Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Tdm9ws-dkBROs9-yKySxcdk4Glo.roa
File: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (raw, json)
Hash identifier: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=
Subject key identifier: 4D:D9:BD:C2:CF:9D:90:14:4E:B3:DF:B2:2B:24:B1:71:D9:38:1A:5A
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01942747FCF6740A227930AA22CD95017CA6
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Tdm9ws-dkBROs9-yKySxcdk4Glo.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 31.42.188.0/23 maxlen: 23
46.175.144.0/21 maxlen: 21
91.219.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fc:f6:74:0a:22:79:30:aa:22:cd:95:01:7c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd9bdc2cf9d90144eb3dfb22b24b171d9381a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:5b:ae:10:9b:aa:49:6d:4e:c4:f2:8f:9f:
42:f6:e9:a9:7e:34:0b:b0:ad:24:b7:68:be:c2:e0:
99:c6:d4:e4:62:7f:4f:fb:53:56:ea:1d:3f:45:e6:
6e:35:15:5b:01:3f:84:51:63:e8:74:fd:96:c1:ab:
da:ce:2f:b3:6d:1d:e2:64:44:af:f5:04:17:f4:cb:
48:1b:34:a5:1d:ee:f3:a1:8e:d7:b3:04:01:d6:92:
6a:ab:49:6d:76:68:42:7b:e6:ef:8e:3e:47:d9:0d:
03:82:aa:51:86:98:f0:1d:b6:c9:12:20:f7:8d:64:
94:67:ca:43:4f:f3:4d:97:43:d6:2f:50:f2:83:57:
7a:6e:1f:00:0e:94:05:f0:22:70:d8:b1:cf:6c:20:
bf:aa:23:35:b1:13:27:ba:fe:f9:60:c4:94:d3:c7:
e1:12:cb:61:90:bb:67:89:f0:e0:49:1d:08:01:ea:
c0:7f:87:77:ed:75:ee:da:1e:cb:67:83:15:d8:63:
e5:1c:a8:e1:49:97:ae:33:a8:f3:f6:d3:5c:1c:82:
43:d5:c3:63:c6:4d:06:27:0f:f6:5f:d7:b8:da:56:
ba:26:f5:01:71:ad:a6:e1:f5:85:3e:fd:04:d0:df:
aa:84:43:47:8f:aa:a4:bd:ad:5e:96:d4:d3:a5:66:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:BD:C2:CF:9D:90:14:4E:B3:DF:B2:2B:24:B1:71:D9:38:1A:5A
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Tdm9ws-dkBROs9-yKySxcdk4Glo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.188.0/23
46.175.144.0/21
91.219.62.0/23
Signature Algorithm: sha256WithRSAEncryption
18:08:20:f4:57:92:d4:12:da:36:e0:53:f7:2c:24:18:28:aa:
50:5d:7e:95:4f:b0:5b:5d:c0:d3:9a:49:72:a1:d8:06:05:d3:
2d:5d:64:b3:40:7f:11:f6:88:fe:5a:4d:0c:bb:66:53:67:21:
a4:f7:dc:f7:b0:bd:64:f0:e0:0d:e7:8c:03:e2:59:af:1f:6d:
21:d5:cb:20:94:6f:ac:56:35:de:d3:87:24:96:d5:c5:0c:fa:
b2:f1:d1:2a:81:74:71:b3:f0:04:80:4a:df:a6:e3:94:6f:ac:
32:a3:7d:98:01:f3:be:b7:c1:ca:13:c4:e1:ab:71:84:86:0c:
79:49:72:1c:d7:b6:98:af:65:1b:a0:d8:46:56:19:80:b0:a9:
86:3e:5b:0d:2b:09:58:e3:06:4d:b8:ee:5b:49:41:35:33:78:
ae:e8:04:44:b9:35:e2:44:d6:9a:8d:6a:69:77:26:bc:1d:99:
bf:dc:36:26:da:0d:48:12:eb:67:3a:76:3e:6d:c1:75:b2:89:
01:b3:bc:29:aa:d2:18:07:82:0a:68:7f:34:24:37:d8:a0:1c:
c0:53:5c:78:59:86:17:d4:db:13:c6:8c:00:c7:2d:d1:57:d8:
51:96:dc:e3:17:a8:f5:f6:69:12:65:15:4b:ba:e3:48:fe:00:
88:0d:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:53 2025 by rpki-client