Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TGRJeF5k8DDJYp1P_zGBqUC5cks.roa
File: TGRJeF5k8DDJYp1P_zGBqUC5cks.roa (raw, json)
Hash identifier: MVL03BDuuX8jaBgwVAtaG2yBGzInbXF9UxmA9PwiG0w=
Subject key identifier: 4C:64:49:78:5E:64:F0:30:C9:62:9D:4F:FF:31:81:A9:40:B9:72:4B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422202810332D7EF48CF3B781BDDE17FE
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TGRJeF5k8DDJYp1P_zGBqUC5cks.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198558
IP address blocks: 2a0e:8f02:f05c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:10:33:2d:7e:f4:8c:f3:b7:81:bd:de:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c6449785e64f030c9629d4fff3181a940b9724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:17:4a:3f:51:38:a0:b0:21:d7:d0:5d:4f:
ac:aa:e4:20:8b:4f:c4:ab:1a:f4:ab:6f:b9:34:85:
6d:6b:f3:27:c5:b2:e1:dc:f0:8b:08:33:5b:09:a5:
cc:49:3b:91:62:70:2e:9e:bc:bc:85:81:68:66:a3:
5d:ab:bf:91:35:2d:06:be:18:5c:81:44:83:9d:05:
1c:80:16:f5:0e:2a:80:c1:4d:0c:64:60:99:63:63:
c2:b0:40:f3:48:83:c0:9d:12:31:7c:85:ef:3b:df:
bf:2b:36:84:6b:6f:d6:23:be:80:cd:2b:2f:b2:14:
15:67:a3:22:e8:a9:e1:8c:b2:39:ac:8e:c7:b2:0c:
56:3f:11:95:2c:e8:af:ed:e5:62:97:e5:af:a0:54:
08:00:dc:77:28:7a:e5:3c:04:81:db:bb:ab:58:5e:
b4:85:38:09:9f:5b:4c:5b:5b:17:70:5d:cb:fa:b0:
4f:13:02:5f:c8:32:c4:1b:13:4d:d2:37:65:a3:94:
94:94:02:d8:36:b3:d8:18:f0:1a:c2:5c:22:70:ad:
8e:dd:20:09:fd:89:21:e7:cc:f3:4d:b3:11:20:e8:
16:b1:67:54:9a:ee:14:c9:c4:7d:a1:83:39:71:7e:
d5:57:52:38:e6:57:ab:6a:b0:e9:83:93:b6:a6:6d:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:49:78:5E:64:F0:30:C9:62:9D:4F:FF:31:81:A9:40:B9:72:4B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TGRJeF5k8DDJYp1P_zGBqUC5cks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f05c::/48
Signature Algorithm: sha256WithRSAEncryption
47:47:dc:45:96:f9:20:15:a1:45:85:90:f9:7e:1d:dc:2e:07:
f0:7c:21:3b:8a:91:93:e3:6b:ce:06:e1:0d:f6:ce:f7:9d:bd:
2d:f1:70:70:e5:be:6d:62:c5:dc:2e:bd:ae:cc:bc:cd:0f:58:
f3:00:8b:d2:9d:12:e6:73:60:84:f9:4c:be:e5:5c:b7:5f:e0:
08:f7:64:5a:be:0f:57:23:ac:ca:08:82:dd:30:43:9b:c4:74:
c3:00:a7:14:97:cf:fd:aa:5d:a8:8a:ca:b9:f0:d9:d8:71:bb:
d6:5c:a8:84:7c:e9:69:d4:d4:63:40:86:87:d5:6b:1b:5a:61:
f8:5e:96:b2:8f:09:06:9a:b3:66:54:3e:69:f0:f9:a5:8b:c6:
20:74:c0:53:73:01:8c:47:a2:79:a7:ce:b8:0e:07:ae:a8:32:
80:ea:31:04:a7:75:a9:f6:ae:ec:7c:e2:54:d1:96:93:c0:15:
13:08:ee:66:a9:9d:ce:6c:8a:e9:1b:3a:9c:8c:98:4e:87:19:
7d:62:36:53:e3:85:fa:62:8a:55:ea:0b:75:ed:a3:64:12:71:
69:e2:dd:b3:5f:bc:dd:e4:8e:d0:7c:5e:7c:e4:43:49:64:5e:
bd:b5:bb:49:a9:90:22:14:d3:02:30:bf:de:f9:04:ed:e4:74:
37:c5:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:35 2025 by rpki-client