Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dclTRK2P6H594KtMTB_oZkto_Lw.roa
File: dclTRK2P6H594KtMTB_oZkto_Lw.roa (raw, json)
Hash identifier: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=
Subject key identifier: 75:C9:53:44:AD:8F:E8:7E:7D:E0:AB:4C:4C:1F:E8:66:4B:68:FC:BC
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222004588602309E6E0E49CCDDB369C5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dclTRK2P6H594KtMTB_oZkto_Lw.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201871
IP address blocks: 212.80.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:58:86:02:30:9e:6e:0e:49:cc:dd:b3:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75c95344ad8fe87e7de0ab4c4c1fe8664b68fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:08:8e:b0:2f:a2:14:52:89:12:c8:b4:ab:
60:8a:27:74:34:6d:fd:5a:81:0c:fd:be:11:9c:cf:
cc:9d:43:a6:87:03:bb:46:0c:9e:b6:b8:f2:3d:2a:
a0:6f:3c:1c:b2:3a:76:7b:74:e7:49:b3:50:c7:51:
04:46:43:84:20:2d:75:10:98:cc:b7:ff:c1:8f:6a:
87:5f:67:65:fa:eb:aa:0f:bd:24:96:66:cd:2e:4f:
78:fd:4f:68:77:47:f4:2c:81:1a:92:f6:33:8a:ba:
77:d5:d0:13:46:bb:fc:5e:2a:d7:13:ce:97:b5:a2:
bc:54:6f:6f:84:9f:36:ea:91:90:cb:02:7c:a3:82:
e0:77:37:3d:e8:78:5f:91:18:43:c7:5e:e9:9f:7d:
46:b8:9a:60:e5:83:dd:67:b9:8a:d4:41:8f:a7:43:
5d:68:f8:cc:e0:31:77:b2:91:85:34:9f:49:d8:05:
a1:15:4f:4f:78:3e:ac:5a:f6:64:77:ce:04:77:3a:
1f:3d:2b:88:37:09:27:80:c9:1b:81:ed:af:f4:80:
e0:e9:c1:4a:09:63:13:9c:b5:df:88:7e:4c:87:7f:
86:64:0e:ca:55:c0:ae:5b:b2:02:3b:e5:71:9a:3e:
9d:47:ef:f7:4d:69:58:93:60:31:3f:4b:73:a7:e4:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:53:44:AD:8F:E8:7E:7D:E0:AB:4C:4C:1F:E8:66:4B:68:FC:BC
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dclTRK2P6H594KtMTB_oZkto_Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.4.0/24
Signature Algorithm: sha256WithRSAEncryption
22:91:5f:f8:bc:3a:77:8e:c2:ef:cb:2b:94:8b:56:41:d2:e9:
4c:50:78:e0:2d:c4:8a:cb:f6:13:d2:1a:8a:5e:5b:8c:5b:36:
5b:b0:07:3b:db:09:05:11:cc:d2:72:64:54:38:44:d7:80:34:
1b:95:1b:e3:63:0a:d3:94:4d:c9:aa:6c:ac:44:b4:1f:02:36:
cd:5d:bc:b6:44:ad:77:ae:38:fb:8f:64:b0:f9:76:70:81:74:
ec:fa:0a:ff:44:e1:dc:c8:b5:21:b2:16:cc:e9:b3:63:30:de:
34:78:fe:5e:20:24:48:d1:7e:e2:18:79:e8:81:b7:40:85:f9:
c5:f9:bb:b3:76:83:8a:eb:19:50:cf:cc:7f:7d:2f:7b:2d:00:
8c:15:9d:21:36:f7:2b:fb:01:e3:c8:98:dd:ab:a9:5b:14:0e:
52:95:c7:31:82:42:e7:d0:2d:31:1e:6f:71:7e:c4:97:b3:52:
ac:18:0b:4b:18:76:0a:1a:21:4e:46:5f:79:f6:df:78:dd:f0:
5b:5b:fa:1f:0c:ca:d6:a9:6a:63:32:ec:aa:b8:1d:ac:0b:02:
3c:be:bf:c3:81:8a:24:0f:e2:d4:e9:96:56:20:e3:f1:79:2b:
7b:80:6c:25:28:4f:88:50:7a:95:bc:db:e9:99:9c:cd:c7:33:
8d:11:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:58 2025 by rpki-client