Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tTNTqdLSJ7Lsaw2wknKxo5bipe4.roa
File: tTNTqdLSJ7Lsaw2wknKxo5bipe4.roa (raw, json)
Hash identifier: rWFa5shPnd/Yz1vpCrSgU6eDrmJ1JJz///Mi5zCEsYg=
Subject key identifier: B5:33:53:A9:D2:D2:27:B2:EC:6B:0D:B0:92:72:B1:A3:96:E2:A5:EE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BC66392E143086731800134862ED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tTNTqdLSJ7Lsaw2wknKxo5bipe4.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211277
IP address blocks: 91.92.70.0/24 maxlen: 32
93.123.20.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bc:66:39:2e:14:30:86:73:18:00:13:48:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53353a9d2d227b2ec6b0db09272b1a396e2a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:2a:4b:ab:cd:7f:a8:b4:56:e9:52:ca:08:
0a:77:0e:3d:95:b3:a8:bb:e3:4d:1b:9d:53:84:ad:
ca:a0:89:80:fe:cb:4d:54:4d:9f:47:62:99:28:5c:
20:0c:8c:91:9d:35:ae:86:7d:4f:a1:81:1e:6e:a4:
9f:25:63:c2:16:59:41:cd:46:47:b6:18:95:ce:94:
3c:a4:12:96:fc:a0:1a:33:42:db:92:01:3f:0b:01:
50:cf:fc:d3:c8:cb:aa:79:67:9f:dd:03:a2:7c:1a:
ac:cd:70:d1:d6:f3:c2:e2:88:8a:31:b8:0a:22:13:
89:83:d1:e4:63:e6:b6:8e:67:20:3d:d8:5c:f3:40:
68:a7:17:2a:40:10:0d:e4:e8:22:b0:10:ab:84:70:
7a:c7:f1:44:d7:f1:d4:26:f5:ef:dd:29:3b:63:4f:
50:ab:04:5d:bb:d9:d8:85:9b:c1:5a:6c:d9:55:60:
7f:5f:5e:3f:70:c5:99:51:79:f1:b3:0a:7f:6d:bc:
71:f8:d1:9c:5f:b4:8a:33:e0:98:71:98:7d:82:10:
34:52:ca:ce:f6:d0:3c:23:c0:8e:eb:fb:52:7b:5a:
d8:61:2c:0f:74:62:41:0d:cf:87:81:b8:dd:80:4d:
db:e9:d6:c2:c2:05:d4:ed:73:73:44:4d:00:a8:bc:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:53:A9:D2:D2:27:B2:EC:6B:0D:B0:92:72:B1:A3:96:E2:A5:EE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tTNTqdLSJ7Lsaw2wknKxo5bipe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.70.0/24
93.123.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c4:e6:87:6a:dc:a5:b3:26:4f:e6:fd:e5:e5:62:40:fc:ee:
a9:84:ae:89:d3:0a:84:ce:f7:75:a6:74:ae:22:b5:74:ea:80:
15:bf:7e:00:17:eb:97:76:bc:53:c1:0d:21:50:9d:81:98:49:
15:3a:09:e2:7a:23:c0:35:06:2f:ab:fb:93:27:f1:ca:08:ba:
45:bc:b8:fd:be:20:d6:f2:c8:41:8d:c5:10:8b:e9:e1:07:22:
c4:1b:81:c6:62:0d:a1:69:6f:37:db:07:f9:15:b0:5d:fb:45:
86:00:75:1f:4f:0a:ff:6f:1c:ac:fa:d8:bc:91:4d:81:35:6c:
20:8c:ae:67:15:8d:cd:02:07:46:e2:ec:c1:2f:57:0a:fd:a8:
09:cb:68:c6:23:90:53:3f:51:5d:7d:07:af:6d:b4:b8:cf:a1:
f6:3b:78:12:32:a8:42:a0:61:ce:d0:51:c1:72:cf:cf:6e:7e:
5a:d7:82:d8:f2:b7:da:d2:2c:4e:18:f4:57:e8:5b:22:0a:35:
0f:25:9e:2e:12:8a:55:b1:aa:fe:39:00:4b:56:56:de:4d:f0:
49:fa:26:51:c4:a3:7e:56:6d:98:b4:99:e6:a8:a8:b6:b6:dc:
6d:09:cc:0a:cb:3c:d5:ba:63:c9:54:ab:44:33:9b:39:32:4e:
c2:8f:e6:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJLxmOS4UMIZzGAATSGLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTMzNTNhOWQyZDIyN2IyZWM2YjBkYjA5MjcyYjFhMzk2ZTJhNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLYqS6vNf6i0VulSyggKdw49lbOo
u+NNG51ThK3KoImA/stNVE2fR2KZKFwgDIyRnTWuhn1PoYEebqSfJWPCFllBzUZH
thiVzpQ8pBKW/KAaM0LbkgE/CwFQz/zTyMuqeWef3QOifBqszXDR1vPC4oiKMbgK
IhOJg9HkY+a2jmcgPdhc80BopxcqQBAN5OgisBCrhHB6x/FE1/HUJvXv3Sk7Y09Q
qwRdu9nYhZvBWmzZVWB/X14/cMWZUXnxswp/bbxx+NGcX7SKM+CYcZh9ghA0UsrO
9tA8I8CO6/tSe1rYYSwPdGJBDc+HgbjdgE3b6dbCwgXU7XNzRE0AqLyN/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLUzU6nS0iey7GsNsJJysaOW4qXuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdFROVHFkTFNKN0xzYXcyd2tuS3hvNWJpcGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1xGAwQA
XXsUMA0GCSqGSIb3DQEBCwUAA4IBAQCUxOaHatylsyZP5v3l5WJA/O6phK6J0wqE
zvd1pnSuIrV06oAVv34AF+uXdrxTwQ0hUJ2BmEkVOgnieiPANQYvq/uTJ/HKCLpF
vLj9viDW8shBjcUQi+nhByLEG4HGYg2haW832wf5FbBd+0WGAHUfTwr/bxys+ti8
kU2BNWwgjK5nFY3NAgdG4uzBL1cK/agJy2jGI5BTP1FdfQevbbS4z6H2O3gSMqhC
oGHO0FHBcs/Pbn5a14LY8rfa0ixOGPRX6FsiCjUPJZ4uEopVsar+OQBLVlbeTfBJ
+iZRxKN+Vm2YtJnmqKi2ttxtCcwKyzzVumPJVKtEM5s5Mk7Cj+ZL
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:01 2025 by rpki-client