Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TdrsG-4bfVVWp_EtNzrHCfSOd6I.roa
File: TdrsG-4bfVVWp_EtNzrHCfSOd6I.roa (raw, json)
Hash identifier: pGEqrjCGg7Z4e5Iu6bOKwqPQbld4d2IX4fZR9cXUUQ8=
Subject key identifier: 4D:DA:EC:1B:EE:1B:7D:55:56:A7:F1:2D:37:3A:C7:09:F4:8E:77:A2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E9AC17BF52094F13A30EF7DC55C5FC56
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TdrsG-4bfVVWp_EtNzrHCfSOd6I.roa
Signing time: Tue 06 Dec 2022 23:01:20 +0000
ROA not before: Tue 06 Dec 2022 23:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200840
IP address blocks: 2a0a:6040:c400::/40 maxlen: 48
2a06:a005:1dc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:ac:17:bf:52:09:4f:13:a3:0e:f7:dc:55:c5:fc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 23:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ddaec1bee1b7d5556a7f12d373ac709f48e77a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:8a:41:54:6c:e1:3e:16:c0:eb:0e:cd:b5:
b1:4c:01:93:99:34:ae:99:4a:33:0e:7e:b7:17:9c:
6a:89:93:11:28:22:9c:70:a2:bc:33:c5:49:98:8b:
c7:00:73:45:6c:d4:c9:67:8c:6d:42:3f:00:ed:eb:
d5:4a:e7:7b:ff:82:50:93:f5:f7:d1:42:3f:39:a5:
34:86:05:0f:8e:ce:f9:50:21:03:a9:8a:06:b4:75:
75:07:09:9b:6d:2f:45:f0:62:db:73:df:ba:ef:96:
a4:79:9e:a6:86:d2:1e:6f:d4:97:50:75:f9:0e:7b:
e8:bf:3b:6a:1e:90:ce:99:f2:71:31:36:c1:68:f6:
11:06:fc:b8:b5:bf:8d:1f:25:e6:b8:63:35:82:16:
c6:05:1b:09:93:88:85:57:69:c1:19:e2:9e:33:d5:
d1:31:7e:19:6f:ce:d3:57:21:5e:b8:3d:ce:00:0e:
7a:05:b9:87:27:94:5e:40:b3:32:69:25:bf:49:df:
92:6e:1d:d1:30:fd:2f:94:ae:eb:76:96:81:f5:ea:
1c:af:cb:77:d9:52:10:64:b4:38:7b:70:4f:c0:3b:
bf:ab:6a:b8:16:d0:6e:43:6f:f1:35:b9:da:9e:2b:
42:db:2f:43:78:7a:0a:ad:bc:72:d3:f0:7a:00:99:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:EC:1B:EE:1B:7D:55:56:A7:F1:2D:37:3A:C7:09:F4:8E:77:A2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TdrsG-4bfVVWp_EtNzrHCfSOd6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1dc0::/44
2a0a:6040:c400::/40
Signature Algorithm: sha256WithRSAEncryption
0f:77:aa:5d:97:b4:ca:9b:5e:c1:5b:b7:aa:ec:1e:70:ff:6f:
de:93:d8:2a:c6:2b:03:f9:b2:ff:c4:f5:a0:9f:59:01:1b:2d:
a1:d4:8a:dd:61:5e:cf:58:23:84:af:9c:b0:ed:80:0f:ed:ec:
f5:9c:b1:18:e7:2d:1a:df:45:bb:7f:b9:e1:44:11:b6:12:e2:
cc:95:f9:8c:8d:4b:d3:b2:cd:e1:c3:fc:73:52:9a:0a:8e:05:
2f:b0:75:85:dd:ab:07:a2:8f:47:11:d9:68:99:c3:04:d6:5b:
f8:7d:5f:05:f8:a8:fe:26:74:e9:3a:08:8c:0e:e4:77:03:11:
24:cb:c0:47:d6:01:c3:7c:db:27:cd:30:34:ee:7e:1b:89:9a:
bc:a7:41:e1:d7:93:10:f4:5b:69:e5:0e:9d:ef:86:ab:15:e3:
29:12:96:a4:32:20:6c:cb:b2:45:3a:f8:86:c9:7f:e1:8c:8c:
24:0e:c0:c6:45:51:1d:66:6b:d0:26:f8:dd:de:df:af:c0:74:
82:53:95:21:cd:47:a1:7b:2c:a1:06:c0:11:85:4e:3d:64:38:
98:ac:e7:81:4e:13:31:e8:97:10:20:14:e0:2f:14:ad:a3:39:
51:0e:f1:09:d5:92:5a:a0:c4:4d:65:86:0a:ca:82:92:60:d0:
62:4a:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:16 2025 by rpki-client