Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/TaWMMD2oNX_H99EkI_4TshXc0X0.roa
File: TaWMMD2oNX_H99EkI_4TshXc0X0.roa (raw, json)
Hash identifier: GsJvH5oYme4KDvek/ZOQTQkGCdur51NCoMx6zUSYXXM=
Subject key identifier: 4D:A5:8C:30:3D:A8:35:7F:C7:F7:D1:24:23:FE:13:B2:15:DC:D1:7D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC9CB853CA5CBCF27E4ADF7411C7E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/TaWMMD2oNX_H99EkI_4TshXc0X0.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139216
IP address blocks: 2a0e:aa07:f0d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c9:cb:85:3c:a5:cb:cf:27:e4:ad:f7:41:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da58c303da8357fc7f7d12423fe13b215dcd17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:ed:61:80:d2:97:e5:56:1e:41:ee:0c:9a:
3c:19:a5:d8:e1:e6:eb:3e:90:d5:77:73:bc:b0:f1:
af:0a:3b:23:6c:77:75:d5:83:ed:a2:a8:85:1a:ba:
f4:2e:79:cc:ae:f6:6c:c5:41:a0:dd:ff:67:bf:72:
5d:e4:99:91:8d:1b:0b:41:9f:54:09:bf:f0:3a:97:
78:bb:62:07:dc:ad:c5:d8:41:d7:b0:11:ce:32:53:
0f:14:67:40:7c:01:5f:73:eb:9e:0e:1f:94:1d:cd:
45:af:18:45:79:4e:38:d3:fc:de:ad:7d:5e:84:b9:
25:05:39:03:8b:4a:4f:39:8f:2b:46:74:e2:b9:ab:
bc:bb:bc:fb:e7:cd:39:4b:22:65:1f:7f:ae:02:b4:
ec:e5:9c:c5:75:26:52:cd:af:a6:a9:4b:04:95:c6:
29:b2:0b:dd:e4:27:21:28:44:81:9b:8f:4e:e5:98:
c7:15:b0:73:06:39:a0:81:64:18:07:86:fe:c3:a2:
0e:2a:a5:8f:88:8d:b2:fb:ae:29:51:6d:48:e5:68:
05:c2:9f:e6:c5:04:ad:26:ce:70:36:65:8c:e1:40:
35:15:47:96:dc:87:a9:1e:60:96:fa:62:a8:fb:40:
c8:f2:ec:c4:7b:11:a2:19:a5:86:94:de:91:0b:d0:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:8C:30:3D:A8:35:7F:C7:F7:D1:24:23:FE:13:B2:15:DC:D1:7D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/TaWMMD2oNX_H99EkI_4TshXc0X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f0d0::/44
Signature Algorithm: sha256WithRSAEncryption
b7:07:6a:5a:9f:96:96:e4:d5:4b:5c:a4:c4:2c:84:fa:a0:a7:
f4:e1:5b:bf:27:07:ae:6c:61:d9:de:1a:9b:f8:38:56:42:84:
66:4c:50:9d:5c:33:cb:73:b9:aa:2f:80:6c:85:e9:71:08:00:
7f:c2:da:12:16:87:95:35:7a:2d:7d:57:51:94:37:8d:19:e3:
33:18:bc:f5:8b:d9:9a:0f:d5:5c:ec:5b:4b:ff:2c:cc:99:57:
63:d7:02:74:db:1e:f5:4e:26:78:08:f2:56:82:3a:c8:e1:23:
13:0c:da:84:ca:95:8e:b2:eb:e4:3f:fb:21:24:d4:a6:b1:14:
cc:6e:85:fb:2d:c0:24:32:78:e8:67:60:20:fe:a7:99:03:b3:
8e:e2:fe:3d:0a:b4:12:65:71:d6:67:f0:9a:02:1c:b3:c7:af:
cb:4e:74:ca:9e:6e:4c:a5:9b:ae:d7:b1:0d:d0:47:2f:6e:4f:
7b:bb:59:47:ca:2f:29:ae:94:de:4f:aa:71:48:6a:6a:ed:c5:
24:a1:f2:e3:a2:43:b1:8c:4b:22:64:01:4a:80:47:b1:f1:76:
16:7b:d3:cc:1f:16:02:91:e7:af:fa:4c:78:42:21:36:07:c9:
a6:08:5a:67:dc:fe:c9:dd:61:ee:41:a4:e9:63:de:e6:db:bb:
53:8d:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:36 2025 by rpki-client