Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TVjO9YCOj49JkFwHTM94DzyFJrs.roa
File: TVjO9YCOj49JkFwHTM94DzyFJrs.roa (raw, json)
Hash identifier: soNm4RRzWHhOwUylAFMYQ4M+VsPa9richp5bwqTvRXo=
Subject key identifier: 4D:58:CE:F5:80:8E:8F:8F:49:90:5C:07:4C:CF:78:0F:3C:85:26:BB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E57A142ABC161DB36EC519D2DBD76
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TVjO9YCOj49JkFwHTM94DzyFJrs.roa
Signing time: Mon 02 Jan 2023 06:14:51 +0000
ROA not before: Mon 02 Jan 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205778
IP address blocks: 2a0c:b641:7b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:57:a1:42:ab:c1:61:db:36:ec:51:9d:2d:bd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d58cef5808e8f8f49905c074ccf780f3c8526bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:a1:45:e0:8c:de:9f:ce:f6:86:e4:55:69:
33:35:6f:1c:ab:ec:1f:64:53:b3:36:2d:cd:99:3b:
4e:a1:25:ad:15:e5:41:53:c5:c0:f5:1b:90:76:dd:
c3:76:2b:61:f8:15:90:b5:fa:0a:e4:5c:4b:b9:bf:
30:1a:78:00:a6:e8:79:42:92:d1:eb:c9:6a:96:db:
75:d0:a0:fd:b2:a2:3e:2d:02:3e:c8:03:be:39:1c:
9a:4a:88:b9:8b:22:db:04:2c:9c:de:2f:5e:ff:84:
73:55:df:8c:b8:1c:f8:78:72:d2:16:dc:8d:f9:9e:
5c:6d:8a:08:81:ea:02:66:28:4f:be:b2:0b:11:fb:
c9:91:5a:f8:85:59:8d:81:16:b4:6c:fb:91:e3:41:
5c:48:54:7a:b5:3c:53:93:19:d2:f1:71:29:0a:34:
bd:e6:25:21:41:d4:07:d2:17:31:56:b9:f4:f7:8e:
62:b7:67:ed:a2:6f:1b:22:12:20:a4:87:c2:33:2b:
55:f2:cb:7a:17:70:22:22:c7:a5:8b:75:27:aa:99:
26:ca:8d:8a:ad:86:6e:df:5b:fe:ea:f1:f5:4b:93:
c8:eb:22:56:9f:b2:ea:ab:81:ef:ef:9b:04:d8:1a:
de:84:80:5a:c5:14:51:ea:84:84:fa:34:f7:5a:bc:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:CE:F5:80:8E:8F:8F:49:90:5C:07:4C:CF:78:0F:3C:85:26:BB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TVjO9YCOj49JkFwHTM94DzyFJrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
6e:71:c1:7c:06:b1:90:a4:d9:41:6b:ad:d7:b1:83:ed:7c:1e:
fa:67:94:8a:c3:ee:6b:b6:c8:fd:d2:41:1e:ee:2a:33:93:f6:
fd:27:40:82:e0:0c:d6:72:cc:d7:74:d6:83:8b:f2:85:22:55:
28:ae:ff:a0:6b:ad:49:65:2c:f8:53:88:2c:fb:76:e1:56:e4:
74:3d:bb:cc:19:84:62:cf:f0:1d:67:e6:42:81:fb:28:60:dc:
83:fd:b8:e9:94:5a:b0:49:56:82:1d:03:f6:94:2c:5e:90:ea:
99:a8:e9:0b:1b:ba:0f:3c:92:ae:95:ba:3b:36:86:da:6a:65:
b7:ce:98:8e:11:de:50:06:26:c9:b9:e7:7c:56:b6:a7:23:56:
ad:0e:d4:e9:39:87:05:f5:12:3d:54:49:a6:e2:60:13:13:3f:
eb:5e:af:d9:9a:92:f2:98:58:b5:df:7d:1c:91:10:33:52:80:
03:60:e8:95:73:f1:ac:b2:b1:a3:c4:36:36:0e:e3:08:d7:df:
6c:e5:98:15:28:95:bc:01:66:13:23:4f:ec:14:6e:0c:39:f4:
41:34:32:12:85:ac:fe:8f:2a:ff:21:31:d6:8f:58:61:b8:ef:
c0:c9:71:70:91:44:ba:f2:6c:8e:ad:c7:20:4c:81:28:da:9b:
fd:81:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:31 2025 by rpki-client