Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TLZ-85HTafsI7Wy_AVdHNB_gKpc.roa
File: TLZ-85HTafsI7Wy_AVdHNB_gKpc.roa (raw, json)
Hash identifier: R36b9i0ycLE+tL19j1dfY1U4KjVv8mIa2Vj4Y1srJ6U=
Subject key identifier: 4C:B6:7E:F3:91:D3:69:FB:08:ED:6C:BF:01:57:47:34:1F:E0:2A:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194A656B0A850490679D5006122AC675036
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TLZ-85HTafsI7Wy_AVdHNB_gKpc.roa
Signing time: Mon 27 Jan 2025 05:58:06 +0000
ROA not before: Mon 27 Jan 2025 05:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 151.243.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:56:b0:a8:50:49:06:79:d5:00:61:22:ac:67:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 27 05:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb67ef391d369fb08ed6cbf015747341fe02a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:b5:ae:81:48:3e:e0:b4:3c:e0:6c:65:c3:
c9:d0:b2:00:54:e5:54:39:16:14:c3:bc:51:aa:9e:
11:5d:b1:91:78:29:1c:2a:ff:95:02:e5:fc:ea:80:
b2:75:50:b3:81:f2:29:08:48:93:0b:a6:ac:a8:09:
fa:1b:87:8a:ed:24:78:f1:90:9c:60:d4:5e:17:9a:
0c:08:04:2e:64:56:d9:57:31:2f:3d:f4:69:9c:a8:
f0:9f:bf:c8:ef:22:a5:d5:71:05:b6:27:04:ee:14:
b5:81:ac:ab:c1:3a:b6:14:48:88:75:7d:2d:39:8b:
cd:d3:35:5f:7b:84:fb:43:cb:5b:be:75:d1:a7:94:
f0:23:e2:9b:a0:39:26:cd:d4:34:cd:cc:69:95:ae:
0e:30:a8:58:75:3d:67:0e:fd:8c:c7:79:9d:f1:6e:
9c:15:8c:c3:12:7a:c5:45:12:92:50:01:c2:24:5f:
d2:e6:f8:8a:54:ad:4a:0a:22:26:a8:58:e1:2f:e4:
27:1b:ab:a7:cb:3a:fc:95:6d:08:c6:86:31:ec:42:
5e:3a:de:72:b4:97:8f:bf:47:22:84:00:80:0b:69:
76:74:91:dd:a8:1b:20:2c:d7:af:ca:ef:06:94:f3:
2a:3b:b5:c0:7d:4e:d7:f5:58:9d:d7:43:03:4e:b3:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:7E:F3:91:D3:69:FB:08:ED:6C:BF:01:57:47:34:1F:E0:2A:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TLZ-85HTafsI7Wy_AVdHNB_gKpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8c:ba:a8:12:1a:c7:d2:2e:c7:39:9d:2c:be:c0:f5:31:4a:
03:fd:77:c8:71:db:16:09:05:ea:af:9b:c8:fb:7d:87:c3:9f:
2e:90:ee:be:3f:75:44:5e:ed:80:bf:22:f5:ae:da:f8:2f:7e:
94:fd:ca:88:50:64:72:91:36:88:b4:d8:6b:63:00:9a:5d:40:
38:93:49:9b:f1:d7:ff:0f:8b:a4:06:74:9e:05:42:fa:0f:e4:
c1:4e:82:03:8b:6e:81:98:0d:01:64:00:9b:48:e8:10:4b:66:
b9:4a:d5:fb:54:b1:4f:18:33:48:1a:23:75:64:e2:80:2b:e0:
ad:f4:5f:8c:f5:da:b3:cc:29:95:b2:de:76:67:5c:2e:1a:b4:
5e:dd:f9:70:3e:ce:2f:56:b5:1e:fc:c6:2d:d1:c3:83:8a:64:
9b:ec:b5:2c:91:ee:75:11:fd:3d:75:7c:97:13:4e:fd:3d:96:
29:79:a6:65:ca:fe:91:d9:28:18:b9:ee:a5:77:58:6e:ae:c3:
58:38:b7:82:7c:21:4f:22:b3:53:ae:ff:21:47:50:21:af:05:
62:d7:23:12:fe:f4:e6:09:10:77:aa:39:27:98:7f:e0:38:ec:
d6:d7:fc:32:cd:a0:8c:77:38:61:86:12:08:c5:e1:da:c7:8e:
8a:0d:be:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSmVrCoUEkGedUAYSKsZ1A2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTI3MDU1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2I2N2VmMzkxZDM2OWZiMDhlZDZjYmYwMTU3NDczNDFmZTAyYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfa1roFIPuC0POBsZcPJ0LIAVOVU
ORYUw7xRqp4RXbGReCkcKv+VAuX86oCydVCzgfIpCEiTC6asqAn6G4eK7SR48ZCc
YNReF5oMCAQuZFbZVzEvPfRpnKjwn7/I7yKl1XEFticE7hS1gayrwTq2FEiIdX0t
OYvN0zVfe4T7Q8tbvnXRp5TwI+KboDkmzdQ0zcxpla4OMKhYdT1nDv2Mx3md8W6c
FYzDEnrFRRKSUAHCJF/S5viKVK1KCiImqFjhL+QnG6unyzr8lW0IxoYx7EJeOt5y
tJePv0cihACAC2l2dJHdqBsgLNevyu8GlPMqO7XAfU7X9Vid10MDTrMbYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEy2fvOR02n7CO1svwFXRzQf4CqXMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVExaLTg1SFRhZnNJN1d5X0FWZEhOQl9nS3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PqMA0G
CSqGSIb3DQEBCwUAA4IBAQBkjLqoEhrH0i7HOZ0svsD1MUoD/XfIcdsWCQXqr5vI
+32Hw58ukO6+P3VEXu2AvyL1rtr4L36U/cqIUGRykTaItNhrYwCaXUA4k0mb8df/
D4ukBnSeBUL6D+TBToIDi26BmA0BZACbSOgQS2a5StX7VLFPGDNIGiN1ZOKAK+Ct
9F+M9dqzzCmVst52Z1wuGrRe3flwPs4vVrUe/MYt0cODimSb7LUske51Ef09dXyX
E079PZYpeaZlyv6R2SgYue6ld1hursNYOLeCfCFPIrNTrv8hR1AhrwVi1yMS/vTm
CRB3qjknmH/gOOzW1/wyzaCMdzhhhhIIxeHax46KDb5F
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:55 2025 by rpki-client