Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/TsCWDxVff6QaxaizE0J-q4omkO8.roa
File: TsCWDxVff6QaxaizE0J-q4omkO8.roa (raw, json)
Hash identifier: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=
Subject key identifier: 4E:C0:96:0F:15:5F:7F:A4:1A:C5:A8:B3:13:42:7E:AB:8A:26:90:EF
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01941F8C29ADF671E13DD819F9BB3E818F22
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/TsCWDxVff6QaxaizE0J-q4omkO8.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207493
IP address blocks: 94.231.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:ad:f6:71:e1:3d:d8:19:f9:bb:3e:81:8f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ec0960f155f7fa41ac5a8b313427eab8a2690ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:d2:9e:bd:32:ec:95:e0:56:61:14:87:ae:
fb:15:37:6f:5b:07:e8:50:7a:56:5e:b1:93:85:d8:
35:9a:be:f0:ae:77:16:d8:83:8b:a6:1a:a9:b7:40:
db:57:90:3b:dc:fb:20:71:57:31:4c:37:60:60:1f:
18:87:11:e5:59:4b:50:29:70:db:70:69:f3:5d:ba:
a6:39:b5:eb:be:0d:37:09:67:de:21:eb:4a:06:57:
4d:11:3a:5a:22:26:cb:1e:e2:75:c2:7a:e7:4d:62:
06:21:7c:67:0e:66:a6:12:b4:20:16:e2:bb:5b:10:
7e:62:5e:98:f4:5d:f2:b9:bf:04:ef:17:3f:fe:a2:
10:85:43:21:a1:13:73:35:b3:24:b7:1d:ed:b9:9a:
cc:29:ad:b4:a8:d7:a0:ee:86:ee:9a:47:0c:a9:53:
ed:cf:cc:8d:7a:63:a2:f3:15:a2:d2:64:8a:32:45:
4b:52:a7:f4:ba:21:25:06:71:23:be:c9:cb:c0:51:
3a:59:31:d6:6c:7d:81:fc:aa:3b:1f:4c:02:5c:75:
5d:fe:31:ef:d6:b7:21:0c:0a:ca:cd:66:d7:3b:98:
e7:11:11:d5:7e:a0:8d:16:96:a8:e7:bd:e9:79:e7:
87:b5:8c:1f:8d:71:59:a9:5a:a5:4f:a5:83:4d:26:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C0:96:0F:15:5F:7F:A4:1A:C5:A8:B3:13:42:7E:AB:8A:26:90:EF
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/TsCWDxVff6QaxaizE0J-q4omkO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.193.0/24
Signature Algorithm: sha256WithRSAEncryption
53:87:01:b0:8b:c8:1b:ac:30:b0:a9:3f:32:90:62:e3:48:b9:
f4:bd:46:0d:d9:73:a4:f8:16:50:f6:13:0b:de:c0:05:4b:ee:
bc:94:bf:2d:2c:a8:32:6f:e8:73:3c:d3:f6:df:42:96:ea:12:
b3:4b:48:9a:1e:12:c5:03:f8:3d:81:ed:fe:c5:ce:fe:2e:75:
b7:6f:84:58:5c:ad:f0:7f:42:af:23:40:b4:b3:f1:a4:f0:94:
6d:d4:5d:27:7a:39:11:d5:b1:71:71:90:ac:bb:d5:7f:89:60:
50:2a:da:81:7f:0b:37:67:f6:b1:36:f4:50:92:13:69:aa:08:
21:7d:d9:6a:92:93:26:17:c1:c5:95:79:fb:ca:e0:f8:cc:b5:
e0:60:77:08:7a:64:4e:bf:00:e0:bd:b6:db:f3:b0:9d:09:21:
f5:82:cf:70:a4:14:7e:2a:9a:c6:2b:20:ac:0c:f2:ad:93:ee:
60:d5:cc:c5:fa:55:ae:72:61:27:0d:04:7e:c7:c4:c9:86:07:
c0:ae:35:c1:4f:63:b7:90:b7:2b:19:29:33:46:0b:ca:a3:cd:
bb:51:bd:dc:b3:f4:58:dc:b9:5d:f5:87:85:5a:34:5b:1d:71:
83:cd:c9:5d:9b:b9:9d:1d:b9:e6:fc:f6:a3:10:ac:30:f9:48:
e3:24:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:59 2025 by rpki-client