Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/tkrTEHat3bSdWp0mTcT7h8ohu0E.roa
File: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (raw, json)
Hash identifier: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=
Subject key identifier: B6:4A:D3:10:76:AD:DD:B4:9D:5A:9D:26:4D:C4:FB:87:CA:21:BB:41
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019424B3C9EC7EF53460FA44D33217E84EA0
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/tkrTEHat3bSdWp0mTcT7h8ohu0E.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47187
IP address blocks: 185.29.144.0/24 maxlen: 24
185.29.145.0/24 maxlen: 24
185.29.146.0/24 maxlen: 24
185.29.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:ec:7e:f5:34:60:fa:44:d3:32:17:e8:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b64ad31076adddb49d5a9d264dc4fb87ca21bb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:86:30:97:de:93:b2:f0:f8:01:81:bb:0e:
2a:05:55:22:fe:52:4d:2e:36:37:bb:68:26:92:7d:
5e:61:1a:29:f2:5f:f9:74:51:93:e7:c1:25:0c:fe:
5a:f3:d4:31:29:08:af:a7:0b:9d:0f:49:c0:4e:bc:
ab:e5:13:f2:56:a3:21:f3:50:9a:bf:41:71:7e:de:
12:0d:35:96:ea:db:42:1e:d8:77:2f:22:a4:52:d9:
9e:e2:7c:6b:da:0e:4b:0c:e3:4e:73:c5:5c:ec:aa:
3b:c4:fe:e8:40:7e:0a:b0:0b:21:58:d5:5b:51:9b:
8d:54:bc:c7:da:26:e4:5c:85:3e:fe:d6:c3:98:96:
71:41:d6:42:71:67:1b:92:00:07:34:43:b0:be:0b:
5a:39:b6:3a:9d:6e:1d:48:bb:8b:8c:58:78:c1:c3:
b4:30:88:24:2a:12:43:cd:31:21:4b:ff:7a:23:ce:
c2:63:16:06:36:c7:36:7b:06:58:b7:ee:80:da:7f:
77:73:53:da:46:f3:dc:84:04:a4:25:8a:03:21:83:
88:19:c4:af:64:c2:bf:3b:79:50:e6:ae:30:4c:48:
f7:37:e1:73:86:84:a4:85:c8:3a:42:ce:5b:7c:8e:
92:da:84:78:71:85:cf:ab:e4:65:5b:37:96:3d:01:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:D3:10:76:AD:DD:B4:9D:5A:9D:26:4D:C4:FB:87:CA:21:BB:41
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/tkrTEHat3bSdWp0mTcT7h8ohu0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:d0:e6:32:a0:81:b1:bf:ab:70:6c:e7:ea:d2:31:b2:56:88:
2e:c4:24:e1:d3:37:72:3c:18:05:94:ba:06:5d:6b:aa:b8:87:
c2:c1:8b:43:16:e9:b2:f9:3b:54:4c:05:53:bc:d8:d1:82:9b:
dc:63:d0:cc:88:35:61:f7:9f:cf:d7:9e:82:65:48:05:36:6d:
b4:c5:56:ac:e2:41:c7:c7:fb:5b:9f:90:ba:e6:44:8a:67:8b:
3a:d4:46:6b:7e:a7:e4:ea:cc:c0:e3:e1:9b:87:65:cc:c9:92:
e8:5f:b2:ca:1a:4a:ea:93:bd:7e:18:6c:db:f1:a7:37:b4:43:
ec:23:45:cf:2e:66:51:77:a6:6c:ae:59:6a:5b:de:3c:9a:86:
4d:f1:25:20:ac:44:de:fc:4c:1f:9b:f6:80:c5:8d:63:20:70:
77:73:44:f4:ec:d8:c5:1a:2d:c8:3e:f1:aa:c3:4c:79:de:a2:
3e:6a:b0:46:20:11:57:9a:24:f6:cc:09:96:b5:84:f2:2d:6e:
5a:ea:6a:2d:b0:34:89:61:cd:41:10:39:0c:42:8b:12:8a:5c:
11:7e:ff:9b:79:a9:cf:57:a9:ce:82:9c:d6:3d:ef:69:37:f8:
c9:a0:46:e3:87:e9:64:3c:0c:1e:af:a9:48:38:e8:f5:26:b1:
ed:98:40:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks8nsfvU0YPpE0zIX6E6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjUwMTAyMDE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjRhZDMxMDc2YWRkZGI0OWQ1YTlkMjY0ZGM0ZmI4N2NhMjFiYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnqGMJfek7Lw+AGBuw4qBVUi/lJN
LjY3u2gmkn1eYRop8l/5dFGT58ElDP5a89QxKQivpwudD0nATryr5RPyVqMh81Ca
v0Fxft4SDTWW6ttCHth3LyKkUtme4nxr2g5LDONOc8Vc7Ko7xP7oQH4KsAshWNVb
UZuNVLzH2ibkXIU+/tbDmJZxQdZCcWcbkgAHNEOwvgtaObY6nW4dSLuLjFh4wcO0
MIgkKhJDzTEhS/96I87CYxYGNsc2ewZYt+6A2n93c1PaRvPchASkJYoDIYOIGcSv
ZMK/O3lQ5q4wTEj3N+FzhoSkhcg6Qs5bfI6S2oR4cYXPq+RlWzeWPQGXbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZK0xB2rd20nVqdJk3E+4fKIbtBMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvdGtyVEVIYXQzYlNkV3AwbVRjVDdoOG9odTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR2QMA0G
CSqGSIb3DQEBCwUAA4IBAQBa0OYyoIGxv6twbOfq0jGyVoguxCTh0zdyPBgFlLoG
XWuquIfCwYtDFumy+TtUTAVTvNjRgpvcY9DMiDVh95/P156CZUgFNm20xVas4kHH
x/tbn5C65kSKZ4s61EZrfqfk6szA4+Gbh2XMyZLoX7LKGkrqk71+GGzb8ac3tEPs
I0XPLmZRd6ZsrllqW948moZN8SUgrETe/Ewfm/aAxY1jIHB3c0T07NjFGi3IPvGq
w0x53qI+arBGIBFXmiT2zAmWtYTyLW5a6motsDSJYc1BEDkMQosSilwRfv+beanP
V6nOgpzWPe9pN/jJoEbjh+lkPAwer6lIOOj1JrHtmEBq
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:28 2025 by rpki-client