Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa
File: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (raw, json)
Hash identifier: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=
Subject key identifier: 4E:B9:53:66:03:E0:0A:5E:16:D2:37:D7:2D:4B:46:39:39:E3:08:22
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0194252194B2373EC6195F0F8478B2B0CF1D
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202664
IP address blocks: 81.92.240.0/22 maxlen: 24
217.196.64.0/19 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:94:b2:37:3e:c6:19:5f:0f:84:78:b2:b0:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eb9536603e00a5e16d237d72d4b463939e30822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:5e:97:2a:23:7a:c3:a5:f1:2a:7f:7d:ff:
be:6d:e7:17:79:c5:b0:d8:e7:aa:d3:22:c6:57:fb:
a5:1c:59:9c:98:bc:e4:23:ca:66:69:d4:5f:49:12:
19:69:46:dc:e5:50:9a:3a:50:35:c4:7e:23:a1:fc:
45:04:7a:76:1a:2f:97:c0:10:d2:29:af:2c:31:3c:
dd:da:a5:3f:c7:8d:82:f3:ae:28:dd:f8:a9:d2:6e:
bd:6a:62:1f:20:73:e6:71:b1:af:cb:5d:46:61:2e:
ca:52:a9:aa:b5:07:fb:7f:50:cf:78:ae:37:8c:9f:
3e:97:41:85:fb:80:3a:e0:36:62:88:e3:e3:8c:d0:
3e:fa:08:4f:b8:4a:ac:79:e8:3e:dc:d8:0d:34:4b:
ba:4d:25:c3:78:af:6f:9f:e7:bb:29:48:3b:44:8b:
68:fa:9d:4d:2f:5e:11:88:c3:e6:8f:3a:86:b3:8c:
5d:89:7d:fa:ea:4d:8d:99:bc:d6:ab:91:c3:26:c6:
99:b5:40:c7:c3:08:1b:ef:fd:79:f5:1c:7d:db:06:
1c:3b:8d:c8:0c:79:c9:de:94:3d:b3:99:f8:16:ad:
84:29:8f:86:7f:c0:c3:87:e5:8f:d3:f7:0c:51:c6:
3f:7e:ee:c6:d8:dc:63:b5:11:1b:48:61:eb:e0:96:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:53:66:03:E0:0A:5E:16:D2:37:D7:2D:4B:46:39:39:E3:08:22
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.240.0/22
217.196.64.0/19
Signature Algorithm: sha256WithRSAEncryption
82:03:17:92:9a:e1:b4:6c:ef:91:a2:3a:83:87:de:aa:57:9c:
cc:00:ec:5c:66:93:21:c6:1b:19:cc:5a:29:83:fe:0a:9a:57:
fe:bf:70:46:40:00:08:c6:8a:e1:9c:56:e2:9a:99:d5:94:bf:
86:c3:b8:e7:b5:3e:7f:d4:9e:f2:85:30:9a:02:b7:31:fa:82:
cd:18:28:c4:49:9d:9d:a1:20:44:02:8e:f4:b2:c1:ac:10:21:
f1:08:54:c2:6e:b9:95:c5:45:17:55:79:66:c9:a3:1d:39:a1:
9e:e9:da:90:5d:d0:6a:df:cc:c2:8e:5d:39:07:d9:e7:b4:54:
fc:72:87:ef:d3:55:61:c2:29:4e:ec:ed:50:aa:1d:e3:73:ae:
25:2a:19:d0:76:40:9f:37:97:0b:a6:cc:0b:7c:3d:35:c9:61:
64:ce:34:d6:74:9a:2f:ac:96:19:05:6a:16:56:5f:d6:79:47:
71:c7:8f:50:ae:71:eb:81:9e:df:9b:9f:b5:52:2c:b3:1f:70:
c5:da:fa:bd:9e:4f:87:49:59:6e:a2:66:3d:8d:8e:b6:b5:fd:
ba:d8:c3:c3:43:34:e4:ff:76:9d:17:15:7a:48:46:2d:84:28:
f2:67:9a:e2:30:8e:33:24:0b:66:82:87:4b:fb:49:6d:dd:45:
8a:2d:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:34:33 2025 by rpki-client