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/Txjk9Q-NlKUyXpTGH5ggytB3s5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/pT5G7QRzDRXJ106sQQ3enNw2PPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.170.0/23
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
21:d7:25:0d:1d:2b:71:9b:1c:ef:6f:31:16:c9:5b:b9:32:eb:
bb:71:a8:d3:20:5a:df:29:5a:46:16:e3:d1:c1:09:f7:b3:53:
e2:a7:b6:27:b6:39:63:77:69:aa:88:d2:65:04:ab:5d:86:43:
f3:91:ab:2c:84:63:f9:43:6c:68:68:fd:4b:c2:2d:18:6f:41:
3b:d1:c8:1c:2f:d4:35:3f:19:df:8f:72:45:92:65:2a:6e:fc:
10:10:c3:f7:50:ec:fe:c9:f9:0c:54:ba:ba:7f:c5:e7:28:f4:
b5:2d:0b:ca:c2:02:64:93:01:b9:b1:0c:40:4f:bd:21:8e:5b:
6a:11:fe:3a:7a:61:fa:90:c5:44:69:d1:6e:66:01:38:c2:72:
7a:de:79:55:eb:aa:5d:c9:71:64:3e:47:0e:ae:34:10:ad:b4:
01:d4:e2:57:d2:a9:ab:73:32:48:75:06:11:16:bd:6d:2f:0a:
c1:73:c8:5c:46:e5:f7:95:db:ee:a1:3b:c6:84:5a:bd:8e:2c:
f4:30:68:5e:03:22:73:96:a7:cd:15:f4:50:55:a6:13:a7:7c:
80:2c:a5:55:92:fb:d5:12:62:e4:95:6e:98:72:76:e4:2f:3a:
3e:7d:8f:73:a9:a2:8a:8a:b8:76:7d:9a:ef:28:f1:89:64:0b:
21:53:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:22 2025 by rpki-client