Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tPcgE7Dec0le1j4-lCiliZGhMhA.roa
File: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (raw, json)
Hash identifier: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=
Subject key identifier: B4:F7:20:13:B0:DE:73:49:5E:D6:3E:3E:94:28:A5:89:91:A1:32:10
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB6FC7705FEFC4D7D7C2535E89E98
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tPcgE7Dec0le1j4-lCiliZGhMhA.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62375
IP address blocks: 158.58.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:fc:77:05:fe:fc:4d:7d:7c:25:35:e8:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f72013b0de73495ed63e3e9428a58991a13210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:c5:e0:df:34:4a:28:1d:17:8e:9d:3b:e4:
c3:cf:b1:f2:01:7f:61:27:23:ea:e5:e2:6d:38:21:
f6:6a:4d:f2:3d:20:b8:53:92:e8:f6:5c:09:5d:3d:
7c:2f:cd:bf:61:e9:fa:f6:85:6c:d8:b5:f5:31:2f:
16:6f:3c:f8:d0:90:7e:e0:26:f5:85:8b:87:4e:f4:
8b:a6:72:eb:93:23:43:56:49:80:0a:7e:e7:7d:85:
b1:5b:8e:56:ee:17:c7:2c:36:50:02:2b:5e:11:17:
be:42:d9:3b:77:61:7e:13:f9:92:c4:71:54:9f:74:
6d:18:0a:8a:50:79:d5:19:9d:89:8d:b6:29:9b:c8:
56:2b:03:2f:c6:63:17:aa:15:47:0a:19:09:71:f0:
89:95:bf:7e:cd:72:76:e6:d7:c6:b3:c4:b7:2b:af:
51:28:76:0a:5d:6b:7c:ac:52:d1:df:fc:d6:96:44:
b5:0b:e8:53:9d:6d:84:1a:dd:77:57:d5:1b:e8:6c:
ca:fe:30:94:78:08:00:a9:8b:7c:b9:ad:f2:e8:f9:
00:d0:f2:a0:a3:93:2a:c4:46:3c:1e:de:ec:0b:44:
0b:7a:ce:2f:35:b0:93:a4:c4:2f:52:ed:b4:69:e5:
31:8b:ec:b7:83:be:30:82:61:7c:58:31:f1:77:d9:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:20:13:B0:DE:73:49:5E:D6:3E:3E:94:28:A5:89:91:A1:32:10
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tPcgE7Dec0le1j4-lCiliZGhMhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.58.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:24:fa:64:50:b7:06:14:fd:2f:5d:46:86:60:8b:51:42:90:
6f:ce:33:43:4e:70:34:80:f3:e0:71:72:96:a8:19:d3:7f:4a:
e5:44:9d:b0:22:50:4d:70:d8:aa:a8:86:31:36:8e:99:2b:44:
9d:98:7e:84:73:70:c7:7e:ba:7b:c6:ea:8e:86:60:2a:7c:c7:
47:48:b9:10:d1:66:ec:30:b6:a6:eb:f8:73:8e:92:25:fb:52:
e0:37:76:0e:e4:e8:3f:7a:45:58:bc:fc:36:fa:1c:79:34:54:
6d:87:f8:38:02:fd:7c:4d:79:f2:fc:22:b4:91:79:e7:27:c0:
cf:a5:4b:80:cb:7e:da:57:fb:fa:f1:45:58:4d:4d:9d:f5:4b:
17:5d:59:3b:11:08:1b:e5:c3:43:66:90:bc:c5:76:4a:d7:6c:
1a:bd:6f:41:e1:57:e3:91:16:1e:61:0d:8d:b8:07:cd:0a:40:
77:e7:24:e0:33:8f:a1:5a:6a:62:30:a4:1b:2c:55:f7:22:e0:
b4:34:4a:c8:76:fa:4e:8e:2f:49:3e:f4:cd:05:66:b3:55:cd:
e3:b8:75:92:c8:64:c1:d4:8d:8f:2d:c5:2a:03:02:fb:b0:ab:
af:93:33:07:32:1b:1b:5f:a8:33:74:30:99:ed:75:45:c5:95:
62:9e:bd:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7b8dwX+/E19fCU16J6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGY3MjAxM2IwZGU3MzQ5NWVkNjNlM2U5NDI4YTU4OTkxYTEzMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpLF4N80SigdF46dO+TDz7HyAX9h
JyPq5eJtOCH2ak3yPSC4U5Lo9lwJXT18L82/Yen69oVs2LX1MS8Wbzz40JB+4Cb1
hYuHTvSLpnLrkyNDVkmACn7nfYWxW45W7hfHLDZQAiteERe+Qtk7d2F+E/mSxHFU
n3RtGAqKUHnVGZ2JjbYpm8hWKwMvxmMXqhVHChkJcfCJlb9+zXJ25tfGs8S3K69R
KHYKXWt8rFLR3/zWlkS1C+hTnW2EGt13V9Ub6GzK/jCUeAgAqYt8ua3y6PkA0PKg
o5MqxEY8Ht7sC0QLes4vNbCTpMQvUu20aeUxi+y3g74wgmF8WDHxd9na4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLT3IBOw3nNJXtY+PpQopYmRoTIQMB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvdFBjZ0U3RGVjMGxlMWo0LWxDaWxpWkdoTWhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy
LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjq7MA0G
CSqGSIb3DQEBCwUAA4IBAQAeJPpkULcGFP0vXUaGYItRQpBvzjNDTnA0gPPgcXKW
qBnTf0rlRJ2wIlBNcNiqqIYxNo6ZK0SdmH6Ec3DHfrp7xuqOhmAqfMdHSLkQ0Wbs
MLam6/hzjpIl+1LgN3YO5Og/ekVYvPw2+hx5NFRth/g4Av18TXny/CK0kXnnJ8DP
pUuAy37aV/v68UVYTU2d9UsXXVk7EQgb5cNDZpC8xXZK12wavW9B4VfjkRYeYQ2N
uAfNCkB35yTgM4+hWmpiMKQbLFX3IuC0NErIdvpOji9JPvTNBWazVc3juHWSyGTB
1I2PLcUqAwL7sKuvkzMHMhsbX6gzdDCZ7XVFxZVinr3Z
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:51 2025 by rpki-client