Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/timiQQczIaD15znmSzQDswiMx0s.roa
File: timiQQczIaD15znmSzQDswiMx0s.roa (raw, json)
Hash identifier: H9yBMiDRHBt8VmyxZclxtd/1S9Ws3WUjbSdhuxVZ7z4=
Subject key identifier: B6:29:A2:41:07:33:21:A0:F5:E7:39:E6:4B:34:03:B3:08:8C:C7:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748212E165C23D6B5C2F22BB743859B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/timiQQczIaD15znmSzQDswiMx0s.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 2a0f:ea40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:21:2e:16:5c:23:d6:b5:c2:f2:2b:b7:43:85:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b629a241073321a0f5e739e64b3403b3088cc74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:1d:63:0b:52:4b:b5:05:45:f0:f5:ad:33:
f9:46:70:82:fb:50:a2:0f:ad:9a:33:58:df:cf:5c:
c0:f2:b4:04:35:51:7a:cd:e8:b0:49:23:3c:83:27:
06:9f:56:7c:e5:3a:d8:c6:ab:c4:e3:4c:4c:92:f3:
2f:06:27:9a:ae:c9:73:d4:43:94:6d:af:8d:65:d6:
8e:16:23:ca:f1:f0:4c:8f:9e:8c:3c:29:75:ba:08:
33:09:0e:1b:2e:d0:9d:8f:77:77:b0:35:e5:76:c8:
7f:d1:90:e8:73:ef:d3:94:40:87:30:e3:fe:12:b4:
5b:7e:c6:ff:e0:72:3e:89:a4:7a:45:69:9e:01:78:
ef:cb:8d:28:78:c4:4d:ca:fe:37:18:c7:18:d1:73:
ab:3a:04:32:04:dc:51:a5:d4:10:07:09:cd:ed:b6:
bf:9f:39:b4:fd:ab:32:f7:13:bd:01:02:99:5f:bd:
09:3b:74:ad:ed:08:66:c9:5f:62:ee:48:dd:40:b8:
bf:16:0b:9c:df:20:bc:b1:ca:1a:5d:c3:08:00:6f:
f5:7b:ff:c4:07:2f:63:35:db:5a:c6:e2:8e:5b:fa:
a2:08:7d:37:eb:e8:e9:89:8f:87:60:67:08:7b:aa:
ad:10:04:10:ab:6f:fa:69:6c:ba:fe:53:16:75:3a:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:A2:41:07:33:21:A0:F5:E7:39:E6:4B:34:03:B3:08:8C:C7:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/timiQQczIaD15znmSzQDswiMx0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
bf:6a:3a:4d:3a:d2:d1:df:44:32:67:c0:67:c3:a8:78:fc:8b:
e6:1c:ea:51:83:38:f8:15:df:c6:8b:7c:fe:57:7f:4a:15:3c:
b9:46:e9:79:b4:2d:15:4d:32:d7:17:36:5f:2b:34:e4:a9:f4:
59:06:11:35:da:78:b2:43:5e:e2:de:b9:df:5e:cf:7b:53:96:
5b:59:15:fa:8c:10:5e:5f:31:9e:a8:43:e8:5b:b8:df:9d:b8:
f9:e4:f1:f0:98:16:6a:86:16:9d:58:67:ae:ef:5f:ee:f3:2a:
78:10:14:aa:a3:c0:29:82:80:4e:92:30:46:60:77:ba:04:2c:
db:2b:67:a1:f1:22:60:ba:5e:2f:35:38:1c:fb:eb:67:47:69:
f7:07:d6:49:39:8b:92:30:57:24:a7:cd:03:d2:42:79:61:74:
a9:b2:da:3f:e0:f3:0a:05:ff:f5:ce:22:eb:6f:6f:38:cc:c5:
5e:ba:03:c7:fb:e6:7f:e3:08:8b:77:ca:d8:ee:bb:d2:32:0d:
d7:06:ab:b5:4a:4a:19:c4:89:5a:d9:86:72:14:b2:31:15:33:
0e:8d:3f:ae:e5:b7:9d:80:9f:9a:bc:50:59:4c:f0:8e:92:e1:
81:5e:ef:be:ba:b1:e6:58:bb:06:de:6b:13:c2:67:5e:dc:c9:
6f:ef:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:52 2025 by rpki-client