Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/TVVwgauLv5P4p_N1MbSMDHrhgkU.roa
File: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (raw, json)
Hash identifier: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=
Subject key identifier: 4D:55:70:81:AB:8B:BF:93:F8:A7:F3:75:31:B4:8C:0C:7A:E1:82:45
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01941F8C88E8BEEBE3CAB3D513ECD5304FF3
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/TVVwgauLv5P4p_N1MbSMDHrhgkU.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214034
IP address blocks: 2a01:ec40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:e8:be:eb:e3:ca:b3:d5:13:ec:d5:30:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d557081ab8bbf93f8a7f37531b48c0c7ae18245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:18:65:75:71:4c:ba:c2:58:df:7d:b7:1b:
5f:38:cc:b5:81:ca:33:e4:f6:35:f4:5e:88:ae:f0:
bb:d8:d6:86:6c:84:38:54:a5:26:51:e7:ec:ca:af:
17:8f:c3:ff:d3:5d:ee:12:d6:f4:d5:45:12:7a:45:
73:90:00:06:b8:b3:a0:29:f7:4e:31:fd:64:83:5c:
cc:fc:4e:98:7e:3a:ef:10:dc:66:67:e7:2e:72:8b:
e4:86:3c:2a:4d:2c:d7:83:13:21:4a:27:aa:18:dc:
42:f9:aa:70:56:88:a9:11:ab:a6:c0:8c:23:9c:75:
0b:2a:6c:ee:63:f0:e5:b6:19:bc:f6:0a:d1:c9:26:
c2:ed:91:b8:00:0d:f0:33:84:2a:4a:d6:9c:5c:43:
6a:7d:e5:4f:a7:47:2b:01:d4:0f:3b:32:d0:7e:6e:
29:c3:ed:03:fb:98:44:a6:f6:93:4a:ec:a1:3f:c5:
6d:21:44:22:df:70:62:2d:2f:0c:e2:3e:e2:7b:ca:
21:28:4d:99:6a:4a:60:76:c5:22:94:27:c9:6d:4a:
04:47:62:ba:30:4c:51:23:c2:39:c8:32:e0:e7:7f:
b3:5c:dc:53:5c:f4:a1:9e:78:ce:b1:61:92:26:b4:
3e:a0:55:94:fd:cb:f2:c5:6d:29:75:22:7d:68:76:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:70:81:AB:8B:BF:93:F8:A7:F3:75:31:B4:8C:0C:7A:E1:82:45
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/TVVwgauLv5P4p_N1MbSMDHrhgkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ec40:1::/48
Signature Algorithm: sha256WithRSAEncryption
2a:99:91:2d:25:38:0e:7b:6d:58:03:23:b7:6c:18:e5:ca:eb:
1e:43:b2:f5:3b:fc:c0:e9:bb:69:c8:d3:a2:7c:7e:d8:db:c5:
97:6b:ff:58:f2:a4:9a:75:a2:4e:ec:0d:3a:7e:05:22:76:47:
c1:8d:94:c7:d1:6a:94:e7:c6:56:33:45:9c:8c:9f:89:41:3c:
d0:b0:dc:3a:28:e8:de:ab:4a:51:76:1f:96:31:e0:47:ae:fa:
e5:19:da:36:52:d9:55:8c:a8:d1:08:a9:4d:04:70:89:07:89:
b2:df:cc:35:8c:f8:83:b7:47:76:b4:c2:a1:83:aa:de:8b:96:
d6:a0:f3:a3:d4:64:43:ca:14:6e:97:70:7f:28:b4:c4:16:64:
eb:f7:17:e5:33:e3:e7:7b:3a:bc:5e:a7:86:27:9f:37:f4:9a:
6a:61:26:22:21:ae:42:0a:68:58:22:2a:6d:62:fe:ad:0b:f8:
ba:5b:49:22:86:9a:26:f2:9f:c3:e4:a8:ba:92:fa:15:4d:0f:
97:50:20:c3:ae:48:ea:93:d0:80:bb:ab:58:3f:4f:ff:4f:7e:
26:b9:eb:20:6f:39:ae:f9:9a:3a:cc:43:5c:b8:2e:35:6d:bb:
f7:2e:6c:45:75:32:5f:d2:ce:1a:97:7e:4e:d0:b7:30:c3:a9:
7f:c3:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:14 2025 by rpki-client