Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/TTLplKYMw3ALMHBQOquflMCv_74.roa
File: TTLplKYMw3ALMHBQOquflMCv_74.roa (raw, json)
Hash identifier: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=
Subject key identifier: 4D:32:E9:94:A6:0C:C3:70:0B:30:70:50:3A:AB:9F:94:C0:AF:FF:BE
Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial: 019425215267BA588FAF443E15E6C69C4E8C
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/TTLplKYMw3ALMHBQOquflMCv_74.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205890
IP address blocks: 91.196.144.0/22 maxlen: 22
91.207.72.0/23 maxlen: 23
91.207.94.0/23 maxlen: 23
2a0a:de40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:52:67:ba:58:8f:af:44:3e:15:e6:c6:9c:4e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d32e994a60cc3700b3070503aab9f94c0afffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:e5:2b:a3:39:6d:48:2d:1d:89:a8:5f:22:
3d:57:1b:b3:e8:f5:f0:09:58:48:b2:33:8b:a3:6b:
04:45:09:cb:6f:73:4f:32:ce:9e:d5:34:d1:e9:f5:
f7:e4:62:05:5e:0b:16:2b:bb:b8:b9:5a:5c:81:95:
f0:ab:7f:19:b3:32:b6:12:fe:db:95:67:52:8f:3f:
da:c1:e4:bb:e0:c2:15:a1:ec:6a:4a:8f:d4:dd:1c:
24:03:26:d8:51:4c:e3:12:f1:01:5d:0b:f4:12:8c:
a4:d0:0b:5d:c4:91:7d:d7:1b:03:a0:ea:d8:a4:93:
b0:12:d1:be:7d:c3:ae:6f:fa:df:f8:c2:5e:a3:eb:
f8:2c:e6:34:70:b5:63:4f:8f:57:23:91:93:af:81:
9a:e3:2d:cf:c2:a0:e0:1c:48:18:93:ba:46:18:1e:
37:cc:09:91:e0:cc:79:f7:f0:06:8e:35:56:f5:e7:
d3:a1:01:e1:a5:88:a0:c2:ba:69:4b:a2:22:06:f1:
fd:67:33:00:8d:c5:a6:aa:98:82:dc:c5:c0:0b:94:
f6:17:71:ac:d3:b6:42:ae:b6:7c:bb:7e:e8:7c:ad:
82:3e:b8:cc:c3:fa:40:1b:35:65:f6:2f:4e:1f:21:
8f:cf:e4:fe:fb:2b:00:1a:a6:89:91:da:a4:d6:07:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:E9:94:A6:0C:C3:70:0B:30:70:50:3A:AB:9F:94:C0:AF:FF:BE
X509v3 Authority Key Identifier:
keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/TTLplKYMw3ALMHBQOquflMCv_74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.144.0/22
91.207.72.0/23
91.207.94.0/23
IPv6:
2a0a:de40::/32
Signature Algorithm: sha256WithRSAEncryption
96:d3:a1:7f:b9:56:7f:a3:d8:f8:f7:aa:44:3b:da:e9:21:b1:
87:3a:71:63:7a:3c:ed:d7:1c:72:ce:29:8c:9f:d1:3a:24:bf:
d1:2d:26:aa:bf:8e:29:1e:e5:06:04:38:8b:8b:9a:ea:bf:f5:
50:6b:7e:89:c1:f7:89:aa:01:b0:b2:05:a4:35:9b:bf:cf:f1:
c4:25:bc:d3:13:e0:c7:78:9a:60:ea:a1:04:51:e9:ef:08:a2:
ed:ea:7a:b3:c0:48:4d:a2:71:4c:c1:d7:81:4c:1b:04:f5:2b:
28:ac:0e:53:0f:f3:6c:d4:a2:15:ac:0c:db:f0:fa:99:6a:c1:
70:93:b9:a4:e8:c1:19:f1:39:02:5c:5f:ff:1e:d9:be:09:b1:
eb:32:88:38:06:e1:db:a6:78:ec:71:0a:74:9f:7c:4b:d8:82:
d4:81:b0:aa:b6:4d:ca:cf:7e:a1:f2:8e:49:be:bd:26:3e:51:
a9:9a:2c:10:71:34:8c:7d:2e:5b:3c:c3:1c:27:a2:3a:e2:fe:
3e:dc:f2:75:32:0b:71:35:72:b2:d4:bb:c1:4b:4c:1f:c9:09:
60:5f:38:a1:94:ad:70:28:20:2a:22:bb:00:5b:b9:b6:dc:63:
be:7b:d1:f3:fc:f8:5c:65:7f:f6:63:32:91:c6:55:a1:16:67:
c8:5a:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:50 2025 by rpki-client