Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/TjOWAn9m61FkB31GdiLBvzbAI7U.roa
File: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (raw, json)
Hash identifier: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=
Subject key identifier: 4E:33:96:02:7F:66:EB:51:64:07:7D:46:76:22:C1:BF:36:C0:23:B5
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 019420D626A8153888E7DC90ADBA259BEAFA
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/TjOWAn9m61FkB31GdiLBvzbAI7U.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207186
IP address blocks: 2001:67c:980::/48 maxlen: 48
2001:67c:984::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:26:a8:15:38:88:e7:dc:90:ad:ba:25:9b:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3396027f66eb5164077d467622c1bf36c023b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:62:30:ce:77:38:14:c9:c1:10:2f:85:61:
f7:36:4e:1f:99:68:68:8e:8f:bf:32:22:82:1d:f0:
7d:17:5a:ed:0a:0a:c4:7a:9f:2d:7b:61:ba:7b:e1:
09:65:2b:ad:3c:1c:fd:54:d7:db:60:2c:80:57:16:
cb:f4:78:32:62:be:a3:d9:3f:b7:7b:83:34:f3:57:
ae:48:eb:83:90:c1:b9:07:a2:bb:c2:9d:a1:f7:0d:
8d:3e:d3:86:3b:14:92:95:8c:75:cb:81:f2:6a:fd:
cf:3e:7c:d4:8e:b2:87:55:08:77:b9:5a:46:5e:42:
e0:e2:85:90:36:6b:b2:c3:09:62:05:f1:d9:e7:d8:
69:d1:b4:ef:d4:e9:b4:04:6f:95:2b:c1:4e:6d:c7:
ea:76:18:91:30:ff:98:85:c7:f2:db:7a:3f:ef:4f:
13:36:73:64:74:c4:c8:e4:1b:e5:1a:ff:65:bf:3a:
c8:8c:f7:ad:67:cb:8c:7b:6d:a1:00:88:ef:b6:e6:
ee:ef:cc:c6:33:e6:11:73:10:9d:e0:79:d0:cf:e6:
b8:d8:b9:81:7c:6e:92:87:a7:1e:f9:f1:ba:e9:5e:
2e:56:96:53:b3:d0:2c:4a:72:4c:2b:59:9e:24:1d:
75:6f:6b:0d:8e:ec:67:cf:e3:e9:f4:3c:fd:df:ea:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:96:02:7F:66:EB:51:64:07:7D:46:76:22:C1:BF:36:C0:23:B5
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/TjOWAn9m61FkB31GdiLBvzbAI7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:980::/48
2001:67c:984::/48
Signature Algorithm: sha256WithRSAEncryption
08:5d:b0:0f:a7:95:e6:01:7d:4a:38:3f:38:c9:7e:79:ba:31:
59:d6:94:9f:37:f6:e3:92:f9:30:d8:3d:cb:e5:ea:8e:d8:92:
54:b3:75:39:ee:4a:67:0c:a0:c3:61:66:2f:da:0e:f0:3e:78:
65:6b:8d:d4:3e:9c:3d:f7:75:1e:34:5b:88:04:ac:aa:0a:8f:
dc:52:c8:3b:89:f2:3d:db:cb:3d:ff:2c:2c:33:99:92:63:80:
b8:db:7d:a3:26:7f:ce:87:dd:06:db:db:6b:05:b3:c8:06:bb:
82:8c:fe:94:37:8e:34:f2:28:6c:f9:4e:7a:2f:74:cd:b5:65:
26:74:b0:1a:4e:62:b2:85:b3:d5:69:ff:f6:f9:c5:ee:c8:19:
f2:81:6e:39:7f:31:dc:f1:f5:e5:77:22:fe:28:ee:71:61:06:
df:8f:cf:d6:66:aa:e2:c7:7d:56:9a:8b:e9:6d:54:1d:40:99:
52:e0:87:13:38:a5:af:c3:db:ea:91:e0:fb:4e:0d:bc:f2:87:
c2:8b:ac:c4:0f:14:3a:63:72:13:c5:9a:7b:bd:a0:93:e7:30:
f6:44:e4:f5:5f:b3:7a:b2:2a:e6:50:74:d1:82:23:e1:42:5f:
68:6c:e7:fd:63:ed:36:01:09:46:51:88:c9:ae:75:56:44:6c:
88:f2:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:33 2025 by rpki-client