Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa
File: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (raw, json)
Hash identifier: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=
Subject key identifier: 4F:0F:D3:9B:7F:49:D7:93:EE:2E:73:F0:AF:67:6A:BD:D9:FE:0E:1E
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FF2B9D676E581FBC699B7CD3E0B7
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ff:2b:9d:67:6e:58:1f:bc:69:9b:7c:d3:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f0fd39b7f49d793ee2e73f0af676abdd9fe0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:e1:05:9e:68:dd:1d:c9:c9:20:c9:80:c0:
23:f1:2f:a3:f5:dd:2c:ed:ca:99:bc:0e:59:90:fc:
72:7a:71:3d:08:f5:c6:39:0f:0c:83:2f:e1:88:60:
fa:d1:42:6c:f1:e2:6d:ea:ac:42:c4:3a:ae:02:99:
f9:fd:01:b8:aa:8f:4b:04:9c:b9:e4:05:5f:7b:10:
86:2f:0a:00:48:02:32:3b:4d:32:2d:22:d6:11:18:
06:81:52:ac:6c:2a:39:a5:0e:f6:18:da:92:df:15:
05:ea:8d:73:15:ea:21:58:96:e5:9a:9f:d9:e3:e5:
07:20:0f:ec:4a:6c:97:9c:02:64:c2:6f:fa:d9:d2:
2a:f7:3c:84:36:2b:71:c1:b4:d0:c2:8c:e9:ca:32:
31:dc:ce:4b:e6:c8:3e:bc:0e:cd:b7:b6:cb:b7:f5:
cf:66:17:b3:e0:18:c7:91:56:cf:cb:24:80:4a:6a:
71:ab:96:b4:c9:96:bc:2d:4a:23:a0:5a:f4:81:d1:
e9:22:ff:33:76:24:47:c1:36:3e:53:b8:2a:23:b6:
25:49:99:d1:7a:e7:f2:7b:b1:6c:b5:db:2b:1a:6c:
70:46:6d:d1:6e:3f:9f:76:6f:38:08:0d:51:eb:59:
9f:07:ab:09:97:86:70:0d:ec:4a:54:77:dd:bc:ea:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:D3:9B:7F:49:D7:93:EE:2E:73:F0:AF:67:6A:BD:D9:FE:0E:1E
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c9:ee:9e:ae:7d:84:d6:16:96:99:3a:3a:91:2c:80:21:25:
39:2e:5e:61:3d:83:51:82:fa:7c:88:42:0f:5b:d7:9c:69:fb:
d5:65:ff:4e:32:72:27:61:9a:66:e4:10:b3:d2:84:69:85:af:
81:ba:e8:16:6f:6a:77:c3:c8:ca:24:1e:f8:cf:b6:49:ef:d9:
2d:a3:a1:23:47:c6:a5:f7:cf:fe:4e:8d:6a:c3:a1:2c:d5:87:
90:82:58:8b:92:a3:e9:a6:1d:d4:a6:9a:5b:d5:11:92:2b:7f:
bf:55:42:7f:93:78:28:d3:1e:82:81:1b:a5:77:22:45:58:31:
9a:9b:f7:84:30:b3:f6:bf:e4:9b:a2:ea:94:d8:32:ce:b7:16:
3e:0f:7f:7f:38:b4:33:0f:ca:dc:3f:4f:49:84:3d:b8:4e:a2:
f8:d4:3d:6a:cf:84:5e:a6:98:c2:13:ff:a3:e1:de:b9:e2:fb:
d2:bf:3d:92:66:d7:b1:ea:08:1d:4c:2a:89:b8:10:98:14:cf:
23:8d:7e:ce:b5:35:48:8f:88:56:d6:07:15:c0:86:e4:79:08:
52:22:2a:59:a7:68:d7:b3:03:13:b7:34:82:6c:2c:46:9f:65:
57:9f:56:02:93:97:0a:40:ec:3d:4b:01:b1:1b:7a:5f:bb:6c:
9f:13:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:30 2025 by rpki-client