Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TsepK-cL_-pLP0GEPX-oT15_HNo.roa
File: TsepK-cL_-pLP0GEPX-oT15_HNo.roa (raw, json)
Hash identifier: hMhXUEXGeasePlKizATpFhsnHykx8ERLs5vtWbi0vzk=
Subject key identifier: 4E:C7:A9:2B:E7:0B:FF:EA:4B:3F:41:84:3D:7F:A8:4F:5E:7F:1C:DA
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019423D6F37924779D51B2CA01036B9CC217
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TsepK-cL_-pLP0GEPX-oT15_HNo.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 23
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.48.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
2a07:3bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f3:79:24:77:9d:51:b2:ca:01:03:6b:9c:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ec7a92be70bffea4b3f41843d7fa84f5e7f1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:1b:46:9e:a2:6c:74:f0:64:95:b2:1a:c4:
a6:2b:92:3b:99:1b:72:53:b4:79:c5:35:48:6f:26:
ee:30:a7:4f:0b:ee:1e:c2:53:5a:6b:bf:2e:87:a6:
fd:ca:99:cc:1e:f7:e6:23:6a:e3:6a:f8:24:e2:91:
1a:65:78:51:29:aa:de:fb:98:34:4c:be:f8:f6:4c:
2e:e8:8f:45:e9:2c:ea:31:58:5f:52:25:c9:62:1d:
6a:1c:ee:37:e8:35:67:f1:f7:cc:53:87:85:68:0d:
26:33:69:ed:76:3d:3e:ed:8e:25:e3:b9:e2:31:df:
9f:8e:97:8a:85:42:91:46:c0:d9:09:ce:79:4e:fc:
59:4a:12:2d:01:77:3c:a0:f5:5e:95:b4:fc:2a:a7:
c2:67:9d:68:51:76:0d:90:42:83:79:75:70:d4:01:
ad:c6:2b:30:7f:02:83:a6:b8:09:57:5b:b1:1e:ca:
09:72:07:65:35:1f:11:ff:d8:ac:b5:58:70:28:56:
25:9e:38:cb:4c:b0:58:a4:bb:f3:ec:bc:2f:02:69:
fc:c2:23:3a:37:75:71:b2:9f:56:23:bb:18:1f:2f:
7e:bd:c4:65:4a:aa:82:b8:19:89:49:df:d6:b1:4a:
05:dc:96:ea:ab:95:d8:43:c3:e1:a5:41:6e:e6:e5:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:A9:2B:E7:0B:FF:EA:4B:3F:41:84:3D:7F:A8:4F:5E:7F:1C:DA
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TsepK-cL_-pLP0GEPX-oT15_HNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
2a07:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
05:f4:76:60:36:8c:b9:e9:ea:b3:ba:40:2e:97:dc:53:ec:ad:
74:dd:6b:ad:10:7e:05:73:1c:db:b3:94:2e:07:92:ad:fb:5b:
9a:27:fa:7c:25:ea:4a:bd:78:d1:58:26:dc:a1:90:c1:4d:a8:
fc:d3:60:bd:4d:5e:78:75:c3:35:b8:8a:9d:c7:84:39:e3:1c:
b8:22:a1:ce:ab:57:1d:ed:ff:8f:3f:29:d6:1f:be:a8:80:e6:
37:46:10:69:02:3f:56:e9:e6:84:d3:64:05:63:e3:71:62:6b:
72:f4:a7:a5:0e:f3:3c:1c:73:b1:da:86:3a:2b:fa:7d:63:8c:
59:f3:48:0e:f0:e4:11:0e:38:3f:54:54:fe:48:1a:5e:fb:52:
fc:fa:3b:16:36:16:3b:88:f0:d5:d2:29:e1:74:ae:bb:ac:94:
0f:a9:dc:f2:15:64:9f:25:e3:5f:38:14:80:db:e0:f2:41:38:
e4:a3:ff:26:55:19:dd:fa:a8:d1:ab:78:8c:67:0c:fd:f1:4b:
e6:a9:98:4c:ad:d0:c3:1e:ec:ed:92:6a:5d:76:82:19:37:8d:
34:40:23:a2:ef:08:5c:88:4b:e7:40:8b:df:e9:38:69:53:c3:
05:a6:13:58:76:d5:b2:92:8c:e4:b9:47:a7:89:2a:6e:5e:be:
0b:27:10:cf
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZQj1vN5JHedUbLKAQNrnMIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWM3YTkyYmU3MGJmZmVhNGIzZjQxODQzZDdmYTg0ZjVlN2YxY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6QbRp6ibHTwZJWyGsSmK5I7mRty
U7R5xTVIbybuMKdPC+4ewlNaa78uh6b9ypnMHvfmI2rjavgk4pEaZXhRKare+5g0
TL749kwu6I9F6SzqMVhfUiXJYh1qHO436DVn8ffMU4eFaA0mM2ntdj0+7Y4l47ni
Md+fjpeKhUKRRsDZCc55TvxZShItAXc8oPVelbT8KqfCZ51oUXYNkEKDeXVw1AGt
xiswfwKDprgJV1uxHsoJcgdlNR8R/9istVhwKFYlnjjLTLBYpLvz7LwvAmn8wiM6
N3Vxsp9WI7sYHy9+vcRlSqqCuBmJSd/WsUoF3Jbqq5XYQ8PhpUFu5uXaCwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFE7HqSvnC//qSz9BhD1/qE9efxzaMB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvVHNlcEstY0xfLXBMUDBHRVBYLW9UMTVfSE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBMBAIAATBGMAwDBAQtChAD
BAAtChIwDAMEAC1YBQMEAy1YAAMEAi1fKAMEAi2CZAMEAFPlIgMEAF+yawMEArmQ
OAMEAry/MAMEANnCmTAUBAIAAjAOAwUDKgXkwAMFAyoHO8AwDQYJKoZIhvcNAQEL
BQADggEBAAX0dmA2jLnp6rO6QC6X3FPsrXTda60QfgVzHNuzlC4Hkq37W5on+nwl
6kq9eNFYJtyhkMFNqPzTYL1NXnh1wzW4ip3HhDnjHLgioc6rVx3t/48/KdYfvqiA
5jdGEGkCP1bp5oTTZAVj43Fia3L0p6UO8zwcc7Hahjor+n1jjFnzSA7w5BEOOD9U
VP5IGl77Uvz6OxY2FjuI8NXSKeF0rruslA+p3PIVZJ8l4184FIDb4PJBOOSj/yZV
Gd36qNGreIxnDP3xS+apmEyt0MMe7O2Sal12ghk3jTRAI6LvCFyIS+dAi9/pOGlT
wwWmE1h21bKSjOS5R6eJKm5evgsnEM8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:22 2025 by rpki-client