Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/tZdMpKDB98hJ9pZj681_6AcpB6s.roa
File: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (raw, json)
Hash identifier: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=
Subject key identifier: B5:97:4C:A4:A0:C1:F7:C8:49:F6:96:63:EB:CD:7F:E8:07:29:07:AB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019423D6E93B3DE62A01E616A77A2DBE7C5A
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/tZdMpKDB98hJ9pZj681_6AcpB6s.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15536
IP address blocks: 194.26.22.0/23 maxlen: 23
194.26.22.0/24 maxlen: 24
194.26.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e9:3b:3d:e6:2a:01:e6:16:a7:7a:2d:be:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5974ca4a0c1f7c849f69663ebcd7fe8072907ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:cd:b7:bc:92:72:9b:93:77:3a:3e:b3:0b:
f3:60:9e:38:c7:33:ba:ef:23:b1:d7:2f:ea:c2:9a:
d5:71:0c:30:0a:52:c8:9e:bf:6a:a0:05:56:84:8a:
6c:92:d6:6b:0d:8f:2a:32:f2:9c:78:67:4c:c0:7b:
68:28:7d:2f:77:6d:36:fb:77:d1:eb:a4:e6:af:8a:
7a:00:a6:9a:f6:28:d1:b3:c6:fd:d8:fb:62:7e:96:
59:75:55:16:c3:8f:1a:92:a9:f4:7b:7e:a2:14:fb:
2c:90:64:43:11:c6:28:2b:f8:04:99:88:bc:ff:c9:
de:17:ef:b4:ef:80:ba:55:b6:f8:4a:b0:4a:16:46:
7c:a1:0e:8e:90:d7:6b:99:d3:21:52:97:4c:e1:09:
85:fe:b8:2d:f3:2c:79:b0:78:e0:8a:c7:43:ba:53:
e5:e1:e5:90:0f:d7:ec:32:f4:7a:3c:5e:6c:04:72:
31:2d:0e:38:af:07:ac:86:94:5b:9c:c5:7a:ec:ab:
d0:da:3d:fe:4a:6e:9d:7c:25:de:8d:f2:f5:64:03:
6b:bc:5e:82:3a:ce:73:26:38:2a:da:52:84:72:75:
be:c7:01:b1:d8:4f:44:0e:a3:43:a9:45:0f:e7:f8:
2d:ef:2f:80:64:e1:9f:0b:3f:f7:9c:c6:33:68:9f:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:4C:A4:A0:C1:F7:C8:49:F6:96:63:EB:CD:7F:E8:07:29:07:AB
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/tZdMpKDB98hJ9pZj681_6AcpB6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.22.0/23
Signature Algorithm: sha256WithRSAEncryption
95:de:fe:3d:55:fc:73:a7:f1:86:d8:56:85:39:d9:3a:68:fe:
8b:f2:a3:5f:52:74:2e:5b:e0:83:bf:e2:03:68:d9:fd:bf:d8:
e7:65:b4:18:29:d2:09:f7:49:8a:a0:0e:80:b4:dc:83:37:8e:
b6:a3:ee:36:75:8b:84:4c:ec:88:a1:ec:1e:06:01:ce:e3:80:
76:92:7d:c2:e4:05:fa:be:fa:8b:eb:58:7c:08:09:e1:6b:f9:
41:93:cc:78:79:39:a5:4c:e9:40:45:7c:fc:53:aa:01:5f:1b:
36:8b:cf:47:eb:07:64:01:48:6a:3c:93:7b:73:06:0e:53:4a:
a0:8b:bc:f8:cf:af:a4:a5:60:f6:0f:21:3c:8b:34:d4:96:f5:
b3:5e:f2:c8:ca:46:80:88:eb:14:7d:fd:59:04:d2:92:38:c0:
d8:89:74:0f:65:6b:ad:2c:f2:8d:83:34:49:c4:28:c8:4c:c9:
62:91:32:90:a7:2a:91:0d:82:67:2a:5c:ec:a2:0d:e0:b4:70:
68:a3:9b:8a:82:67:2b:21:af:5a:39:6e:51:f4:fd:72:d5:6c:
9f:ac:0b:ae:8a:d7:16:7e:ba:aa:66:01:ef:fe:82:6a:5c:7d:
32:50:27:5c:6b:7f:59:aa:84:82:5e:17:91:26:23:3d:db:dc:
3a:4d:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:12 2025 by rpki-client