Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tldyRabq9dKxnOVAYObKE78syvc.roa
File: tldyRabq9dKxnOVAYObKE78syvc.roa (raw, json)
Hash identifier: 9C25hiiBRn8xdoTTAKiYFbXJOmaG4IFGJlrzbim+6t0=
Subject key identifier: B6:57:72:45:A6:EA:F5:D2:B1:9C:E5:40:60:E6:CA:13:BF:2C:CA:F7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24F0D5D8331A0BA30A477303A4B40
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tldyRabq9dKxnOVAYObKE78syvc.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 5.180.34.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:0d:5d:83:31:a0:ba:30:a4:77:30:3a:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6577245a6eaf5d2b19ce54060e6ca13bf2ccaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:49:8f:19:c3:2b:9e:f8:2c:60:51:b8:82:
8b:a8:11:50:79:ed:1b:ed:b8:fa:96:4b:54:de:a9:
c7:fd:8a:c2:35:a1:f2:bd:4c:35:b0:18:51:6f:88:
9c:7a:37:59:6b:ed:86:a9:e1:4a:8d:47:ee:12:dc:
3e:59:61:ef:3c:dc:bc:d5:53:19:4f:a8:82:c7:c5:
f0:a2:14:b8:6a:d2:11:ba:21:77:1b:e9:de:46:53:
d5:30:ec:49:4d:7b:3f:56:77:cc:b3:6f:3a:7c:a2:
d6:41:af:52:6b:1b:ce:f2:ba:9b:b3:3e:6c:e7:c4:
a6:39:f6:76:cd:7a:2f:70:3a:f8:66:69:3f:07:33:
28:d3:ba:5f:7d:26:a9:05:f7:5e:ab:36:42:b7:14:
9c:d8:9e:fa:4f:de:8d:90:60:38:7c:fc:bc:0a:d1:
6e:ad:cd:96:f3:aa:f2:80:be:ac:89:02:ad:ae:21:
15:88:50:cb:d6:75:e0:10:e7:b1:52:ce:5d:6c:0e:
68:d0:dd:b7:71:81:27:a1:f5:cb:1f:0d:42:ae:bc:
f7:38:76:98:5b:89:40:e5:6c:f6:1a:9c:6a:ee:90:
0a:7d:3e:02:78:0a:1f:cb:78:11:b7:9a:50:a4:84:
ca:6f:74:35:71:0b:55:4a:b3:15:5b:d7:29:6a:32:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:72:45:A6:EA:F5:D2:B1:9C:E5:40:60:E6:CA:13:BF:2C:CA:F7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tldyRabq9dKxnOVAYObKE78syvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:40:03:7b:5e:1d:20:c5:9f:79:b9:8c:cf:75:f5:bc:60:93:
c2:90:14:89:7f:1c:62:f0:12:7b:63:f7:ab:82:d1:10:c6:3b:
d8:b4:6f:9c:fb:d1:d7:39:ae:28:38:80:b2:e8:06:35:d2:26:
d2:af:c1:73:59:3d:7e:5a:52:36:0b:02:b8:34:09:09:32:e1:
2c:1c:96:fd:c9:b3:12:71:f1:0c:03:d3:81:34:2c:ba:e5:6d:
81:95:f6:a8:96:eb:1f:7b:1f:7e:9c:a6:14:55:8b:87:ec:fd:
23:a4:29:b9:da:f3:c1:a7:fc:c7:b5:f3:a6:66:bc:ca:98:54:
0f:7f:ab:59:f0:e7:55:b4:3f:52:cf:e8:2a:35:22:9b:04:1d:
95:10:50:ba:a1:33:82:c2:54:5d:83:d9:b8:7f:0d:71:f9:62:
6c:8f:89:b4:3b:7c:8c:0f:a4:b0:d5:5c:d7:cc:82:e7:a8:5e:
a2:ad:a8:54:cd:f7:9a:4d:dc:7c:3a:56:fe:63:bf:88:27:57:
d6:52:71:44:c5:65:a6:02:52:a3:94:f1:0e:06:6d:b3:3d:b3:
e6:29:e9:a2:27:eb:cd:15:38:b1:50:c4:51:78:d6:04:ea:49:
17:06:47:c7:ca:bc:8d:a3:c2:63:5f:8b:54:2c:a6:b8:06:b3:
cf:69:6e:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsk8NXYMxoLowpHcwOktAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjU3NzI0NWE2ZWFmNWQyYjE5Y2U1NDA2MGU2Y2ExM2JmMmNjYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dpJjxnDK574LGBRuIKLqBFQee0b
7bj6lktU3qnH/YrCNaHyvUw1sBhRb4icejdZa+2GqeFKjUfuEtw+WWHvPNy81VMZ
T6iCx8XwohS4atIRuiF3G+neRlPVMOxJTXs/VnfMs286fKLWQa9SaxvO8rqbsz5s
58SmOfZ2zXovcDr4Zmk/BzMo07pffSapBfdeqzZCtxSc2J76T96NkGA4fPy8CtFu
rc2W86rygL6siQKtriEViFDL1nXgEOexUs5dbA5o0N23cYEnofXLHw1Crrz3OHaY
W4lA5Wz2Gpxq7pAKfT4CeAofy3gRt5pQpITKb3Q1cQtVSrMVW9cpajJZjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZXckWm6vXSsZzlQGDmyhO/LMr3MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdGxkeVJhYnE5ZEt4bk9WQVlPYktFNzhzeXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQiAwQA
LVljMA0GCSqGSIb3DQEBCwUAA4IBAQAyQAN7Xh0gxZ95uYzPdfW8YJPCkBSJfxxi
8BJ7Y/ergtEQxjvYtG+c+9HXOa4oOICy6AY10ibSr8FzWT1+WlI2CwK4NAkJMuEs
HJb9ybMScfEMA9OBNCy65W2Blfaolusfex9+nKYUVYuH7P0jpCm52vPBp/zHtfOm
ZrzKmFQPf6tZ8OdVtD9Sz+gqNSKbBB2VEFC6oTOCwlRdg9m4fw1x+WJsj4m0O3yM
D6Sw1VzXzILnqF6irahUzfeaTdx8Olb+Y7+IJ1fWUnFExWWmAlKjlPEOBm2zPbPm
KemiJ+vNFTixUMRReNYE6kkXBkfHyryNo8JjX4tULKa4BrPPaW7Y
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:43 2025 by rpki-client