Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa
File: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (raw, json)
Hash identifier: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=
Subject key identifier: B7:D6:91:83:B1:01:62:2F:DE:1E:AC:2D:53:A1:DE:A8:15:51:B4:ED
Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial: 01942220157D0ED513982577F9DC827F4DAF
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209418
IP address blocks: 193.17.80.0/22 maxlen: 23
2a0c:7d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:7d:0e:d5:13:98:25:77:f9:dc:82:7f:4d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d69183b101622fde1eac2d53a1dea81551b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:45:76:c6:2d:0e:2e:ba:ee:10:e0:93:2c:
0d:a4:c9:ac:ad:4e:a7:49:d1:91:66:fc:8c:5a:8e:
63:ef:c6:62:5a:f7:36:ca:fb:9e:fd:05:7a:e9:ac:
ac:8b:7d:b9:6d:88:19:0f:3a:9a:df:ad:a2:ca:bf:
59:de:ca:22:5e:20:89:a8:d0:52:fa:61:e9:61:b0:
aa:69:2c:ae:eb:19:49:36:35:dc:a7:f3:00:b8:a7:
33:08:80:e4:cf:e5:73:66:79:09:e1:15:31:ad:5a:
7a:3b:00:d1:d3:2c:6d:bc:0e:1c:45:fd:44:18:a5:
e9:6a:f8:69:d2:ca:61:15:50:84:1b:5b:41:31:5d:
fc:d9:3c:85:0c:c3:ca:02:14:a3:d7:8c:b8:b3:b5:
0c:65:93:03:14:16:56:c2:9e:26:a7:9c:58:28:0c:
01:74:af:17:a1:55:5e:3c:04:37:fe:00:8e:82:79:
70:26:af:5d:61:f9:a9:cd:f4:f0:88:e9:e2:59:8b:
95:87:70:9d:cf:0f:46:04:2b:97:c9:b0:ad:4b:b5:
b3:50:1f:36:20:35:56:bf:60:59:bc:17:bb:42:5f:
1d:33:72:87:62:90:42:c2:00:47:a4:5c:15:63:11:
8a:0a:81:9e:4b:92:7f:7f:f9:53:ab:ae:48:fe:08:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:91:83:B1:01:62:2F:DE:1E:AC:2D:53:A1:DE:A8:15:51:B4:ED
X509v3 Authority Key Identifier:
keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.80.0/22
IPv6:
2a0c:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
38:36:cf:21:9f:b4:cd:1c:36:2d:a7:4b:03:bc:a4:f6:9d:13:
fd:41:1d:1c:ca:76:4e:47:9c:9b:c7:ab:d6:a2:4e:71:40:ac:
06:b8:37:12:ad:44:ed:6f:a3:c2:2b:19:8e:1a:90:b2:17:10:
4e:d2:14:f7:89:8f:a7:92:31:59:6b:4e:5d:c5:d5:08:30:64:
c2:f4:15:ae:ab:99:e1:df:df:45:ea:f8:16:7a:01:73:93:ff:
81:8f:90:bf:00:00:66:cf:07:14:d2:c6:1e:ca:ba:60:8c:2e:
0e:48:22:bd:55:d1:42:f7:01:88:33:44:bf:16:74:77:12:bc:
af:30:22:03:ad:20:0a:00:09:37:28:a5:0e:1d:55:39:53:75:
ca:8f:73:cc:c3:22:32:86:f6:57:a5:07:f4:b9:bc:7a:c6:cc:
e7:24:5f:59:83:15:29:25:ac:da:47:81:fe:fc:08:43:30:a4:
22:fc:99:e7:17:78:84:db:e9:f7:98:f1:28:f0:1f:69:70:88:
74:1a:65:4c:18:00:48:58:b1:83:70:6c:5e:9a:ec:f5:17:07:
4e:5b:a8:a1:0b:97:a7:5e:42:e4:22:01:5d:f9:09:bc:e3:ef:
e0:07:83:16:df:48:a1:1f:79:d8:c2:71:74:37:9d:d5:f5:37:
07:69:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:07 2025 by rpki-client