Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/twRuprVXnPVVcyrSMrNa_0_uqhM.roa
File: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (raw, json)
Hash identifier: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=
Subject key identifier: B7:04:6E:A6:B5:57:9C:F5:55:73:2A:D2:32:B3:5A:FF:4F:EE:AA:13
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0194244540F0B8B4BB130C506C89DEB9058E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/twRuprVXnPVVcyrSMrNa_0_uqhM.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 46.34.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:f0:b8:b4:bb:13:0c:50:6c:89:de:b9:05:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7046ea6b5579cf555732ad232b35aff4feeaa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:0a:f1:d0:31:6f:cf:0f:ad:c4:db:55:dd:
c5:80:94:0e:b3:94:15:cc:fa:31:20:fe:2f:9d:c4:
03:8c:da:3e:27:4a:c4:49:25:8a:21:00:17:5c:a7:
93:0c:cd:fa:82:8b:6a:9c:9c:3b:54:a4:b7:7d:db:
70:b2:9c:a4:e6:ce:e2:b1:e0:7d:6e:26:3e:53:cb:
0b:b1:56:0c:c1:6a:6c:e3:b8:fd:ef:60:ec:b0:50:
f6:0e:59:97:d9:eb:1c:85:c7:1f:b4:62:e8:ef:6b:
81:d3:95:f7:d1:6d:37:10:de:80:69:b7:15:01:a2:
72:57:e5:35:d1:9c:a3:e5:65:27:b6:b8:18:4f:06:
52:39:0f:cf:68:8e:76:4d:92:42:22:d7:9a:da:41:
78:db:9c:0c:36:4d:ba:62:41:0c:3d:3d:68:8b:b5:
fc:b4:2a:98:d8:38:91:47:3b:45:8c:7b:6e:8f:f0:
51:26:a3:32:37:22:20:ad:87:06:91:29:80:76:de:
4c:91:44:5c:eb:85:14:af:58:2c:ed:a8:52:03:1e:
51:04:b1:f0:a7:04:04:fd:ef:7a:af:09:d7:b8:16:
6f:44:ad:13:b9:12:53:07:f8:77:4a:35:7c:8f:9d:
1f:01:4c:aa:34:f4:cb:eb:9b:20:36:54:d7:3d:c1:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:6E:A6:B5:57:9C:F5:55:73:2A:D2:32:B3:5A:FF:4F:EE:AA:13
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/twRuprVXnPVVcyrSMrNa_0_uqhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a2:85:a7:be:f9:69:ca:b3:0a:c7:e6:89:a1:e9:f7:3d:d8:
c7:50:40:ca:d9:c7:a6:b2:fb:f7:46:71:eb:31:f2:47:7c:ed:
0f:37:2d:be:9b:4c:ec:fd:31:7b:f1:c4:7a:32:d2:2f:1b:bd:
7f:e3:8d:c9:17:4f:f9:bb:7b:12:cc:9c:d4:a5:0f:db:c5:f3:
64:03:33:ef:6d:d0:38:98:9b:f0:e5:c3:63:4d:af:80:58:de:
34:f0:58:d3:71:f8:5d:d6:ea:3a:24:bf:78:4c:11:f1:a8:a6:
8a:be:a8:2c:46:17:09:15:6a:b6:81:bc:fa:65:6f:94:0f:f2:
d3:50:8a:b0:99:15:bb:c1:e7:65:c3:5d:d6:5c:76:8a:9d:5d:
68:f0:24:1f:0d:0f:f4:0c:43:2c:d3:af:e8:44:d4:7b:75:e7:
eb:65:9f:fe:d5:4f:55:df:ff:de:8f:ee:0c:9e:ed:ec:38:f4:
7d:31:0c:01:10:d9:1e:1f:71:02:b5:10:b1:4d:77:93:b5:ed:
74:e9:ba:94:89:8a:da:8c:2d:74:46:b2:39:59:de:56:b4:d4:
71:b1:31:14:4e:9c:98:92:d8:1a:71:33:fa:75:be:46:88:50:
77:34:2e:0c:2b:fa:92:04:99:b2:1d:40:97:b6:70:34:a2:41:
85:db:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:28 2025 by rpki-client