Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/tpxzfABwHA4uTKjODgtKlvT10t8.roa
File: tpxzfABwHA4uTKjODgtKlvT10t8.roa (raw, json)
Hash identifier: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=
Subject key identifier: B6:9C:73:7C:00:70:1C:0E:2E:4C:A8:CE:0E:0B:4A:96:F4:F5:D2:DF
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019423D6EB3F46DFFC7D54F08D6EFE409C51
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/tpxzfABwHA4uTKjODgtKlvT10t8.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197961
IP address blocks: 2a10:f780:fffe::/48 maxlen: 48
2a10:f782::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:eb:3f:46:df:fc:7d:54:f0:8d:6e:fe:40:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69c737c00701c0e2e4ca8ce0e0b4a96f4f5d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:2b:f1:46:0b:a6:71:b8:23:b3:bb:5c:1d:
0a:50:5d:54:b4:8f:6a:7f:74:54:f5:87:3d:9f:c3:
07:ec:3c:98:e7:fa:40:93:b6:02:5e:44:86:ea:04:
e5:06:05:16:f7:1d:60:ff:6c:b6:77:6e:03:03:69:
80:26:ec:18:cb:93:87:fd:d7:68:7c:ad:d6:94:bd:
73:67:5d:c6:63:09:8b:00:dc:af:6b:0b:c2:4a:cc:
bf:54:a4:91:af:e1:f6:fb:d8:ef:74:da:d8:63:bc:
ff:54:f1:5f:14:ca:33:af:90:df:c7:0c:54:b3:de:
e0:c1:cf:0d:a4:63:dc:ca:36:b2:84:e0:19:e9:45:
f2:fc:cd:cf:03:dc:83:ec:a5:4b:ad:0c:86:99:98:
5f:16:c4:3c:2d:30:9f:2d:53:7d:e1:80:b7:06:10:
c1:6d:78:cb:aa:a2:d8:84:f4:56:d6:05:d1:fa:a7:
8c:fc:9a:51:6f:2c:c4:d3:50:10:ae:46:b7:f8:61:
d4:79:93:3a:f2:95:ae:7a:77:60:d3:51:b7:4c:0e:
b1:54:25:54:47:dc:87:47:09:be:7f:1b:7e:54:9a:
64:e0:6d:8d:35:67:8d:ca:99:e3:e4:c9:f3:9a:60:
67:5c:e5:f3:d2:4e:1a:b3:dd:43:b0:57:9f:1e:4c:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:73:7C:00:70:1C:0E:2E:4C:A8:CE:0E:0B:4A:96:F4:F5:D2:DF
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/tpxzfABwHA4uTKjODgtKlvT10t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f780:fffe::/48
2a10:f782::/48
Signature Algorithm: sha256WithRSAEncryption
13:ed:16:9c:89:2e:e1:dd:45:11:c0:35:9b:7f:ea:87:9c:f8:
24:e0:54:64:c0:cc:fb:01:7d:3d:b7:f3:d6:41:a8:f8:89:64:
d9:f6:21:ee:a8:40:9e:b0:b0:fe:df:7b:ef:20:a1:07:94:5e:
d5:22:ca:96:79:ba:81:31:7b:6d:79:bd:59:cf:4f:c2:c7:52:
1d:04:89:eb:8c:55:e8:e3:3e:cf:e8:c2:12:15:3a:89:73:ba:
87:0b:3c:8b:a0:8f:8d:34:c5:96:65:74:ff:bb:10:75:c1:2a:
30:25:82:30:0b:15:1b:2d:60:05:26:96:0f:7c:31:9d:ee:18:
c4:61:bc:73:c1:c8:42:cd:59:18:ed:a6:c9:37:6b:5f:8b:07:
90:85:ee:cf:19:de:7a:50:71:1c:64:95:17:48:18:5b:c4:7d:
a9:62:26:2e:96:3e:61:32:3e:84:72:52:8c:f7:ce:3b:4f:a9:
6c:67:45:46:06:33:ac:f6:20:50:be:af:eb:4e:9a:48:fb:cc:
3a:7d:d6:8f:0c:05:47:52:0c:01:57:99:b8:82:ab:a3:1c:3b:
9b:dc:8d:69:79:fa:38:5e:c5:d9:70:3d:c0:c7:75:76:b4:0a:
0b:9e:c1:aa:76:3c:cf:10:35:d7:50:95:4d:23:1b:0c:34:ed:
42:30:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:09 2025 by rpki-client