Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8axKv1QeNdYLl5PRbdXwvujzyH4.roa
File: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (raw, json)
Hash identifier: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=
Subject key identifier: F1:AC:4A:BF:54:1E:35:D6:0B:97:93:D1:6D:D5:F0:BE:E8:F3:C8:7E
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019424B3E0150332F95C6FED6DD807296539
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8axKv1QeNdYLl5PRbdXwvujzyH4.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47309
IP address blocks: 130.0.20.0/23 maxlen: 23
194.8.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e0:15:03:32:f9:5c:6f:ed:6d:d8:07:29:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1ac4abf541e35d60b9793d16dd5f0bee8f3c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:77:20:55:9f:ac:ec:9b:ed:e1:4c:b6:4d:
7a:f8:23:12:78:40:1c:c5:cc:4a:1a:88:76:26:34:
ac:ad:0c:ab:ba:29:31:18:35:18:43:8c:f0:20:3e:
df:6a:eb:52:e5:c6:1a:ad:dc:94:ae:b9:6e:db:66:
0c:59:6b:1b:e5:94:31:74:f5:67:41:18:9e:46:a9:
bd:93:22:42:5f:6b:87:00:b4:7e:bc:fc:75:1d:72:
fb:e4:8c:e8:1a:d0:e1:ca:2b:a3:37:f0:ca:d9:47:
85:d3:df:70:c7:4f:e9:96:1a:7d:6c:8b:5e:91:39:
0a:fe:e9:43:76:92:be:e4:11:55:35:86:83:4f:9c:
89:73:81:00:34:53:29:55:fd:46:20:4f:0e:5a:e6:
60:15:0c:52:ee:9f:b3:1c:b3:fa:96:5d:e7:53:0b:
e7:7f:c2:65:1c:73:96:7e:37:fd:6c:04:6f:43:70:
be:04:74:a4:b4:89:19:d2:60:65:97:1a:17:24:32:
ca:47:e9:a4:f3:5a:a9:02:00:b7:e6:65:8d:e3:75:
5f:44:b1:4b:63:c1:44:e8:62:6d:c7:fe:55:c8:8b:
2a:5a:cb:39:bb:e9:eb:a0:88:cb:0c:89:7f:79:dd:
81:53:22:c6:36:3f:e7:8d:ac:c6:65:f7:62:9f:de:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:4A:BF:54:1E:35:D6:0B:97:93:D1:6D:D5:F0:BE:E8:F3:C8:7E
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8axKv1QeNdYLl5PRbdXwvujzyH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.20.0/23
194.8.90.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:bf:4c:3d:3d:ab:9f:a7:ed:47:75:29:76:b8:ef:01:c1:fc:
ce:45:06:64:91:a2:52:c0:b0:9c:97:3b:f1:31:ad:d4:a3:f8:
61:e7:d1:64:3e:93:2b:b0:c7:9b:99:74:cf:f4:83:d2:c0:53:
df:e0:a5:d3:fc:a8:64:9e:7c:2b:5e:06:78:36:3f:2c:d8:9e:
f9:4f:b4:fc:26:0d:ad:fe:90:7e:5d:b2:3f:f4:fe:a3:db:91:
68:2c:5e:08:c3:4f:14:f9:d1:1d:73:3c:df:8e:bc:3c:af:16:
43:72:d8:ee:74:8b:93:75:13:dc:ab:70:28:5f:d5:e5:0b:ca:
07:16:75:ff:31:7d:6a:ab:d1:e4:56:2a:df:48:b9:6e:ae:c0:
76:ff:ed:34:6a:2e:99:cf:14:30:22:01:12:67:c4:67:3c:6f:
c5:36:e6:80:4b:46:81:fb:00:2f:6f:c9:e0:5b:cb:30:d3:7c:
5a:b2:59:dd:f9:b8:11:71:e1:39:3d:21:85:4e:10:83:04:35:
e2:87:5c:14:f3:1e:14:b8:88:d9:25:72:16:24:c8:58:32:b7:
43:a0:fc:63:55:99:a7:04:1f:7b:d9:fa:a8:19:46:63:29:07:
22:87:24:b4:cf:37:b2:4c:b4:a5:56:d7:73:b9:1b:64:d2:59:
c4:f2:9e:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQks+AVAzL5XG/tbdgHKWU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWFjNGFiZjU0MWUzNWQ2MGI5NzkzZDE2ZGQ1ZjBiZWU4ZjNjODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZ3IFWfrOyb7eFMtk16+CMSeEAc
xcxKGoh2JjSsrQyruikxGDUYQ4zwID7fautS5cYardyUrrlu22YMWWsb5ZQxdPVn
QRieRqm9kyJCX2uHALR+vPx1HXL75IzoGtDhyiujN/DK2UeF099wx0/plhp9bIte
kTkK/ulDdpK+5BFVNYaDT5yJc4EANFMpVf1GIE8OWuZgFQxS7p+zHLP6ll3nUwvn
f8JlHHOWfjf9bARvQ3C+BHSktIkZ0mBllxoXJDLKR+mk81qpAgC35mWN43VfRLFL
Y8FE6GJtx/5VyIsqWss5u+nroIjLDIl/ed2BUyLGNj/njazGZfdin966TwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPGsSr9UHjXWC5eT0W3V8L7o88h+MB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvOGF4S3YxUWVOZFlMbDVQUmJkWHd2dWp6eUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBggAUAwQB
wghaMA0GCSqGSIb3DQEBCwUAA4IBAQCcv0w9Paufp+1HdSl2uO8BwfzORQZkkaJS
wLCclzvxMa3Uo/hh59FkPpMrsMebmXTP9IPSwFPf4KXT/KhknnwrXgZ4Nj8s2J75
T7T8Jg2t/pB+XbI/9P6j25FoLF4Iw08U+dEdczzfjrw8rxZDctjudIuTdRPcq3Ao
X9XlC8oHFnX/MX1qq9HkVirfSLlursB2/+00ai6ZzxQwIgESZ8RnPG/FNuaAS0aB
+wAvb8ngW8sw03xaslnd+bgRceE5PSGFThCDBDXih1wU8x4UuIjZJXIWJMhYMrdD
oPxjVZmnBB972fqoGUZjKQcihyS0zzeyTLSlVtdzuRtk0lnE8p4d
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client