Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/TRECTuZaimFnG4pglvpHe58bwuE.roa
File: TRECTuZaimFnG4pglvpHe58bwuE.roa (raw, json)
Hash identifier: t9cM2WOMQCuoJ1uhCsS6FdzzKHKaQ2I8gJTVvzG0yxM=
Subject key identifier: 4D:11:02:4E:E6:5A:8A:61:67:1B:8A:60:96:FA:47:7B:9F:1B:C2:E1
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE15B4E418AA270BA39B19115DD55
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/TRECTuZaimFnG4pglvpHe58bwuE.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 2a0f:5707:aae0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e1:5b:4e:41:8a:a2:70:ba:39:b1:91:15:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d11024ee65a8a61671b8a6096fa477b9f1bc2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:8d:b5:20:ee:5a:f8:9e:2a:4d:ec:b0:6c:
b5:18:20:24:cd:04:8c:be:8d:9b:22:09:d6:6c:a5:
d4:e7:23:9a:f3:f0:60:58:27:53:9f:d6:92:38:32:
ca:8a:e3:8d:e1:eb:48:79:34:f7:df:c1:5b:c8:c1:
83:85:83:c4:46:50:c8:af:a7:29:d3:83:7c:3a:b1:
24:32:9b:4d:4d:6b:f1:2e:fc:32:7a:7c:a8:d2:bb:
a2:e0:32:ae:94:c8:4c:36:00:45:c0:6e:8a:57:00:
a4:10:e8:d3:4b:9d:71:a7:b6:2c:cf:19:54:cc:c6:
00:38:d4:34:33:fd:6a:ab:b3:99:ef:2f:87:58:a0:
70:5d:b7:12:f1:46:1b:7f:23:d0:37:e4:1d:96:79:
ec:4f:18:b2:dc:25:d7:ea:89:11:89:19:b7:19:20:
37:a5:05:75:c4:cf:5b:83:1d:a7:c0:b5:a5:72:02:
ee:58:d7:a8:6a:9f:8c:57:bf:d0:87:e4:aa:df:c3:
b2:94:27:09:e7:70:e2:4d:da:81:be:f2:80:69:46:
13:a3:ef:69:b6:3d:27:18:7d:3d:4a:1c:91:81:d9:
c6:d4:4e:41:23:d4:44:84:97:b3:14:a0:22:2b:00:
10:cb:bc:28:3d:54:9f:d9:de:50:0b:33:0b:f6:76:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:02:4E:E6:5A:8A:61:67:1B:8A:60:96:FA:47:7B:9F:1B:C2:E1
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/TRECTuZaimFnG4pglvpHe58bwuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aae0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:a4:5e:7b:27:64:12:9b:e7:01:cd:27:78:5e:0e:33:4e:13:
24:58:3c:4b:6d:c5:6a:93:f5:ee:40:a4:16:57:e7:50:95:48:
c2:17:b9:1d:9d:3c:c0:26:3e:37:a8:d1:1c:7e:6b:87:24:03:
7c:00:85:b3:16:c4:35:58:23:fa:4c:3c:2c:c8:5f:1d:e7:da:
02:95:65:06:02:72:df:66:2f:39:7c:d5:b4:11:57:95:2e:a7:
bd:25:1f:2f:5a:d4:38:f2:37:9a:46:a6:60:da:7e:2f:a4:67:
31:a5:db:ed:6c:35:05:f8:e7:fb:9d:d9:e2:04:0e:35:02:0e:
9d:7c:ed:26:9c:66:ff:27:60:12:3f:87:ef:b9:65:d7:af:48:
c8:21:2d:b0:e2:07:50:f3:b0:8e:33:08:f4:a0:44:a0:f7:9a:
e1:9d:ac:41:1c:0c:11:bf:26:6c:a3:fb:e7:0c:be:e3:bf:e6:
38:77:56:a8:2a:8d:61:c1:36:8c:3e:53:8a:f4:da:c7:37:01:
c3:4a:8c:e9:2f:a1:f0:89:04:cf:be:c8:dd:32:f0:ea:13:67:
b1:ef:4b:18:49:c2:6b:e1:8b:10:59:03:62:45:19:00:a5:16:
c7:8a:4f:f0:a6:82:d4:77:c0:2c:b6:49:00:0a:6c:e6:19:bb:
93:f6:d4:b0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma+FbTkGKonC6ObGRFd1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDExMDI0ZWU2NWE4YTYxNjcxYjhhNjA5NmZhNDc3YjlmMWJjMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCNtSDuWvieKk3ssGy1GCAkzQSM
vo2bIgnWbKXU5yOa8/BgWCdTn9aSODLKiuON4etIeTT338FbyMGDhYPERlDIr6cp
04N8OrEkMptNTWvxLvwyenyo0rui4DKulMhMNgBFwG6KVwCkEOjTS51xp7YszxlU
zMYAONQ0M/1qq7OZ7y+HWKBwXbcS8UYbfyPQN+QdlnnsTxiy3CXX6okRiRm3GSA3
pQV1xM9bgx2nwLWlcgLuWNeoap+MV7/Qh+Sq38OylCcJ53DiTdqBvvKAaUYTo+9p
tj0nGH09ShyRgdnG1E5BI9REhJezFKAiKwAQy7woPVSf2d5QCzML9nYDowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE0RAk7mWophZxuKYJb6R3ufG8LhMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvVFJFQ1R1WmFpbUZuRzRwZ2x2cEhlNThid3VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6rg
MA0GCSqGSIb3DQEBCwUAA4IBAQCMpF57J2QSm+cBzSd4Xg4zThMkWDxLbcVqk/Xu
QKQWV+dQlUjCF7kdnTzAJj43qNEcfmuHJAN8AIWzFsQ1WCP6TDwsyF8d59oClWUG
AnLfZi85fNW0EVeVLqe9JR8vWtQ48jeaRqZg2n4vpGcxpdvtbDUF+Of7ndniBA41
Ag6dfO0mnGb/J2ASP4fvuWXXr0jIIS2w4gdQ87COMwj0oESg95rhnaxBHAwRvyZs
o/vnDL7jv+Y4d1aoKo1hwTaMPlOK9NrHNwHDSozpL6HwiQTPvsjdMvDqE2ex70sY
ScJr4YsQWQNiRRkApRbHik/wpoLUd8AstkkACmzmGbuT9tSw
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:22 2025 by rpki-client