Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TKK-Ad7C88VyVrIb91BCtqFt0fw.roa
File: TKK-Ad7C88VyVrIb91BCtqFt0fw.roa (raw, json)
Hash identifier: mSmNVOlgUR1j7BoMIJca5dEAD1KLMIcK2AefsXaqNgs=
Subject key identifier: 4C:A2:BE:01:DE:C2:F3:C5:72:56:B2:1B:F7:50:42:B6:A1:6D:D1:FC
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018E524963F212C7A1342B071AB3C5ED8629
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TKK-Ad7C88VyVrIb91BCtqFt0fw.roa
Signing time: Mon 18 Mar 2024 15:58:45 +0000
ROA not before: Mon 18 Mar 2024 15:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 2a0f:7803:ff90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:49:63:f2:12:c7:a1:34:2b:07:1a:b3:c5:ed:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Mar 18 15:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca2be01dec2f3c57256b21bf75042b6a16dd1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:7c:c7:d4:93:7c:60:b0:84:0b:95:77:54:
1f:68:30:6f:fd:6d:7c:fe:77:c3:70:6b:46:41:6a:
95:1c:e6:4e:2c:b5:5f:5c:a7:39:59:16:c7:ea:db:
fc:34:d4:11:94:6c:99:29:65:a7:8c:fd:ae:e2:91:
65:77:5d:89:3d:4b:42:06:b5:96:d6:6d:50:f2:b1:
60:19:bb:9f:9e:02:c4:d6:45:77:32:3f:b4:0a:cd:
56:16:4f:ac:cb:14:25:2f:73:69:f8:93:04:33:ef:
3c:c6:37:52:ff:c8:36:a2:6e:ac:34:f1:4b:c2:cd:
2a:46:cd:4e:04:3b:e4:91:28:8d:07:f7:98:61:10:
55:bf:67:76:85:13:ab:2d:ac:5e:73:83:e5:93:dd:
3f:e1:43:df:9c:9b:99:88:64:07:88:a8:5e:64:24:
23:6d:2c:bf:b1:f0:c0:14:5a:b4:56:03:63:94:d9:
45:4d:ef:f8:e1:1d:1f:ad:73:3f:5f:91:da:a4:41:
31:f3:08:ff:81:ca:a3:b9:f1:b1:27:2a:e9:0b:ea:
63:bf:49:09:5e:cc:4c:c3:c1:a0:05:2f:b6:e7:9c:
6f:ed:bb:8f:39:51:98:71:1a:0b:2a:37:46:0b:88:
b0:75:05:d3:7f:3b:e4:e1:15:0a:3c:ed:4a:b2:67:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:BE:01:DE:C2:F3:C5:72:56:B2:1B:F7:50:42:B6:A1:6D:D1:FC
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TKK-Ad7C88VyVrIb91BCtqFt0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
54:d3:9b:16:da:6a:aa:d9:81:70:de:0b:6c:3e:95:7d:bf:27:
1c:88:2a:b5:19:c6:f7:ad:77:f9:b6:8f:86:a4:d7:02:91:8f:
cf:4a:89:18:1d:56:0d:35:ec:a4:c2:f7:23:a9:c8:7f:c5:d5:
b7:c5:26:4b:a3:23:dc:c9:24:5a:3d:7a:66:23:ab:a2:e9:8e:
16:c1:e9:fd:f8:ef:fa:a3:2e:a5:f5:c6:b9:77:05:63:14:77:
7d:56:98:f5:9e:c3:5b:95:6a:26:9b:05:2d:90:5b:c3:e2:bf:
bb:9e:4b:e5:29:43:88:3d:f2:10:63:3c:a4:5d:be:3e:54:15:
ed:26:e1:cd:9b:3e:a9:1e:60:54:51:72:eb:7b:b6:1d:ae:e6:
c7:a5:89:2a:30:d3:09:d5:09:90:77:a2:43:a6:49:de:51:61:
96:ff:72:14:3b:2b:7b:0c:38:d0:bf:ac:df:42:f6:85:96:45:
3f:0a:9c:e3:1f:11:ce:d5:0b:39:ed:72:36:66:6d:12:f5:1f:
9e:90:fe:8f:d1:5a:a0:1d:be:1a:33:bb:0b:e0:79:1c:ab:c7:
b9:4a:af:2e:1f:b5:7d:5d:50:8d:72:ae:d6:ca:6b:ab:5c:11:
de:e7:57:2a:c0:7e:ac:6d:7d:c0:05:89:c0:ef:58:15:ec:8e:
95:c0:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:11 2025 by rpki-client