Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/TbMjDWj4JjSbzv98od3kf6H3oLQ.roa
File: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (raw, json)
Hash identifier: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=
Subject key identifier: 4D:B3:23:0D:68:F8:26:34:9B:CE:FF:7C:A1:DD:E4:7F:A1:F7:A0:B4
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019427B652DE43691058327E02630EF1F35A
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/TbMjDWj4JjSbzv98od3kf6H3oLQ.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52213
IP address blocks: 91.224.16.0/23 maxlen: 24
91.224.16.0/24 maxlen: 24
91.224.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:52:de:43:69:10:58:32:7e:02:63:0e:f1:f3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db3230d68f826349bceff7ca1dde47fa1f7a0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:8f:f6:88:da:16:73:f1:8e:8a:93:54:5c:
4b:a5:b8:9e:0e:00:5a:d3:cf:9a:bf:d6:2f:0a:e5:
d6:59:40:57:a5:73:20:94:ac:6c:e4:4d:6d:a4:b0:
38:7f:32:53:ee:cf:9b:a8:cf:e8:8c:79:c1:18:3f:
10:ee:03:9b:91:00:19:d4:17:43:af:20:df:45:9d:
a0:a5:3a:2c:73:8a:68:f2:3a:71:69:10:f4:30:d7:
10:58:3a:bf:7d:66:54:f9:2d:c8:74:6c:26:ee:32:
d5:9e:d5:10:18:5b:7d:95:74:cc:9b:7c:7f:62:b8:
cc:94:6a:ae:6e:37:f8:93:f6:76:55:8e:91:64:80:
fb:10:72:cd:e2:bf:36:f5:1d:cc:c6:a8:2f:d2:c2:
b3:75:c2:52:a4:c1:cc:61:3e:98:d0:be:b1:29:7b:
89:a5:e1:18:25:19:64:ab:13:4b:89:1f:c6:06:b1:
fd:c5:f3:f9:f7:52:42:f0:33:03:a3:a3:85:6d:bb:
3e:8a:05:dd:ff:08:16:77:0b:a3:2e:cb:6c:e4:90:
f2:61:06:47:9d:bf:6e:6c:f8:f1:d4:cc:43:e6:c8:
79:9a:cb:9d:67:c8:6b:e8:75:bf:59:de:4b:63:a9:
5a:6a:2a:26:ca:d5:07:37:35:ab:47:11:55:61:d4:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:23:0D:68:F8:26:34:9B:CE:FF:7C:A1:DD:E4:7F:A1:F7:A0:B4
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/TbMjDWj4JjSbzv98od3kf6H3oLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:31:4c:5e:f8:9d:78:fb:a5:d9:74:23:c8:27:bf:d8:26:bd:
41:a8:34:66:e8:63:31:94:34:da:76:b5:54:3d:d9:7a:fe:5e:
1d:49:ad:e3:46:f8:78:8a:23:43:3a:df:b2:18:1f:0a:a9:69:
47:0d:d6:3d:09:70:23:54:d8:e5:e4:8d:50:2f:19:9c:2c:0d:
9f:99:53:12:27:13:12:05:c1:a6:a8:fd:6b:b7:70:72:e1:e0:
51:2b:4e:58:fc:54:d0:ed:f8:ca:c2:80:51:ef:ee:8b:71:5b:
06:8b:0e:f3:12:06:49:70:e6:ac:37:df:d4:49:18:a9:d2:b5:
02:c3:18:bd:3e:e9:d9:b6:ce:ad:9c:42:27:1f:b0:56:04:6a:
11:13:52:9f:a4:80:89:32:68:46:06:2a:ec:10:2f:aa:50:e0:
ab:e1:16:05:10:73:67:89:93:51:a3:3d:8a:82:6b:b4:b2:59:
c1:90:78:fe:a4:5c:4e:72:4a:11:9a:cb:00:05:8f:04:66:dd:
9b:3e:8a:bb:f0:c3:15:f8:8a:00:c6:4b:4b:2f:5e:32:6e:64:
53:de:8f:f0:5d:0e:ea:37:49:cb:58:1b:9b:ed:39:3a:31:3a:
ae:08:5f:20:fc:9a:c1:f1:7a:4f:99:e7:28:6c:89:40:c3:8a:
d3:52:9b:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntlLeQ2kQWDJ+AmMO8fNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjUwMTAyMTU1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGIzMjMwZDY4ZjgyNjM0OWJjZWZmN2NhMWRkZTQ3ZmExZjdhMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCqP9ojaFnPxjoqTVFxLpbieDgBa
08+av9YvCuXWWUBXpXMglKxs5E1tpLA4fzJT7s+bqM/ojHnBGD8Q7gObkQAZ1BdD
ryDfRZ2gpTosc4po8jpxaRD0MNcQWDq/fWZU+S3IdGwm7jLVntUQGFt9lXTMm3x/
YrjMlGqubjf4k/Z2VY6RZID7EHLN4r829R3Mxqgv0sKzdcJSpMHMYT6Y0L6xKXuJ
peEYJRlkqxNLiR/GBrH9xfP591JC8DMDo6OFbbs+igXd/wgWdwujLsts5JDyYQZH
nb9ubPjx1MxD5sh5msudZ8hr6HW/Wd5LY6laaiomytUHNzWrRxFVYdR7lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2zIw1o+CY0m87/fKHd5H+h96C0MB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvVGJNakRXajRKalNienY5OG9kM2tmNkgzb0xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+AQMA0G
CSqGSIb3DQEBCwUAA4IBAQCLMUxe+J14+6XZdCPIJ7/YJr1BqDRm6GMxlDTadrVU
Pdl6/l4dSa3jRvh4iiNDOt+yGB8KqWlHDdY9CXAjVNjl5I1QLxmcLA2fmVMSJxMS
BcGmqP1rt3By4eBRK05Y/FTQ7fjKwoBR7+6LcVsGiw7zEgZJcOasN9/USRip0rUC
wxi9PunZts6tnEInH7BWBGoRE1KfpICJMmhGBirsEC+qUOCr4RYFEHNniZNRoz2K
gmu0slnBkHj+pFxOckoRmssABY8EZt2bPoq78MMV+IoAxktLL14ybmRT3o/wXQ7q
N0nLWBub7Tk6MTquCF8g/JrB8XpPmecobIlAw4rTUptJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:39 2025 by rpki-client