Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/v_TDPSRp-IpqVcNp3lUf9C3RzvQ.roa
File: v_TDPSRp-IpqVcNp3lUf9C3RzvQ.roa (raw, json)
Hash identifier: fgrcIg7vygVKK0fYbQSJw84JYnCfsnN1cH98nhkef84=
Subject key identifier: BF:F4:C3:3D:24:69:F8:8A:6A:55:C3:69:DE:55:1F:F4:2D:D1:CE:F4
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2D923873D5149B44B88710E7C096
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/v_TDPSRp-IpqVcNp3lUf9C3RzvQ.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48133
IP address blocks: 45.146.244.0/22 maxlen: 22
94.228.80.0/20 maxlen: 20
2a03:f040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:92:38:73:d5:14:9b:44:b8:87:10:e7:c0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff4c33d2469f88a6a55c369de551ff42dd1cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:b8:bf:b5:0b:67:21:af:c4:51:47:a1:1a:
7b:00:92:89:9c:94:01:69:eb:2e:03:1e:5d:f5:df:
db:c5:5d:97:00:49:0c:ee:65:06:e9:ba:cd:36:c1:
d1:cd:db:b4:aa:93:7e:c0:a2:9b:04:6e:08:d8:b0:
7c:d7:d4:c9:e0:e2:24:18:98:44:1a:e7:97:5b:cd:
52:d5:c7:f8:76:e0:77:f7:fb:ab:d7:bb:2a:13:cc:
c2:08:71:63:51:c7:e5:b3:79:8a:f4:42:50:e5:77:
c1:80:05:a1:b3:48:fb:40:a6:53:f0:4f:dc:48:02:
ac:d4:2d:06:ae:3f:6b:2d:90:ef:db:d6:9f:bc:a9:
d2:2b:f9:0d:76:7e:65:b8:86:9b:26:75:f0:36:f8:
c7:63:b5:7e:e2:ab:d2:6a:12:ff:25:34:5f:de:5f:
7a:0a:a0:9a:d0:6a:80:c8:bc:13:37:f2:b8:94:82:
3c:fe:83:4d:7f:9d:4f:71:27:4c:f4:ba:b5:93:90:
f5:94:b4:b9:63:80:6e:a0:53:59:f4:2b:9e:da:c9:
bb:35:5f:cc:a5:d9:c3:1c:77:5a:eb:d8:16:0d:08:
8b:1c:55:bd:ff:21:40:f7:c1:82:cd:28:dd:d7:13:
93:37:7b:b6:6e:5c:f7:7a:34:11:a1:90:d1:59:e8:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:C3:3D:24:69:F8:8A:6A:55:C3:69:DE:55:1F:F4:2D:D1:CE:F4
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/v_TDPSRp-IpqVcNp3lUf9C3RzvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
94.228.80.0/20
IPv6:
2a03:f040::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ad:fe:95:03:dc:16:61:da:73:5e:06:6d:40:be:10:29:5a:
28:6c:ab:0a:20:d3:54:42:ef:48:5b:0e:aa:ea:9f:61:bd:81:
df:51:1c:1f:b5:2b:3e:66:c0:80:8a:b7:18:66:e1:f0:ad:70:
d5:49:2e:9f:34:bb:83:ab:2b:8f:88:d7:30:68:49:1d:7a:0d:
f9:d1:68:f3:1c:22:e1:1c:08:a2:7d:86:45:0b:88:de:fd:e6:
39:ef:f9:b6:87:9e:1a:81:81:b0:5f:c7:dd:d0:81:8e:2b:dd:
e9:02:03:44:82:fe:af:33:27:17:26:2e:4c:64:15:fe:7f:f6:
8a:24:02:71:cf:f7:1a:d0:bf:83:84:da:0d:ef:ee:0a:ab:df:
37:15:84:44:7f:9e:27:87:e3:56:b6:18:ed:cd:2b:f7:a6:d5:
b7:84:23:2e:85:87:ff:3a:21:de:8a:88:02:af:c4:e1:05:a9:
f4:1e:65:90:ca:5a:e1:f7:75:71:a1:3b:99:42:50:e0:d1:b3:
41:c0:e3:80:26:be:82:69:55:99:15:85:a2:46:47:8a:3b:3c:
8f:de:5b:f4:a8:3f:52:10:bd:6a:e6:25:b5:ff:bc:e0:ce:2f:
e5:28:83:b5:38:bf:e4:6a:d4:8a:1a:1d:49:bd:f8:cf:51:52:
66:14:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:34 2025 by rpki-client