Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/TiOnGSVAxjnW1xfYOuanwRUmLJM.roa
File: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (raw, json)
Hash identifier: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=
Subject key identifier: 4E:23:A7:19:25:40:C6:39:D6:D7:17:D8:3A:E6:A7:C1:15:26:2C:93
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01941F8C5B0807E8CD868896B8EBB8136EEE
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/TiOnGSVAxjnW1xfYOuanwRUmLJM.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48768
IP address blocks: 217.21.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5b:08:07:e8:cd:86:88:96:b8:eb:b8:13:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e23a7192540c639d6d717d83ae6a7c115262c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:06:85:d5:f3:04:25:ef:df:86:3a:d9:56:
92:69:26:6d:9c:b4:2c:86:fe:50:bc:77:7b:b8:9a:
e4:be:8b:6b:4b:eb:ce:a6:55:3a:9e:a1:be:42:bc:
08:e6:ca:ae:75:5e:48:68:2d:c1:ff:2f:90:75:39:
ab:af:b0:f6:60:5e:9c:ee:fc:0e:2e:85:20:b2:4c:
96:8d:ba:18:8b:9f:6f:6e:97:bf:32:92:9c:96:c8:
2b:54:fe:05:26:35:70:3e:a8:4c:56:54:60:71:e6:
72:8f:47:7f:00:33:a6:ad:68:3b:8d:a6:ac:07:e3:
43:c8:aa:39:c1:5d:e3:bf:c3:f3:b7:4d:3d:b8:77:
6a:8b:29:c6:4a:e6:ae:64:a4:aa:6b:2f:8c:d1:50:
76:42:76:e2:5a:c0:79:f1:30:1a:46:19:5e:48:7b:
f2:8b:bd:b2:f5:92:5b:be:a4:f2:9e:a3:d6:3f:a5:
21:0d:67:a0:af:20:c1:b7:ef:e9:b6:dc:02:35:d4:
ea:51:9b:03:f4:a7:b9:11:dc:91:ec:ba:33:c1:1b:
28:39:d8:54:b2:d8:b8:9a:08:5b:4b:42:5e:80:3a:
8f:cc:fa:f2:f0:bb:8f:dc:4c:91:f9:6d:c2:d0:af:
d1:2c:20:e9:d8:54:54:c4:6a:5b:48:3e:94:2d:e2:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:A7:19:25:40:C6:39:D6:D7:17:D8:3A:E6:A7:C1:15:26:2C:93
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/TiOnGSVAxjnW1xfYOuanwRUmLJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:11:9c:f3:93:91:e6:87:72:92:1e:55:35:44:2f:c4:4a:f1:
0b:19:89:9e:b9:ca:b1:c6:4b:15:e7:fd:65:b3:c9:dd:70:a4:
dd:db:37:39:5f:07:62:f9:56:a6:5c:18:47:7d:52:99:01:73:
69:c0:d9:b1:9a:aa:5f:f1:1b:e7:39:d5:4e:dd:f8:94:fb:6c:
66:b9:86:f3:3f:04:92:ab:cb:66:ca:cd:74:47:a4:56:03:55:
5f:09:92:e8:c4:36:3b:54:17:cd:e5:6f:f6:20:2f:73:0e:df:
92:c0:a6:ee:5e:e4:ee:12:10:23:fd:56:e3:66:cf:b0:68:79:
97:9b:35:83:7a:b9:00:5b:4b:48:b4:ac:ea:a4:66:f9:40:db:
52:e8:25:71:4d:c4:c5:a0:56:6f:12:b6:25:5b:82:05:cc:f9:
51:95:e3:b8:ad:17:7e:6e:d7:4b:a8:4d:18:eb:20:56:04:7e:
5a:4d:1b:d0:33:69:be:f5:29:c8:1a:66:00:c6:df:e7:26:59:
de:4b:35:14:6e:07:a6:1b:fd:55:fc:14:35:75:60:71:49:a0:
f7:b0:8d:9c:e1:06:7a:19:91:33:d1:c9:d1:a2:87:0e:0c:1a:
89:d7:93:b8:e2:2f:31:05:1a:2d:5f:35:ab:7d:e8:69:31:eb:
ba:57:79:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjFsIB+jNhoiWuOu4E27uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh
OWJkNjkwHhcNMjUwMTAxMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTIzYTcxOTI1NDBjNjM5ZDZkNzE3ZDgzYWU2YTdjMTE1MjYyYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KwGhdXzBCXv34Y62VaSaSZtnLQs
hv5QvHd7uJrkvotrS+vOplU6nqG+QrwI5squdV5IaC3B/y+QdTmrr7D2YF6c7vwO
LoUgskyWjboYi59vbpe/MpKclsgrVP4FJjVwPqhMVlRgceZyj0d/ADOmrWg7jaas
B+NDyKo5wV3jv8Pzt009uHdqiynGSuauZKSqay+M0VB2QnbiWsB58TAaRhleSHvy
i72y9ZJbvqTynqPWP6UhDWegryDBt+/pttwCNdTqUZsD9Ke5EdyR7LozwRsoOdhU
sti4mghbS0JegDqPzPry8LuP3EyR+W3C0K/RLCDp2FRUxGpbSD6ULeIpMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4jpxklQMY51tcX2Drmp8EVJiyTMB8GA1UdIwQY
MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt
NzcxNDBkMDk3ODNjLzEvVGlPbkdTVkF4am5XMXhmWU91YW53UlVtTEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj
LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RWAMA0G
CSqGSIb3DQEBCwUAA4IBAQC7EZzzk5Hmh3KSHlU1RC/ESvELGYmeucqxxksV5/1l
s8ndcKTd2zc5Xwdi+VamXBhHfVKZAXNpwNmxmqpf8RvnOdVO3fiU+2xmuYbzPwSS
q8tmys10R6RWA1VfCZLoxDY7VBfN5W/2IC9zDt+SwKbuXuTuEhAj/VbjZs+waHmX
mzWDerkAW0tItKzqpGb5QNtS6CVxTcTFoFZvErYlW4IFzPlRleO4rRd+btdLqE0Y
6yBWBH5aTRvQM2m+9SnIGmYAxt/nJlneSzUUbgemG/1V/BQ1dWBxSaD3sI2c4QZ6
GZEz0cnRoocODBqJ15O44i8xBRotXzWrfehpMeu6V3n2
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:07 2025 by rpki-client