Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/TjCJDGgFfyQv4hYWSZ0MZdbNef4.roa
File: TjCJDGgFfyQv4hYWSZ0MZdbNef4.roa (raw, json)
Hash identifier: m+zdj6Vq11iXLwDuyOMuCUAK8ItAc11hfDdymmCzT3s=
Subject key identifier: 4E:30:89:0C:68:05:7F:24:2F:E2:16:16:49:9D:0C:65:D6:CD:79:FE
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018A8E7904F26921B35D4041527477DEC98F
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/TjCJDGgFfyQv4hYWSZ0MZdbNef4.roa
Signing time: Wed 13 Sep 2023 12:16:50 +0000
ROA not before: Wed 13 Sep 2023 12:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197961
IP address blocks: 2a10:f782::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:79:04:f2:69:21:b3:5d:40:41:52:74:77:de:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Sep 13 12:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e30890c68057f242fe21616499d0c65d6cd79fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:03:07:e9:5f:fc:52:ff:7a:84:12:c3:6f:
02:54:c0:fd:b8:30:a7:f4:83:09:10:5f:94:a0:66:
3e:19:71:57:f7:22:61:9f:4d:24:15:70:a6:6a:94:
0c:5d:bb:17:42:05:fd:19:f2:3e:1a:86:e9:fa:6d:
42:e3:c0:be:6b:8f:8a:fe:65:3e:d2:5c:c8:74:63:
e9:4a:71:7e:df:98:49:30:7d:51:35:89:4b:ee:22:
74:b4:83:6c:4d:36:93:ac:4d:ba:8d:56:ff:ec:57:
99:05:9b:27:a7:31:cb:71:45:7f:89:d7:8c:6b:6e:
95:03:7c:9d:c0:45:22:85:23:15:e6:22:0e:bd:2f:
aa:da:09:89:4a:7f:61:db:16:30:2c:89:76:db:4b:
90:4e:cf:75:fd:a4:4b:eb:86:fa:b3:07:75:96:36:
15:ef:e3:4a:60:c5:8a:6f:ef:1b:3c:d2:40:64:95:
45:9b:6d:e9:00:0b:da:99:4c:22:60:ef:f8:40:70:
05:08:24:35:68:22:3a:e7:8d:20:b5:69:79:c9:71:
5b:f8:f2:f5:5b:96:7f:9d:2f:6c:6d:42:3b:bd:24:
f5:2f:31:d8:46:35:9c:ef:d2:10:96:04:e6:07:4e:
7f:51:bd:93:45:ac:40:b4:da:0f:52:45:5f:ab:7a:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:89:0C:68:05:7F:24:2F:E2:16:16:49:9D:0C:65:D6:CD:79:FE
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/TjCJDGgFfyQv4hYWSZ0MZdbNef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f782::/48
Signature Algorithm: sha256WithRSAEncryption
a5:dd:12:de:a7:9a:c3:99:a5:2c:0f:b2:de:d1:02:8f:7b:5d:
c3:4b:8c:3d:71:09:43:7a:76:4a:00:33:f0:b1:1c:81:b6:29:
bb:5a:86:bc:c1:57:2e:19:2f:56:b7:7e:2a:e9:ea:74:5a:55:
95:ee:ed:f8:ea:94:f4:30:d1:1f:b4:bf:d3:5c:a5:ef:ed:7c:
ad:d9:e5:4a:05:70:1a:ce:50:bc:79:a6:cf:9e:a0:6c:63:a4:
df:da:12:f8:4d:fe:b7:d4:60:78:bc:c8:be:e2:97:d8:1d:8d:
dc:3d:78:ae:63:bb:81:5f:c2:38:ca:22:23:54:f5:4f:d9:3e:
79:92:cc:61:88:9d:63:b1:40:e8:aa:9b:63:f7:84:d7:64:7d:
f2:2f:cb:4e:0a:30:09:1c:99:e1:43:72:b9:6f:72:a3:5f:cd:
18:1f:2c:14:7c:ba:7b:a3:fa:eb:5e:26:8f:d7:00:6c:27:54:
ea:db:e5:58:27:40:ec:5b:2c:41:ca:51:6e:f2:1f:3b:21:3c:
31:07:01:f7:04:48:ff:c4:ee:e6:56:0b:7a:e9:3e:de:6d:7d:
69:83:8b:5e:d7:0e:e2:ad:c2:61:d2:30:b3:bb:5f:7b:58:90:
3f:3d:f0:58:26:b7:1f:e4:bb:03:c8:bd:1c:30:89:a5:e9:f2:
a2:ce:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:42 2025 by rpki-client