Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TeTlCFhRmBWsP7NVZyOUSwULl_M.roa
File: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (raw, json)
Hash identifier: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=
Subject key identifier: 4D:E4:E5:08:58:51:98:15:AC:3F:B3:55:67:23:94:4B:05:0B:97:F3
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206801E2AB88EAFEAB61AB57EFC34935
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TeTlCFhRmBWsP7NVZyOUSwULl_M.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a0c:fe06::/32 maxlen: 32
2a0c:fe07::/32 maxlen: 32
2a0e:cbc0::/32 maxlen: 32
2a0e:cbc1::/32 maxlen: 32
2a0e:cbc2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:01:e2:ab:88:ea:fe:ab:61:ab:57:ef:c3:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de4e50858519815ac3fb3556723944b050b97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:0f:d0:f2:3f:f8:d8:44:dd:a6:03:e1:29:
95:0e:1b:7d:7a:09:bf:37:55:2c:41:ec:ed:c6:e7:
61:1b:b1:99:2e:a2:5f:b2:ed:3f:2f:94:94:59:0b:
c6:99:a9:90:ac:15:7b:62:6c:39:9c:dc:a4:42:7f:
63:c7:3a:bb:9a:a7:5c:92:65:d9:4b:a6:b0:3a:d6:
0c:9a:9b:c1:9e:ab:e5:4c:02:f8:70:67:8c:d6:18:
9b:59:31:b1:48:a3:52:d3:e9:2a:02:b3:61:af:ee:
87:c9:a4:90:60:ad:59:b8:81:d7:1a:59:0c:81:e7:
3f:64:24:13:6e:be:ba:6c:cb:9c:6a:29:76:5c:e9:
60:a1:22:57:5e:76:14:76:de:03:55:0f:74:66:b9:
0d:c5:5f:1c:78:1c:3c:bd:7c:e5:21:7c:6c:59:7b:
a1:4d:d0:3f:3b:af:c7:79:0f:de:be:c4:b0:9c:bc:
07:ad:a6:c0:82:00:01:42:1f:20:95:4b:27:55:b8:
c2:77:66:59:c9:42:91:19:0a:c3:ac:14:97:1d:1a:
55:0e:63:c6:e1:1f:26:42:09:f0:97:97:46:b0:18:
e3:89:8b:fd:2a:60:9c:fd:21:5b:0a:42:55:83:d7:
05:90:a0:d2:e1:68:1c:b1:5a:82:9d:b4:e8:c3:c2:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:E5:08:58:51:98:15:AC:3F:B3:55:67:23:94:4B:05:0B:97:F3
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TeTlCFhRmBWsP7NVZyOUSwULl_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:fe06::/31
2a0e:cbc0::-2a0e:cbc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:46:ef:54:a8:9b:99:21:5e:b5:2a:2c:2c:66:49:57:6f:15:
1c:30:c4:c7:14:00:d2:38:b1:bf:59:0e:af:ae:93:b4:5a:fc:
32:dc:dd:55:6b:01:75:d0:7f:93:0a:e1:21:c9:5c:45:c3:e1:
d2:8b:da:e9:e0:c2:40:9e:dd:01:2d:29:10:39:dd:13:7a:9a:
d8:7f:ec:22:a3:5f:90:96:52:40:c8:5c:07:1b:d3:d3:f4:6f:
9f:39:a7:a2:92:3e:40:ba:5f:6b:89:6a:71:06:9e:df:f5:b0:
e8:2e:6f:6b:d1:85:4f:31:a8:e2:11:22:b4:3f:64:c4:97:73:
44:3a:40:dd:17:74:c3:2b:dc:52:01:a8:6d:86:2e:c0:c2:ea:
40:69:cf:59:b2:50:87:2c:ec:b1:1b:65:3b:1d:2c:aa:77:0c:
91:4f:30:2e:ce:aa:ca:f8:a6:e8:b9:d8:0d:dc:e7:df:b8:5f:
49:d6:f5:64:22:2d:ee:de:0c:d9:0e:19:95:9b:d5:ad:75:8f:
37:0e:6e:58:da:b9:ad:bb:45:6f:cf:6d:b7:f3:30:1b:c9:48:
91:9a:3d:62:d6:1e:66:99:4f:9f:7e:18:91:01:69:ff:70:65:
d4:d7:be:1f:62:05:d2:f4:e7:92:91:dc:bc:e3:e8:a4:75:60:
3b:d4:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:35:24 2025 by rpki-client