Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa
File: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (raw, json)
Hash identifier: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=
Subject key identifier: 4E:53:1D:17:2A:3C:51:FA:89:F9:10:EB:28:B0:E1:AE:0F:F9:5C:AC
Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial: 0194258F9BF060E81B94DDF39815CE998BA3
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208708
IP address blocks: 45.87.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:f0:60:e8:1b:94:dd:f3:98:15:ce:99:8b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e531d172a3c51fa89f910eb28b0e1ae0ff95cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:99:7d:a8:f9:8c:35:dd:0a:41:c2:19:aa:
e6:c3:25:99:02:1e:83:a5:08:13:ed:44:0a:fc:ca:
3e:17:2f:a8:e0:61:eb:4b:33:2d:18:d8:dc:cc:cf:
55:6d:df:38:d0:26:c9:d8:7b:87:5b:31:66:aa:0d:
55:2f:8c:42:6b:8a:81:93:9e:32:e0:89:70:1d:f9:
db:aa:b7:c7:a9:19:06:01:07:fb:02:45:42:e8:63:
08:bf:ea:f6:60:44:ef:94:ca:fe:66:40:55:bf:b3:
98:15:28:8a:24:ce:0e:8e:cc:ea:ef:39:47:b4:7f:
57:f7:00:6c:5d:c5:89:cd:8e:1f:58:3b:b8:9a:eb:
30:16:84:dc:07:67:dd:da:6a:93:2d:e8:9c:0b:de:
b7:b8:15:da:c1:18:1a:ec:1f:48:bd:d2:d0:1c:70:
bf:32:be:38:8c:e2:b0:19:3a:c5:39:ae:d8:36:a3:
73:50:65:d0:30:a2:44:41:de:b9:78:6f:55:65:d1:
9a:96:de:cd:19:6c:c1:16:c2:f0:45:2b:d0:86:c3:
c1:ef:90:8e:e2:41:2a:1b:eb:da:df:e5:14:0e:2b:
6b:ee:20:4d:55:76:d7:20:f3:4d:9d:2c:49:8f:3a:
46:26:0a:7f:cc:1d:dc:08:73:62:76:ab:d3:cc:51:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:1D:17:2A:3C:51:FA:89:F9:10:EB:28:B0:E1:AE:0F:F9:5C:AC
X509v3 Authority Key Identifier:
keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.112.0/22
Signature Algorithm: sha256WithRSAEncryption
80:75:4d:a2:45:f9:6d:f1:04:ea:76:7d:10:83:79:9b:0c:92:
18:b9:ad:fc:bc:fd:f3:c0:bb:e5:5c:1c:06:18:0a:99:a9:5b:
ec:df:30:32:19:4b:ad:2a:e7:2e:f3:57:c0:26:e0:d6:02:8b:
cc:ac:ae:c3:29:a1:f8:80:74:42:5f:6a:e3:82:0a:81:b9:0b:
80:bf:90:5e:c8:a9:c9:96:c4:d8:8f:3a:34:ee:89:b3:14:13:
fd:63:61:b6:74:2f:a3:44:c6:0d:bc:b5:4b:7f:3a:c1:cf:cd:
c0:cf:76:b8:5e:41:e7:53:3e:97:52:76:84:3f:3c:d5:79:5a:
7a:31:d4:75:cc:ac:e8:f3:40:be:4f:b2:cb:c7:53:8f:80:df:
39:2e:dc:30:73:fb:1b:5b:5d:5d:b7:c3:a5:03:1b:f1:74:a6:
bb:bb:60:79:14:d5:d9:90:ca:44:a0:4e:d6:3a:e8:50:72:6b:
fb:9c:09:60:4c:0b:75:62:d9:f9:16:19:f6:c6:aa:72:40:98:
80:f9:30:5b:84:54:d2:3b:12:cb:47:42:c4:a4:ca:19:b7:ec:
6e:49:99:1f:a5:06:2a:4f:72:d9:bd:e2:dc:b1:54:ed:ad:27:
77:ed:61:d8:ae:c1:de:ea:38:d6:a4:81:94:f6:3f:d5:8d:f1:
5a:36:9c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:51 2025 by rpki-client