Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/tst0w9cbQNBfGvPhKg-7OP38PnA.roa
File: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (raw, json)
Hash identifier: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=
Subject key identifier: B6:CB:74:C3:D7:1B:40:D0:5F:1A:F3:E1:2A:0F:BB:38:FD:FC:3E:70
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019422FBA425DFCBB7E35C852CBD2A42E17D
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/tst0w9cbQNBfGvPhKg-7OP38PnA.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39637
IP address blocks: 193.203.225.0/24 maxlen: 24
193.203.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a4:25:df:cb:b7:e3:5c:85:2c:bd:2a:42:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6cb74c3d71b40d05f1af3e12a0fbb38fdfc3e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:66:7b:01:da:e5:e0:cd:47:aa:fa:5f:68:
f4:14:cb:c8:ef:0e:28:fd:d7:fd:d0:77:71:23:74:
f1:75:b8:93:14:ca:5b:6b:9a:2f:e5:5b:1d:f4:af:
27:f9:38:5c:6e:a2:cf:07:62:f5:ad:e3:48:bb:4e:
5a:82:06:56:81:3f:4c:73:4f:91:4f:ff:1e:fc:8c:
3a:5f:8e:55:cd:be:2c:3d:46:92:e0:cd:7c:54:e7:
72:b5:d8:e6:94:ba:06:2e:79:7f:ae:f5:dc:a9:ef:
4e:d3:5c:43:53:13:d9:d2:9f:92:f6:9d:96:f5:1a:
e7:6e:63:9a:a7:af:1e:2a:50:02:c7:7c:30:28:4f:
6f:06:a1:a0:ee:8d:e1:8e:6e:07:47:fa:d9:c3:27:
ce:28:89:19:68:d1:42:5b:f2:4e:52:6c:b6:d1:ec:
ea:2a:98:85:ca:59:a7:8b:b1:3f:5a:d9:92:d7:b8:
bb:ad:63:88:e6:f6:0d:15:5b:c7:61:a2:d5:6a:8b:
b8:40:45:ce:21:f8:60:52:43:ee:11:32:0c:25:44:
99:dd:45:26:3d:c6:81:3a:e2:b1:3c:25:40:7d:97:
41:d3:5b:8b:c6:a0:39:0b:d6:ca:d2:5d:26:b2:5b:
41:fc:21:77:41:a9:aa:8f:4e:a3:54:ef:05:0f:a0:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:74:C3:D7:1B:40:D0:5F:1A:F3:E1:2A:0F:BB:38:FD:FC:3E:70
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/tst0w9cbQNBfGvPhKg-7OP38PnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.225.0-193.203.226.255
Signature Algorithm: sha256WithRSAEncryption
b4:dc:7e:5e:39:95:e8:18:e0:ff:be:78:dd:54:10:3b:3c:e2:
89:98:33:7b:92:8a:b8:be:a9:7a:2e:1f:57:ea:33:28:bb:ec:
d2:f7:8f:fd:3b:61:66:5c:24:c9:9b:42:8d:c7:10:75:ab:d4:
f3:34:a0:24:16:a7:21:09:cd:f4:c1:4c:65:21:7e:93:78:f9:
03:12:69:68:34:fc:2a:a1:6a:26:32:cc:b2:97:da:47:4e:42:
4a:2b:4d:93:f9:0f:da:9f:1a:35:12:eb:71:49:49:8f:d2:8f:
99:c0:7c:4c:94:20:df:f8:53:03:a4:bb:50:52:b0:8c:91:a7:
ad:75:61:5e:30:f0:2c:e6:80:9b:6c:d6:74:f8:f2:3d:33:8e:
a9:fa:ba:53:f3:79:c4:33:40:25:d9:22:07:4a:02:c0:3e:b6:
61:2b:b2:40:0c:0b:6a:9c:aa:55:fd:09:07:f5:80:d8:09:49:
10:81:16:b6:3b:15:a1:48:d8:c7:20:53:23:78:1b:06:09:ee:
7e:27:b8:95:9c:7f:f9:a0:69:f5:34:fc:b4:b6:2e:ae:21:64:
cf:4c:94:f7:25:eb:7e:4a:19:65:da:51:07:00:83:95:d4:31:
55:7a:7d:27:92:ef:fa:27:f7:35:90:36:95:48:fe:6f:b0:f8:
f0:0f:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:37 2025 by rpki-client