Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa
File: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (raw, json)
Hash identifier: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=
Subject key identifier: 4C:B7:7F:65:75:E9:D9:0D:94:80:89:F0:84:B2:94:10:A8:70:0D:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 01941FFA3E675E20026E4A1C49E17A3754D8
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210974
IP address blocks: 5.44.254.0/24 maxlen: 24
2a12:cf40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:67:5e:20:02:6e:4a:1c:49:e1:7a:37:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb77f6575e9d90d948089f084b29410a8700d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:79:41:1e:ea:a1:21:c5:5e:0a:45:40:0a:
f9:64:bc:20:51:f9:3d:fe:d4:c1:66:a5:b0:9e:ff:
55:ce:22:f9:c9:31:1f:34:6b:de:e8:4b:2b:be:0f:
c6:40:c2:ab:6d:91:26:54:aa:0e:1f:6b:a0:6f:c1:
20:7b:1f:63:fa:ca:3a:72:05:77:e0:6c:3a:ee:e3:
b2:6f:93:1c:fb:af:06:df:fa:6c:c6:bb:97:73:04:
15:bc:e4:4b:01:4d:14:aa:fc:2a:dc:b8:b4:a8:75:
9b:9c:3c:70:d3:e1:ce:96:f2:26:52:ea:c4:2f:1b:
5b:13:50:3b:94:6a:ab:54:c6:a5:d4:55:0c:7b:af:
01:a5:d7:bc:18:c4:cd:5c:2e:30:a2:5d:3d:bb:24:
f2:ce:3a:e9:a6:6f:7f:f4:7c:9d:a0:9c:3b:6b:aa:
48:c2:4f:8c:8b:50:68:e7:ff:7c:e5:ca:7e:be:ee:
54:7a:a6:58:61:bb:10:cb:48:12:5a:8a:3b:20:d6:
53:e0:10:01:87:17:26:94:57:c0:eb:2f:93:b6:66:
b3:00:14:3d:70:84:50:39:e7:f5:45:a9:88:94:70:
c6:20:a9:75:17:00:c5:62:e5:1a:8e:9c:5c:5c:41:
e9:ca:d4:c1:ff:14:10:e4:e9:b3:cb:5c:a9:04:79:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:7F:65:75:E9:D9:0D:94:80:89:F0:84:B2:94:10:A8:70:0D:47
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.254.0/24
IPv6:
2a12:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
96:0b:9b:4b:d7:f1:a2:ab:28:60:6a:ea:29:d8:43:be:c1:11:
97:8f:5b:34:f0:4c:88:60:4d:7e:43:f3:0c:ee:76:fd:3b:a5:
36:e2:c5:19:0e:e3:f5:1d:38:a1:73:2d:6c:32:4c:6b:a4:88:
3a:0d:c9:8e:77:1d:28:93:c3:d3:7d:ea:85:b1:df:d1:54:33:
87:54:a5:fb:35:f1:95:19:a0:a1:94:ac:c8:6c:1d:9b:30:65:
f5:4d:98:68:02:70:05:24:27:dc:35:f7:4b:f7:d3:3c:b4:08:
52:49:ed:30:c6:e3:26:ad:08:53:d3:16:35:76:1b:ac:a8:ac:
10:3c:d4:e9:92:e8:2a:d6:7a:22:51:46:6f:d2:8c:b2:eb:32:
cb:0e:51:4e:25:93:d5:5f:13:1b:30:83:32:b3:e7:57:ea:27:
cf:e9:62:1f:2b:86:d5:de:37:42:eb:0c:4b:08:9c:94:e6:5b:
0e:20:00:cb:d8:b6:7e:02:f1:af:7f:c0:ae:e4:7f:a2:1e:bc:
0c:9f:36:05:85:67:bf:23:f9:de:27:f5:e7:6c:02:07:e4:14:
a0:3f:10:33:64:f3:55:fc:a9:75:f2:23:7b:5f:df:e9:6a:32:
54:ef:27:7b:86:e2:3e:1a:08:b6:4c:3c:05:a1:6d:e1:38:d3:
ac:3b:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:21 2025 by rpki-client