Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/T3nKkG-dCBEn2EriUuJalbbWuME.roa
File: T3nKkG-dCBEn2EriUuJalbbWuME.roa (raw, json)
Hash identifier: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=
Subject key identifier: 4F:79:CA:90:6F:9D:08:11:27:D8:4A:E2:52:E2:5A:95:B6:D6:B8:C1
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01942746C43DE246A1F46E7093FAC82F56BD
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/T3nKkG-dCBEn2EriUuJalbbWuME.roa
Signing time: Thu 02 Jan 2025 13:48:56 +0000
ROA not before: Thu 02 Jan 2025 13:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 92.63.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c4:3d:e2:46:a1:f4:6e:70:93:fa:c8:2f:56:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 2 13:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f79ca906f9d081127d84ae252e25a95b6d6b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:4d:93:36:e8:2a:95:45:9f:e3:a4:50:f9:
fc:f4:19:79:04:11:19:01:76:be:6a:18:b2:45:7d:
02:c6:1d:0e:15:31:76:0b:db:2a:0b:fa:90:a4:56:
30:d8:4f:96:66:86:db:0f:95:d2:b8:be:df:b1:8b:
9d:e2:30:51:6c:4b:7c:d6:0d:95:23:f3:4f:08:bd:
ab:6c:40:66:c2:a0:f4:a0:90:85:fe:0e:bd:76:93:
2a:ed:c4:81:53:55:cb:c9:63:73:ac:5b:30:40:a4:
fb:9d:8c:b1:e4:db:3a:d3:61:56:53:af:0e:26:d2:
de:3d:e3:14:2a:aa:04:fb:4b:fb:74:bb:d1:92:5e:
f8:cf:42:00:c0:07:3a:64:b8:c9:ca:51:9a:f0:bf:
cb:08:fc:d1:1f:bd:87:fe:6a:9b:35:d5:33:40:8d:
60:ab:16:86:64:71:46:71:88:16:76:d4:ef:cc:e7:
2e:87:9c:f0:54:2d:4e:e1:6c:e0:00:76:d9:b5:8e:
5b:42:74:ab:86:fa:24:24:e1:e0:81:03:8d:8f:52:
40:20:38:14:9a:a9:7b:38:40:77:d9:26:6f:af:e4:
98:c7:00:ab:24:81:8e:2c:c2:e5:e9:2e:30:ab:2f:
e7:4e:30:1b:cb:f8:9c:13:5e:e1:46:0b:48:1e:46:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:CA:90:6F:9D:08:11:27:D8:4A:E2:52:E2:5A:95:B6:D6:B8:C1
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/T3nKkG-dCBEn2EriUuJalbbWuME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.56.0/22
Signature Algorithm: sha256WithRSAEncryption
43:d0:58:91:c8:18:95:ed:83:2c:25:08:ab:e8:32:33:53:b5:
fe:ae:8a:85:7c:25:bf:f2:b1:cb:31:0e:ee:1d:34:0b:da:54:
e2:51:07:7d:7e:d4:ba:76:c8:a6:39:e5:63:97:84:81:94:df:
84:45:1b:b8:b2:5b:c0:55:25:38:a0:d0:e3:f7:8c:42:49:bd:
24:77:02:44:0e:11:bb:8f:86:b8:ab:07:01:05:4b:e0:13:25:
58:c8:63:8b:b6:29:81:c6:ea:ae:ef:76:f0:9d:91:6e:45:5b:
26:2c:ce:b3:21:52:d9:34:a1:ba:22:8f:e1:45:98:31:ff:c4:
a8:3f:ec:b9:9e:e9:c3:2a:d0:aa:58:fe:9e:c7:54:af:84:ca:
78:4c:1f:0d:0a:7a:c7:a6:e2:4e:0a:54:93:30:14:50:93:6f:
61:37:33:7d:56:69:a6:7e:5e:28:aa:21:da:6a:6b:9c:2f:b3:
98:1e:a8:ca:80:86:4b:e1:d9:9f:d5:59:93:92:96:05:9e:35:
b9:54:8b:a2:2e:ae:8a:86:37:4f:af:48:5c:e2:24:2d:f9:a3:
b1:44:3e:d6:c0:89:9f:ef:be:b9:60:ae:b8:55:bc:0f:dd:1a:
b0:70:5b:2b:c6:d6:32:10:0f:86:f7:c8:76:bf:7f:ed:d4:d2:
59:2f:99:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRsQ94kah9G5wk/rIL1a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjUwMTAyMTM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjc5Y2E5MDZmOWQwODExMjdkODRhZTI1MmUyNWE5NWI2ZDZiOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpNkzboKpVFn+OkUPn89Bl5BBEZ
AXa+ahiyRX0Cxh0OFTF2C9sqC/qQpFYw2E+WZobbD5XSuL7fsYud4jBRbEt81g2V
I/NPCL2rbEBmwqD0oJCF/g69dpMq7cSBU1XLyWNzrFswQKT7nYyx5Ns602FWU68O
JtLePeMUKqoE+0v7dLvRkl74z0IAwAc6ZLjJylGa8L/LCPzRH72H/mqbNdUzQI1g
qxaGZHFGcYgWdtTvzOcuh5zwVC1O4WzgAHbZtY5bQnSrhvokJOHggQONj1JAIDgU
mql7OEB32SZvr+SYxwCrJIGOLMLl6S4wqy/nTjAby/icE17hRgtIHkYrMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE95ypBvnQgRJ9hK4lLiWpW21rjBMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvVDNuS2tHLWRDQkVuMkVyaVV1SmFsYmJXdU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXD84MA0G
CSqGSIb3DQEBCwUAA4IBAQBD0FiRyBiV7YMsJQir6DIzU7X+roqFfCW/8rHLMQ7u
HTQL2lTiUQd9ftS6dsimOeVjl4SBlN+ERRu4slvAVSU4oNDj94xCSb0kdwJEDhG7
j4a4qwcBBUvgEyVYyGOLtimBxuqu73bwnZFuRVsmLM6zIVLZNKG6Io/hRZgx/8So
P+y5nunDKtCqWP6ex1SvhMp4TB8NCnrHpuJOClSTMBRQk29hNzN9Vmmmfl4oqiHa
amucL7OYHqjKgIZL4dmf1VmTkpYFnjW5VIuiLq6KhjdPr0hc4iQt+aOxRD7WwImf
7765YK64VbwP3RqwcFsrxtYyEA+G98h2v3/t1NJZL5kI
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:53 2025 by rpki-client