Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f12469-019f-4794-bba3-5517d0f26e68/1/TpsjYPdI33KujOR9wM8MurMDY1I.roa
File: TpsjYPdI33KujOR9wM8MurMDY1I.roa (raw, json)
Hash identifier: x/BdyXCbtpjHlc1ruvEjj+vD4GX3BRVjFJDLoin7iIo=
Subject key identifier: 4E:9B:23:60:F7:48:DF:72:AE:8C:E4:7D:C0:CF:0C:BA:B3:03:63:52
Certificate issuer: /CN=d75e559ab6202c2936213c1f8acf68c829ddebb9
Certificate serial: 01856B811A4DA03CC75F56F84395209982C6
Authority key identifier: D7:5E:55:9A:B6:20:2C:29:36:21:3C:1F:8A:CF:68:C8:29:DD:EB:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115VmrYgLCk2ITwfis9oyCnd67k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f12469-019f-4794-bba3-5517d0f26e68/1/TpsjYPdI33KujOR9wM8MurMDY1I.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1a:4d:a0:3c:c7:5f:56:f8:43:95:20:99:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e559ab6202c2936213c1f8acf68c829ddebb9
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9b2360f748df72ae8ce47dc0cf0cbab3036352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:b2:ef:f3:fc:f8:0d:39:e3:a2:9e:82:0a:
9e:5a:14:bf:e8:80:d6:57:85:06:ad:9a:02:1b:97:
20:91:b7:c9:76:96:c3:59:20:70:e2:43:84:9c:e2:
3c:ec:57:a1:83:c4:eb:5b:b6:0f:7d:d2:ee:2e:fa:
e5:a1:30:f7:81:1a:3b:57:32:7d:76:50:6f:ed:25:
2c:ff:90:ac:30:26:8c:19:90:c5:9c:bf:80:28:70:
1a:0b:42:04:da:29:52:68:e9:68:8d:b2:b4:c4:37:
d7:f9:8d:d7:15:ac:2b:c3:4a:32:bf:97:7a:8f:71:
ca:23:22:9f:b7:1f:15:20:29:c2:ac:16:6c:b0:34:
8c:e1:9e:3e:f8:a6:05:13:13:56:2e:ca:4a:71:86:
e7:9d:fd:68:4b:44:cf:f3:cb:eb:e8:c0:2a:92:b9:
43:bd:4b:b5:38:b1:44:b2:6c:a3:ba:2d:88:cd:a3:
f0:00:eb:1f:67:07:12:fa:e0:d3:c7:03:05:99:ff:
af:54:5f:ca:e7:a9:8e:e1:4e:48:f4:25:1d:5e:5d:
3b:73:85:b7:3f:2a:2a:b0:d8:8c:ef:9c:33:2e:40:
c4:f2:a3:80:f1:e2:2a:3b:d6:e1:72:77:00:bd:2c:
9c:7c:bf:d8:f9:fb:50:a6:a9:5a:f5:dc:f0:cd:eb:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:23:60:F7:48:DF:72:AE:8C:E4:7D:C0:CF:0C:BA:B3:03:63:52
X509v3 Authority Key Identifier:
keyid:D7:5E:55:9A:B6:20:2C:29:36:21:3C:1F:8A:CF:68:C8:29:DD:EB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115VmrYgLCk2ITwfis9oyCnd67k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f12469-019f-4794-bba3-5517d0f26e68/1/TpsjYPdI33KujOR9wM8MurMDY1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f12469-019f-4794-bba3-5517d0f26e68/1/115VmrYgLCk2ITwfis9oyCnd67k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.158.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:74:8b:12:04:24:c9:b6:49:c1:06:33:83:b4:5c:b0:d9:
62:d4:c4:3b:8c:77:c7:0b:89:a0:cb:0c:c0:45:42:c6:aa:0b:
38:b3:b5:ae:4c:b1:81:6b:76:76:af:97:ba:b7:85:7a:19:32:
2c:0d:d1:9f:d3:85:e3:30:2c:72:56:11:32:78:18:c8:ad:35:
97:2f:b1:a2:13:27:78:59:e0:c8:9b:e5:74:b5:93:87:6e:ac:
31:28:4a:96:32:71:b7:e6:eb:18:ff:72:03:3a:06:8e:3f:4e:
48:72:95:4f:a7:8b:8f:08:9a:31:9b:fc:aa:84:d8:89:ba:3a:
2c:e1:c7:2b:08:76:da:40:96:01:3f:51:30:48:97:f8:2f:80:
6d:a6:0b:d9:6d:67:69:59:46:60:59:c1:a3:a2:69:9d:0c:3d:
74:41:71:20:db:03:32:8f:29:d1:46:e2:fb:ea:71:21:1a:a1:
51:ec:fe:49:8a:ae:22:b4:09:e8:8c:d4:99:7b:6b:fc:c3:68:
21:38:2c:20:b3:ab:31:2a:50:ac:7e:92:79:0a:9a:c6:95:75:
c2:3a:06:9e:d4:6e:f2:e7:f1:97:7a:cf:be:a0:ed:1f:1f:2e:
b2:8f:7e:c7:06:e4:13:db:ed:88:6e:77:7f:41:b5:8d:79:1d:
83:33:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:20 2025 by rpki-client