Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/TevPA31zpqIvq6GeQSDxtNa30UQ.roa
File: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (raw, json)
Hash identifier: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=
Subject key identifier: 4D:EB:CF:03:7D:73:A6:A2:2F:AB:A1:9E:41:20:F1:B4:D6:B7:D1:44
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019421B1996E973EFEE44FBDDC51EE542EA3
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/TevPA31zpqIvq6GeQSDxtNa30UQ.roa
Signing time: Wed 01 Jan 2025 11:47:54 +0000
ROA not before: Wed 01 Jan 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.10.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:99:6e:97:3e:fe:e4:4f:bd:dc:51:ee:54:2e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4debcf037d73a6a22faba19e4120f1b4d6b7d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:90:0a:39:cb:1d:9b:36:2e:b9:64:f1:9b:
75:f8:06:1b:a2:b3:c8:af:08:da:83:bc:cf:03:40:
d8:b3:54:ba:5c:a5:42:5f:70:72:58:18:0e:2e:b2:
05:e1:ed:e2:5c:ae:d4:21:62:3f:ee:f9:4f:55:60:
e5:1d:c7:bb:6c:b6:ba:3a:4b:f3:d2:87:aa:4a:dd:
4a:09:af:a4:e2:38:be:2a:3d:ca:d6:7a:79:be:33:
f9:dc:59:ee:5f:82:e5:bd:74:d5:ec:04:27:4b:2f:
7f:c8:ce:94:7a:db:9b:6a:be:c7:7e:6e:ee:44:0e:
8c:75:9a:75:41:3a:0e:d9:63:19:d9:00:71:dd:3f:
14:2b:f9:58:ce:79:49:72:e4:54:12:e4:4a:c8:35:
c1:96:62:3b:5d:41:08:05:8c:8d:0c:99:61:dc:d2:
94:f3:23:e6:00:ef:c1:22:43:09:30:b2:cc:e1:b8:
8d:87:27:fd:43:7f:ee:22:9d:2c:88:32:0f:77:cc:
8f:81:92:e3:f8:32:53:d7:dd:b9:cc:2b:c7:52:4c:
a1:de:e3:da:2e:60:30:a4:e0:90:61:68:54:59:22:
74:43:f6:29:f7:4e:5e:6d:84:c4:25:11:f2:ea:83:
62:5c:8e:60:31:dc:28:54:d0:0a:51:37:65:32:a7:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:CF:03:7D:73:A6:A2:2F:AB:A1:9E:41:20:F1:B4:D6:B7:D1:44
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/TevPA31zpqIvq6GeQSDxtNa30UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.150.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9c:82:6f:aa:8c:53:79:75:72:f0:d8:88:1c:37:dc:bc:6f:
91:d4:67:59:bc:52:82:e4:91:6c:97:cd:4c:63:99:66:84:a4:
2d:bb:37:3e:b2:57:02:5e:5a:28:28:a0:c5:6c:80:3e:16:67:
46:37:ae:c1:5c:65:51:39:60:77:ad:e2:b1:b8:c1:63:dc:2a:
bc:3a:cd:6a:6f:65:1c:a2:dd:3f:c7:ac:6f:1a:e1:6f:02:d8:
f6:b8:ab:4e:14:1e:0b:91:f6:25:69:32:35:5a:e5:81:50:87:
0c:18:fb:4c:ff:30:a1:01:ad:e6:e6:32:8c:dd:86:ab:fd:48:
21:34:7b:be:b5:85:4b:fb:71:15:0f:c1:4c:a9:81:5a:0a:d3:
60:c1:a7:b8:08:7e:40:12:fd:3c:41:b1:c2:cc:a1:38:28:da:
e2:d7:23:2f:c7:68:ff:91:d5:56:08:fe:03:2c:5c:b5:67:26:
ce:c5:30:9d:11:c7:90:87:57:bb:94:8f:55:b0:10:9f:7b:16:
c0:1f:df:ac:3a:f5:83:19:26:b6:04:0a:fb:0a:de:d2:9a:6b:
91:2e:b8:ca:d4:36:ef:6b:ef:cf:51:d9:ce:4b:be:c5:cf:cc:
f0:95:8c:b1:17:c0:7a:f1:4c:16:e4:3b:2a:4b:c9:19:11:d2:
da:3f:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:41 2025 by rpki-client