Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/t9nkji_Xq4DRGMttbRDw-jVfqPI.roa
File: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (raw, json)
Hash identifier: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=
Subject key identifier: B7:D9:E4:8E:2F:D7:AB:80:D1:18:CB:6D:6D:10:F0:FA:35:5F:A8:F2
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019423D803A69036C205E1ADEF3E26D58B94
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/t9nkji_Xq4DRGMttbRDw-jVfqPI.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41743
IP address blocks: 193.187.156.0/22 maxlen: 22
2a09:c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:03:a6:90:36:c2:05:e1:ad:ef:3e:26:d5:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d9e48e2fd7ab80d118cb6d6d10f0fa355fa8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:c0:2d:da:ed:09:5f:25:d2:3a:ac:a6:88:
f1:15:08:3b:89:9d:48:ad:bb:56:9a:75:e3:82:2c:
15:61:58:ba:52:47:61:1f:06:d0:fd:a4:da:c2:66:
7e:01:3a:e1:da:87:74:20:59:1d:b8:30:42:ce:51:
e5:1e:5d:c0:40:d0:0b:fc:24:59:70:9b:8f:7f:63:
5f:1c:24:b1:f4:13:47:81:77:d1:87:64:0c:ba:95:
9f:68:0f:5a:27:5f:b2:a2:12:3c:11:dc:3c:d4:8f:
7d:c8:e0:d1:83:86:00:78:60:b2:79:95:e5:f8:ad:
ae:0e:cd:a6:d4:0d:5f:b3:d0:f1:0c:9c:83:6d:cf:
52:8e:f9:34:27:fc:6a:5e:ce:c6:9d:cf:07:2c:e2:
6f:b2:b2:45:c4:9d:37:db:b2:e7:69:f2:1b:14:2b:
19:7f:85:91:24:c6:5f:d1:55:76:dc:28:e8:6b:90:
1a:4f:ee:21:63:0d:50:92:76:72:61:b3:80:bd:a0:
d6:42:4e:6d:84:ab:cb:28:b1:21:55:6f:35:72:08:
53:5f:35:b6:fa:19:ed:b4:fc:29:8c:ae:44:01:e1:
dd:7f:05:38:68:e9:ca:b2:89:cc:d9:25:b9:51:b1:
00:c0:0b:2f:d4:49:16:95:a2:21:21:59:37:46:63:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:E4:8E:2F:D7:AB:80:D1:18:CB:6D:6D:10:F0:FA:35:5F:A8:F2
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/t9nkji_Xq4DRGMttbRDw-jVfqPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.156.0/22
IPv6:
2a09:c80::/29
Signature Algorithm: sha256WithRSAEncryption
64:cc:01:e1:ca:23:a6:7e:91:01:2f:10:4c:c7:32:f7:a3:96:
45:c2:2b:10:72:18:d0:4c:d6:51:0b:d4:3e:42:59:65:85:61:
29:42:db:23:1c:c2:ed:43:3b:6f:0c:82:f8:60:8c:81:64:5d:
42:aa:44:47:6b:c3:48:4f:40:1c:0e:8d:ac:06:c3:a8:e9:92:
30:03:93:5b:38:67:75:64:0d:d1:8a:af:a1:e0:ae:a0:7e:ad:
23:72:37:59:4b:a7:a6:ca:5c:0c:98:20:ca:45:2d:e9:6d:2e:
73:b5:5a:1d:ca:bd:cb:db:27:a1:8c:03:24:35:d5:6d:45:f3:
73:88:75:24:33:0b:72:d4:44:62:5c:a1:60:45:32:0d:83:e1:
c1:28:21:0f:e7:47:31:7c:c9:f6:19:12:be:d5:d6:08:61:35:
7c:e4:3b:7e:fd:55:ad:4a:08:ec:ff:13:8b:2d:d3:82:0e:ef:
0c:bc:13:71:ba:d6:0c:f3:d4:6d:1c:1d:87:e2:3e:44:f2:e1:
55:76:4e:df:22:c9:63:26:85:31:98:44:b6:b1:18:ab:c9:67:
d7:33:e2:31:63:4f:2a:2e:5d:a1:e4:2e:26:19:a9:57:16:18:
ca:42:a8:cb:98:59:14:0e:92:60:df:f2:23:b5:42:9a:90:93:
29:29:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:13 2025 by rpki-client