Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TVjTMwjzOk9fWZziBdqjxHqITb0.roa
File: TVjTMwjzOk9fWZziBdqjxHqITb0.roa (raw, json)
Hash identifier: y+jVT8hL3PB3K1mO+EiEZT74KEqEYAIT2EctdY5kg4g=
Subject key identifier: 4D:58:D3:33:08:F3:3A:4F:5F:59:9C:E2:05:DA:A3:C4:7A:88:4D:BD
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018FC0780802B36DF149AB031D02D533D8F0
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TVjTMwjzOk9fWZziBdqjxHqITb0.roa
Signing time: Tue 28 May 2024 18:30:42 +0000
ROA not before: Tue 28 May 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199436
IP address blocks: 2a0f:7802:e100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:78:08:02:b3:6d:f1:49:ab:03:1d:02:d5:33:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: May 28 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d58d33308f33a4f5f599ce205daa3c47a884dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fe:40:00:29:15:aa:4c:ff:3c:af:87:e2:4e:
c9:d7:f9:9b:4a:14:70:32:a8:e2:71:8c:12:0c:e7:
2c:85:5f:3d:4a:b3:99:04:ac:bf:ee:f1:6f:9c:12:
c2:56:78:75:7c:fe:f9:65:e0:aa:d4:ca:06:2d:22:
ce:ad:55:3e:75:1f:37:dc:43:e7:fa:ec:ed:02:0c:
35:b1:cc:5f:a5:73:ef:6b:8d:23:33:ce:0a:fe:42:
18:5d:15:f0:fd:30:96:73:c1:2c:7d:3a:92:da:ab:
96:2b:91:4c:a2:7b:e9:4e:f9:9b:2f:73:08:d6:12:
54:16:c0:36:6d:72:1d:cc:ae:9c:9d:31:b5:1d:23:
f3:2d:d6:f7:69:69:26:e4:4d:2c:0b:f7:5a:2d:02:
99:f0:c3:c7:fc:80:fb:45:85:bb:f1:bc:13:0d:8a:
2e:2b:61:0f:05:6e:6d:5c:df:9b:c4:9c:43:a6:a0:
d6:83:a4:c0:f3:05:90:c2:68:9d:4f:fa:c8:3b:e4:
3a:3c:f4:06:08:f8:f9:de:31:1c:e6:bf:58:cd:ac:
7d:56:5d:5d:4c:d8:12:7f:20:6a:cb:5b:81:20:aa:
be:de:86:de:b9:b6:9a:42:e0:28:e0:ab:54:75:f8:
e8:bc:21:f8:4f:b6:43:bb:7d:5d:d7:59:09:32:49:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:D3:33:08:F3:3A:4F:5F:59:9C:E2:05:DA:A3:C4:7A:88:4D:BD
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/TVjTMwjzOk9fWZziBdqjxHqITb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e100::/40
Signature Algorithm: sha256WithRSAEncryption
85:77:81:a7:c6:6c:17:14:52:e0:b5:90:cc:50:fe:0f:3d:51:
cb:e9:04:e5:38:61:63:d6:99:9a:f0:f9:01:df:ac:fe:b7:d9:
b4:c8:43:d0:8d:da:7d:e9:a1:fc:3b:8e:45:69:79:8d:24:7f:
22:f3:a4:24:1a:7c:df:20:be:c6:fb:33:f2:49:af:39:de:15:
0b:6f:cb:7a:5e:ca:a0:92:8d:c0:eb:6d:c7:0a:ab:91:4c:07:
28:cb:26:38:e9:22:57:fe:12:bf:c5:7f:ea:d8:2e:82:3c:3b:
86:52:71:6a:0d:5c:97:d7:01:86:1c:12:0c:57:4e:f5:77:b7:
93:03:d0:2d:7d:de:e4:71:39:ac:86:81:5f:e0:ec:bd:50:68:
bf:a2:00:e5:ff:e7:2a:93:aa:a9:c2:6f:25:16:02:c4:bb:95:
45:a7:73:6d:3e:ba:12:fb:8e:2e:fb:de:46:2a:c2:4a:82:12:
9c:e7:51:a1:11:84:0a:0e:76:eb:12:33:a8:d9:9e:b3:b8:f0:
a2:b8:d0:c1:c9:fd:58:1e:63:78:59:0c:ec:1b:75:e9:0f:ff:
1b:69:67:b5:c4:fc:eb:05:67:4f:56:08:86:a4:3e:ba:07:62:
89:92:93:e0:69:72:5c:58:34:7e:c2:89:e6:47:55:a4:26:74:
ce:87:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:10 2025 by rpki-client