Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/23TVA-2OL8ERCOX_dzgjoyDr7ic.roa
File: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (raw, json)
Hash identifier: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=
Subject key identifier: DB:74:D5:03:ED:8E:2F:C1:11:08:E5:FF:77:38:23:A3:20:EB:EE:27
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0194266C3CD6025F47FF14A083139A7C167F
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/23TVA-2OL8ERCOX_dzgjoyDr7ic.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:9240::/29 maxlen: 32
2a13:92c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:d6:02:5f:47:ff:14:a0:83:13:9a:7c:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db74d503ed8e2fc11108e5ff773823a320ebee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:58:73:94:74:14:8d:5d:f2:8f:af:fb:e6:
54:9a:f9:7a:de:7f:80:77:95:50:d7:a3:c7:25:fc:
ed:04:ed:88:6f:d9:eb:f1:4f:b0:c3:35:c9:f1:e8:
7f:5b:4e:a2:e7:ba:01:90:d7:59:b5:d7:ba:cc:1c:
be:c0:fc:b9:2f:5f:71:0d:56:28:bd:e6:9d:1e:a7:
3f:c7:10:36:35:8c:00:61:1c:e8:2b:ca:ad:4f:c6:
1f:c7:93:e6:dc:fa:29:2d:63:e7:ec:f9:12:22:04:
f1:f5:cc:24:a4:98:a6:9a:0a:07:41:8a:86:45:aa:
01:5c:fc:e3:00:93:88:ec:cc:92:a1:1c:79:15:c6:
62:96:76:e4:15:75:80:14:a7:ac:cc:03:71:bc:7d:
ae:fc:2d:59:c0:2a:98:e4:02:ee:81:6e:84:12:7d:
db:cb:8d:f3:2b:03:85:d2:2f:c3:5c:db:79:c2:77:
c5:01:94:04:40:ec:df:d8:09:1f:2e:d7:4f:25:82:
d1:fe:3e:ae:36:ec:10:77:42:c4:59:35:51:b8:57:
82:19:ed:2f:39:e6:d0:49:bd:76:73:68:60:c8:bf:
41:9c:1e:3e:18:41:2c:91:db:ff:d4:50:90:15:a7:
87:6c:19:bf:88:01:90:2b:70:9d:e0:63:61:df:06:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:D5:03:ED:8E:2F:C1:11:08:E5:FF:77:38:23:A3:20:EB:EE:27
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/23TVA-2OL8ERCOX_dzgjoyDr7ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9240::/29
2a13:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:5a:fa:d7:58:d9:36:46:cf:de:f4:11:76:22:45:fa:94:71:
a5:4e:2b:03:e2:35:13:11:49:0b:a4:d8:f9:b4:28:a7:81:4b:
20:0a:b7:b0:b7:ed:1a:8c:6f:b7:5e:7b:f8:17:d1:01:a7:ac:
cc:9c:bf:7b:60:ba:3a:6e:49:22:25:9b:14:fa:e9:00:01:50:
d2:05:ac:ef:aa:40:b4:7f:35:03:33:5d:22:6e:12:64:f3:c9:
cf:9a:de:0e:18:f1:da:32:c3:6f:c0:a2:18:2c:60:29:2b:12:
4a:c5:b5:64:c8:e1:66:b3:20:c4:0a:fe:43:2b:14:1f:61:55:
28:26:b7:9f:89:d8:5c:84:61:db:79:f5:a8:fd:43:39:09:ce:
a4:bc:2d:fa:ff:f3:d7:7b:64:7e:38:03:4f:d2:5e:36:b0:d3:
49:91:3a:69:87:fe:f9:8c:7e:ca:72:88:f8:60:45:63:f8:af:
d4:04:04:12:c7:31:82:6f:d3:cc:4a:7e:24:f8:93:19:5a:c1:
62:8d:07:c8:87:1d:55:95:ef:a1:32:42:c8:d1:87:ed:12:9c:
98:86:70:40:0b:ee:20:a4:be:c2:5e:be:96:c8:06:a4:d2:5d:
c7:80:60:99:dc:c9:b4:8f:13:58:2c:d3:cf:b2:76:65:27:16:
a8:1c:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:56 2025 by rpki-client