Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa
File: TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa (raw, json)
Hash identifier: fvos90x1MCHlKrWkPLr1FS+wwkNQEqqCA62xdTd9V6A=
Subject key identifier: 4E:59:E6:A0:DD:CD:5B:EC:BC:C5:88:AA:9B:41:CE:22:FA:97:30:2D
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 01954C0F82D00A49B1E192CB335E3FA1B23E
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa
Signing time: Fri 28 Feb 2025 10:17:19 +0000
ROA not before: Fri 28 Feb 2025 10:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 86.54.105.0/24 maxlen: 24
193.32.92.0/24 maxlen: 24
2a13:1000::/29 maxlen: 29
2a13:1000::/48 maxlen: 48
2a13:1002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:0f:82:d0:0a:49:b1:e1:92:cb:33:5e:3f:a1:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Feb 28 10:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e59e6a0ddcd5becbcc588aa9b41ce22fa97302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:55:37:4e:09:46:83:66:9b:e3:5e:9c:91:
a0:0b:c7:64:ae:6b:90:83:7f:00:49:2d:39:d0:bc:
ae:56:fd:a9:3e:6b:41:79:5a:d3:6a:83:38:4f:b4:
ea:29:e5:a9:2b:c4:fa:d3:c7:8f:71:bb:2f:c6:52:
9d:d1:38:7f:09:3c:22:05:65:a2:8a:aa:02:90:65:
8e:30:7f:29:27:f5:45:40:34:15:0b:66:d8:5c:6e:
50:b5:f7:f6:a4:7c:b1:80:05:e1:5b:d9:81:24:fb:
b3:cb:a5:c3:b0:5b:a9:8d:55:f6:5b:97:7e:60:85:
e1:13:09:3e:26:01:3a:47:5d:0c:00:1d:a8:88:e5:
a0:f6:f6:33:f7:bd:22:51:54:b5:ca:d8:76:46:32:
33:31:4b:62:9d:79:84:24:81:14:d5:56:27:43:f5:
e7:c1:9d:b8:f3:a5:b8:1a:0e:4b:47:2a:3b:d9:e8:
44:91:25:fd:c7:6e:7a:51:c0:02:5c:7b:3b:df:ff:
e9:32:ad:a3:50:6e:dd:94:f0:ba:12:01:77:65:7c:
42:9c:89:2d:7d:3a:7d:5a:17:f4:43:02:35:20:76:
1a:20:fb:cc:6d:4b:92:08:09:9c:8d:46:23:a4:6c:
30:90:82:e1:85:b4:85:34:39:8c:a3:4e:77:fb:95:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:E6:A0:DD:CD:5B:EC:BC:C5:88:AA:9B:41:CE:22:FA:97:30:2D
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.105.0/24
193.32.92.0/24
IPv6:
2a13:1000::/29
Signature Algorithm: sha256WithRSAEncryption
35:c7:44:80:4b:8b:fa:0b:69:e1:35:76:be:64:be:33:e9:df:
5d:4a:17:e1:65:4f:de:c4:65:9b:a3:66:d8:48:e4:80:2e:f5:
0a:d6:7d:31:30:33:ab:15:5c:97:54:6b:be:5d:71:ae:a0:ae:
80:79:8f:36:8c:e4:fa:64:10:9b:2b:fa:2b:d2:85:6f:5d:e8:
a5:08:d6:f3:2b:99:59:64:5c:c7:4e:b7:f0:e5:98:d3:3b:00:
48:a5:04:f4:90:cb:b9:5a:ab:f9:78:6e:a6:29:13:53:58:fd:
b0:61:af:35:9a:63:90:fc:03:be:bd:21:a7:6c:b8:24:e4:90:
da:83:58:7e:58:33:f4:7e:55:97:2e:6f:ec:df:32:e0:aa:ab:
f0:ce:54:2e:9f:e8:70:51:31:67:66:bc:7e:1c:31:1c:52:e5:
31:35:80:ad:56:38:0b:f6:ef:8e:26:9c:d8:82:23:59:f8:92:
c0:26:a4:0a:88:c9:f9:6d:e9:81:6b:26:ce:e8:3f:08:dc:1c:
15:7f:4b:4e:d9:b4:40:6c:21:a3:3e:0f:c4:8c:fa:34:ce:64:
e9:ff:f8:07:47:c7:6a:53:67:c5:f2:f8:fc:b3:21:b8:90:cf:
88:92:9c:71:48:1e:2c:01:f2:8e:f3:05:32:9c:b7:7f:7f:4e:
4d:c5:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:55 2025 by rpki-client