Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/TN_MSxl23e2IHI6xlWtU6jyuxZY.roa
File: TN_MSxl23e2IHI6xlWtU6jyuxZY.roa (raw, json)
Hash identifier: ev3mVCFFer3JSOj9c9kZJ7Lc7PqLzyxCw3f7xroBCxs=
Subject key identifier: 4C:DF:CC:4B:19:76:DD:ED:88:1C:8E:B1:95:6B:54:EA:3C:AE:C5:96
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195CEDF36F2E829A9AED3E9B6E4EEA248D4
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/TN_MSxl23e2IHI6xlWtU6jyuxZY.roa
Signing time: Tue 25 Mar 2025 19:54:49 +0000
ROA not before: Tue 25 Mar 2025 19:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a09:da45::/32 maxlen: 32
2a0c:ac1::/32 maxlen: 32
2a11:5a43::/32 maxlen: 32
2a12:1544::/32 maxlen: 32
2a12:7303::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:df:36:f2:e8:29:a9:ae:d3:e9:b6:e4:ee:a2:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 25 19:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cdfcc4b1976dded881c8eb1956b54ea3caec596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:a7:fa:b8:8a:ad:ea:10:2b:8c:80:b1:47:
01:18:07:9c:a9:f5:1c:15:36:59:84:30:2a:55:ec:
1c:d9:2d:8a:90:0b:a8:e3:78:d0:6c:a7:14:73:b4:
e4:74:19:da:34:f2:75:0c:22:14:43:f8:8a:f0:09:
79:ad:1a:84:6a:51:34:d7:f5:7d:9d:cb:2b:a6:87:
5a:ec:8b:1e:17:20:e3:f5:50:a2:b7:bf:49:af:18:
bd:e0:43:51:fe:71:e9:04:56:39:e1:4e:a7:95:04:
1d:84:d6:72:2e:a4:30:02:2e:06:9b:27:93:b3:27:
ad:b2:85:33:0f:62:17:0b:f8:6e:33:82:ba:9b:c7:
33:fd:1f:cd:1f:9d:bf:b3:9f:7b:18:05:0b:6a:47:
45:b6:8e:44:2b:84:6c:c4:0e:48:e8:49:f5:98:28:
ba:67:94:9e:42:4e:85:bd:ad:e3:09:f2:81:3f:50:
c9:2a:86:75:3e:a7:b1:34:08:54:89:cd:50:db:52:
10:fe:24:0c:34:f0:e3:94:9c:ba:4a:31:59:ad:37:
8a:4e:7e:a4:d4:37:96:cc:60:04:6a:6f:8d:bb:30:
2e:2b:d7:df:5a:65:d9:85:d9:67:8d:67:15:85:fb:
4a:32:e7:53:f4:eb:74:c6:d8:32:a8:d1:2d:b5:cd:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:CC:4B:19:76:DD:ED:88:1C:8E:B1:95:6B:54:EA:3C:AE:C5:96
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/TN_MSxl23e2IHI6xlWtU6jyuxZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da45::/32
2a0c:ac1::/32
2a11:5a43::/32
2a12:1544::/32
2a12:7303::/32
Signature Algorithm: sha256WithRSAEncryption
76:0f:f5:69:e3:5e:d8:41:bc:bb:45:68:91:a9:0f:1c:9c:64:
69:a9:4b:03:9a:90:2f:3f:b3:17:db:3c:14:98:41:70:9d:f2:
e0:e6:39:90:ec:56:a7:56:49:c1:f5:ec:11:e2:fc:06:b9:90:
a5:c5:91:42:fe:25:00:e0:78:f7:9f:65:1f:91:67:6d:7f:73:
51:c1:2f:63:83:e7:32:02:51:d7:af:2f:f5:a3:f3:95:29:e4:
09:90:62:d9:6b:35:95:7d:36:2c:c2:fa:0e:35:b6:66:ae:30:
93:97:9a:1e:f8:04:79:51:b5:1a:d6:18:49:05:89:ee:da:80:
63:71:c1:e4:cf:c4:42:8a:32:fd:5f:b2:09:64:59:d5:c1:fc:
10:4d:03:c6:c6:40:b1:95:8c:97:23:30:3f:24:65:8d:40:4e:
6c:12:fc:bc:d0:21:c5:0d:26:93:27:5e:9f:a5:c5:99:8e:df:
ce:d2:24:d2:76:ec:87:97:c6:89:e0:c1:48:4d:0f:64:c2:63:
22:6c:3a:31:75:8f:dd:c6:cf:e6:13:b5:a7:6d:f4:80:5c:88:
0d:5d:66:30:5c:5b:bf:b9:89:6c:46:f8:27:10:c3:ce:e4:05:
5c:f9:e8:42:8d:97:4f:b7:71:6d:59:ab:4b:8f:43:e2:10:1c:
ce:09:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:32:58 2025 by rpki-client