Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/1tilC1_jin8srVsrV1j052DulGk.roa
File: 1tilC1_jin8srVsrV1j052DulGk.roa (raw, json)
Hash identifier: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=
Subject key identifier: D6:D8:A5:0B:5F:E3:8A:7F:2C:AD:5B:2B:57:58:F4:E7:60:EE:94:69
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 0194244554DF14A85A033043DAE7CEBDD452
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/1tilC1_jin8srVsrV1j052DulGk.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21113
IP address blocks: 193.202.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:df:14:a8:5a:03:30:43:da:e7:ce:bd:d4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d8a50b5fe38a7f2cad5b2b5758f4e760ee9469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:08:03:bb:cc:5d:88:95:55:18:98:ac:6a:
3f:0b:c3:45:c3:08:30:e0:bf:51:ca:60:d0:2c:fb:
c5:b1:f7:00:16:37:89:c7:bc:cd:d1:d2:46:af:48:
a6:e9:18:ed:d2:dd:f1:b2:63:ec:f1:49:bb:8e:07:
37:b3:70:51:14:51:84:81:e1:d2:55:29:32:9e:54:
7e:e4:5a:c1:1b:22:c2:33:ff:ed:5a:b5:1f:8e:37:
fa:d3:6d:e1:02:f0:8a:98:24:af:8e:0f:26:21:90:
3c:36:bd:ac:dc:89:c8:42:3e:f6:e2:5e:03:f6:04:
26:8f:16:f6:65:aa:c0:3e:c9:bd:81:eb:79:03:7c:
bf:a9:76:41:41:4b:d7:c0:d4:f2:70:57:53:87:00:
99:68:5a:2f:74:08:6e:98:e0:0c:7f:72:23:10:99:
d5:b9:44:37:39:2e:09:aa:2e:1b:78:95:d1:80:3e:
eb:55:09:86:6f:76:35:61:47:ce:53:6e:3a:dc:75:
93:19:c2:1a:ba:b1:6e:26:aa:d7:b7:49:31:ac:15:
eb:90:ba:e6:55:79:4e:7e:a7:88:11:2d:a3:32:85:
bb:d3:f1:27:8b:8e:e0:d7:1d:92:b6:92:34:67:c7:
ac:40:cf:07:9e:5d:64:50:e6:22:65:a6:74:8b:a0:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:A5:0B:5F:E3:8A:7F:2C:AD:5B:2B:57:58:F4:E7:60:EE:94:69
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/1tilC1_jin8srVsrV1j052DulGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
96:3f:3f:57:40:9f:be:76:ac:31:ca:fc:39:b7:70:0f:3f:5a:
f9:bb:c9:bb:1f:e3:f8:c7:7f:8a:5a:9a:1b:09:e6:e6:b4:02:
d8:ed:78:3d:17:b6:e5:5c:49:00:b7:fa:5b:57:1b:be:2b:9c:
ce:95:aa:53:bf:83:e1:4d:04:36:bc:ed:2b:48:5b:cf:68:ed:
76:54:f0:de:19:b7:34:0a:0e:5c:5d:05:ca:47:5d:20:c9:05:
69:ca:87:e5:ba:2f:3c:21:05:d8:74:58:66:e9:75:6c:95:9b:
11:9b:7c:ab:0c:0a:3c:ae:7f:c3:09:36:ee:72:4c:77:4b:b5:
c4:9d:c1:43:49:68:6d:29:d9:b0:32:6c:80:20:5e:4a:cd:7a:
c0:ba:2a:d0:0b:45:5b:8a:6f:c9:df:99:54:c0:76:df:25:f0:
11:ac:2e:a0:71:58:3d:7c:89:5d:e9:f0:07:32:45:5d:d9:74:
70:5e:1a:a7:30:a8:99:3c:d1:51:8e:c8:6e:47:82:20:77:b0:
33:c9:17:cf:c7:4a:cf:f1:70:00:ea:de:7f:40:d0:a9:ea:bb:
b4:90:17:ce:fe:63:80:50:9d:e8:01:00:99:3d:a5:b2:f7:9d:
ff:a0:d4:8f:0a:cc:dd:52:fd:30:b3:f3:fb:6d:c5:f2:33:f4:
44:c2:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:40 2025 by rpki-client