Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa
File: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (raw, json)
Hash identifier: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=
Subject key identifier: 4D:2F:53:40:D4:27:98:A0:94:C9:F3:56:DE:21:D2:AC:A3:78:90:75
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019421B22E05570C921DF71EFF37C0DF446E
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198378
IP address blocks: 2001:67c:7a0::/48 maxlen: 48
2001:67c:ca8::/48 maxlen: 48
2001:67c:cac::/48 maxlen: 48
2001:67c:cb0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:05:57:0c:92:1d:f7:1e:ff:37:c0:df:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d2f5340d42798a094c9f356de21d2aca3789075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:a8:5f:5f:e2:b6:30:1c:57:41:fa:49:05:
64:f1:3b:b6:76:d6:05:03:1b:1a:bc:07:56:89:62:
3e:bd:3e:1d:c9:36:ec:ed:01:c0:c8:14:77:05:b2:
53:dd:e5:23:2e:59:48:1d:10:02:fc:60:05:2d:e9:
05:e5:2f:c5:85:38:65:f0:95:ed:48:ba:e5:30:df:
f9:1c:d5:68:bd:c0:ed:b1:e1:b0:e3:7e:92:74:08:
62:e0:bc:5d:29:dc:53:a6:3d:01:40:6b:cd:26:e9:
d8:fb:d3:58:b7:e3:76:76:ef:c5:3a:84:b5:9a:75:
90:b4:15:ec:55:4d:96:67:73:b9:6e:53:1a:1f:80:
a2:21:07:4e:07:9e:21:cf:d0:ff:dd:e6:98:7f:31:
08:65:79:a2:0c:13:9f:56:d7:af:f7:7f:9e:4b:1e:
82:ad:52:b5:63:da:79:5c:ac:7c:5b:53:e6:44:60:
89:0b:52:66:06:1c:53:41:f7:53:90:fd:b2:38:3f:
94:d5:0c:11:48:86:9e:a7:b5:07:fc:e3:6f:e1:3e:
bf:55:bf:7b:67:41:4c:49:cd:eb:b3:3b:f0:30:37:
a9:67:93:d6:d5:7d:94:ad:d7:01:96:74:d5:a5:6f:
68:b3:1a:5b:5c:03:a1:40:d5:ae:3e:06:85:a7:f0:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:53:40:D4:27:98:A0:94:C9:F3:56:DE:21:D2:AC:A3:78:90:75
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7a0::/48
2001:67c:ca8::/48
2001:67c:cac::/48
2001:67c:cb0::/48
Signature Algorithm: sha256WithRSAEncryption
76:47:4f:c5:f3:f1:72:3b:4d:98:03:ab:09:a6:09:10:65:36:
78:22:d5:3f:bc:d5:e2:0a:69:d4:81:0d:8a:26:27:06:f8:78:
fe:90:7b:cd:e4:1c:16:00:32:d2:c6:89:c4:d3:c2:c7:26:60:
03:d7:42:85:cd:ce:c6:cd:e7:9e:7a:7b:08:9a:4b:b3:db:c6:
e5:1c:e5:ff:4e:cd:1c:eb:61:37:8f:0c:9f:36:39:2a:06:80:
ca:a5:9c:7a:81:1a:70:eb:b4:fb:a2:bb:49:af:41:d2:6c:32:
29:b6:64:6f:0f:e9:ae:c4:b8:68:a0:d8:b2:6f:c5:23:54:46:
d0:13:b2:0b:28:4c:90:21:2d:5e:d0:83:dd:76:2e:b7:da:66:
13:18:c9:12:ef:c3:8d:8d:74:96:f4:13:36:2b:75:f9:bb:52:
37:3a:83:72:8f:7c:21:65:27:ff:e5:bb:ca:25:c0:8c:7b:5d:
26:cb:a2:63:2b:e3:0b:53:a9:18:b4:b7:6b:b5:88:52:41:9b:
4a:2c:38:48:42:d6:bd:66:2c:bb:dd:d7:cf:00:f9:0a:db:29:
1b:f8:ee:76:fe:4f:34:47:1b:46:bd:5f:5f:9e:02:e2:1a:c9:
3c:c5:1b:54:ce:20:84:26:6f:c1:46:40:1e:a9:5d:ef:c5:8b:
d2:fb:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:58 2025 by rpki-client