Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa
File: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (raw, json)
Hash identifier: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=
Subject key identifier: D1:37:2A:5A:60:5B:4B:8A:59:C1:50:69:B6:4A:B8:96:A0:39:73:94
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C23D7DD03F41053B8C63A2370EC3
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209314
IP address blocks: 148.81.11.0/24 maxlen: 24
148.81.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c2:3d:7d:d0:3f:41:05:3b:8c:63:a2:37:0e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1372a5a605b4b8a59c15069b64ab896a0397394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:23:6d:87:1e:80:78:71:d8:56:af:04:7a:
db:92:62:84:c3:2b:91:1b:80:8a:85:be:a3:ad:47:
cd:df:06:94:f6:f8:09:86:ae:e7:3a:90:99:06:a6:
0d:5c:4f:16:15:e1:39:c1:83:50:3e:58:46:14:10:
72:3c:25:fa:2b:5b:b2:80:e3:23:92:81:1d:e2:6b:
1b:86:31:46:2c:f4:44:68:8b:7c:bf:12:8b:7c:10:
c2:76:9f:e9:aa:92:46:d3:46:46:a5:14:84:d9:05:
90:90:f8:bd:60:3a:b5:0f:62:51:a5:04:98:7a:a9:
01:53:a8:6d:0c:15:72:d3:4c:c0:77:69:ff:6c:cd:
8a:25:cb:bf:24:7c:46:23:16:3c:f8:25:92:66:6c:
94:a2:a3:de:2c:23:2d:f9:e8:bb:8b:12:4c:7c:ec:
8c:1f:a9:86:3e:8f:93:a1:dd:77:92:7c:fd:cf:89:
f8:7c:e7:d4:52:c5:5b:f7:50:5d:7c:5f:31:9a:4c:
81:b9:4d:69:e2:92:41:d3:61:1b:54:c3:72:28:9f:
77:65:c4:d2:5b:62:f2:3e:23:ec:a0:06:46:87:f7:
d7:f2:95:84:5a:8b:08:d4:de:0a:62:b8:f0:e2:ef:
66:ae:3b:5e:a4:b5:77:6a:25:af:0e:26:81:d4:fb:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:2A:5A:60:5B:4B:8A:59:C1:50:69:B6:4A:B8:96:A0:39:73:94
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.11.0-148.81.12.255
Signature Algorithm: sha256WithRSAEncryption
15:8b:b0:7a:ec:60:e9:13:95:ed:3e:b4:b7:de:c3:5c:61:81:
dc:c3:0b:bf:e1:ea:9d:6f:a1:ed:a4:cc:72:25:c3:a0:18:f6:
dd:af:81:21:71:59:f6:81:a7:2a:de:2f:47:8e:20:b2:9d:cd:
65:d9:25:08:a5:5e:77:75:43:9f:f2:a4:9e:cf:6d:bb:21:f7:
6c:83:b0:79:13:78:d4:d9:f3:93:e1:9d:60:43:9f:b5:60:9c:
ae:c7:36:de:65:c5:db:b9:aa:de:66:5b:8c:30:42:b4:bc:a6:
e3:7e:d9:6a:99:1c:89:aa:91:4c:96:c4:bb:d3:ff:97:f2:02:
37:8b:9b:3d:26:bf:84:06:89:f1:85:63:1b:8a:41:9f:67:59:
65:35:ac:4d:b4:43:ff:75:06:20:e5:5c:5a:29:5e:0e:01:ce:
d7:a5:bf:ac:b7:61:07:d9:05:0d:61:c0:59:aa:a7:72:f2:79:
1a:2f:31:8f:0b:d0:ff:2c:e0:6c:d0:e9:7f:4b:c3:33:ac:41:
d7:44:3d:8f:6f:4c:e1:54:40:17:cf:fb:5e:b7:b3:96:70:86:
26:f3:b4:44:bf:e9:f8:07:72:9c:4e:aa:57:bc:af:30:c0:e1:
d2:10:54:1f:af:c7:64:e6:23:aa:2b:6c:87:f7:21:ac:2e:62:
95:bc:e4:00
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhQ8I9fdA/QQU7jGOiNw7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUwMTAxMDk0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTM3MmE1YTYwNWI0YjhhNTljMTUwNjliNjRhYjg5NmEwMzk3Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbkjbYcegHhx2FavBHrbkmKEwyuR
G4CKhb6jrUfN3waU9vgJhq7nOpCZBqYNXE8WFeE5wYNQPlhGFBByPCX6K1uygOMj
koEd4msbhjFGLPREaIt8vxKLfBDCdp/pqpJG00ZGpRSE2QWQkPi9YDq1D2JRpQSY
eqkBU6htDBVy00zAd2n/bM2KJcu/JHxGIxY8+CWSZmyUoqPeLCMt+ei7ixJMfOyM
H6mGPo+Tod13knz9z4n4fOfUUsVb91BdfF8xmkyBuU1p4pJB02EbVMNyKJ93ZcTS
W2LyPiPsoAZGh/fX8pWEWosI1N4KYrjw4u9mrjtepLV3aiWvDiaB1PtOuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNE3KlpgW0uKWcFQabZKuJagOXOUMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvMFRjcVdtQmJTNHBad1ZCcHRrcTRscUE1YzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACUUQsD
BACUUQwwDQYJKoZIhvcNAQELBQADggEBABWLsHrsYOkTle0+tLfew1xhgdzDC7/h
6p1voe2kzHIlw6AY9t2vgSFxWfaBpyreL0eOILKdzWXZJQilXnd1Q5/ypJ7Pbbsh
92yDsHkTeNTZ85PhnWBDn7VgnK7HNt5lxdu5qt5mW4wwQrS8puN+2WqZHImqkUyW
xLvT/5fyAjeLmz0mv4QGifGFYxuKQZ9nWWU1rE20Q/91BiDlXFopXg4Bztelv6y3
YQfZBQ1hwFmqp3LyeRovMY8L0P8s4GzQ6X9LwzOsQddEPY9vTOFUQBfP+163s5Zw
hibztES/6fgHcpxOqle8rzDA4dIQVB+vx2TmI6orbIf3IawuYpW85AA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:23:02 2025 by rpki-client