Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/tcLlB9YBsHcbLOkMR7kSkLCCudc.roa
File: tcLlB9YBsHcbLOkMR7kSkLCCudc.roa (raw, json)
Hash identifier: 6Mc1QxCXoEWhGv9/BgxXkQb5o6tO1LjQTVjhujICGJg=
Subject key identifier: B5:C2:E5:07:D6:01:B0:77:1B:2C:E9:0C:47:B9:12:90:B0:82:B9:D7
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01942445354DFD7305D2720DFED8E75F821A
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/tcLlB9YBsHcbLOkMR7kSkLCCudc.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.31.0/24 maxlen: 24
77.83.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:35:4d:fd:73:05:d2:72:0d:fe:d8:e7:5f:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5c2e507d601b0771b2ce90c47b91290b082b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:6e:7a:a4:c3:7c:15:77:d6:43:3e:69:02:
ba:73:27:d1:be:e7:27:5b:f7:16:87:ac:44:54:9f:
3e:41:76:9c:53:b2:a7:2d:30:11:e7:37:1c:81:12:
9a:bf:f8:71:80:78:e0:fc:e5:5b:b9:01:e1:6e:9b:
8c:bc:5c:1f:b0:5d:47:36:2e:ed:30:83:9f:2a:c4:
53:41:2e:b1:02:bd:83:05:f1:55:58:4d:fc:f1:98:
d2:33:1d:ef:fa:de:4c:2a:74:22:2d:4c:c0:c8:81:
ec:00:8e:d0:aa:93:ad:00:97:09:cc:a3:0e:d4:f0:
36:4d:2f:ff:f6:7f:64:0a:a8:26:f6:84:69:0e:00:
d6:b9:3f:a2:42:fd:92:7b:28:d2:c4:a6:d0:fc:47:
56:8e:22:87:74:74:ba:64:5b:5c:29:9e:42:36:ee:
c0:71:f9:5b:fc:56:59:ab:0a:06:8b:a2:ca:64:6b:
07:19:12:51:78:f9:a6:a3:d6:2f:ea:a2:95:35:05:
27:3f:0c:3a:2e:b2:c9:73:d5:c2:88:cf:84:f3:a2:
ab:fe:50:8a:32:68:1f:20:b4:da:ce:8d:c6:7f:a3:
32:4f:f8:3e:b3:65:75:8a:2a:8c:5c:7d:8a:8e:df:
b0:e8:0f:eb:20:a5:ac:ee:a1:0b:19:46:c7:c9:ea:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:E5:07:D6:01:B0:77:1B:2C:E9:0C:47:B9:12:90:B0:82:B9:D7
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/tcLlB9YBsHcbLOkMR7kSkLCCudc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.31.0/24
77.83.223.0/24
Signature Algorithm: sha256WithRSAEncryption
87:73:a2:36:a9:5c:36:92:d7:62:19:79:52:5b:92:95:e1:cd:
d3:01:20:a4:13:28:96:1e:a7:fd:b3:6f:37:2f:a1:ce:24:9d:
1b:71:30:18:aa:fc:ec:eb:28:01:9d:e5:06:6a:1d:08:3e:58:
28:46:48:28:54:02:80:71:cd:3f:c2:63:64:0b:98:d4:88:b8:
55:8e:c2:c2:df:31:04:14:db:19:a9:8e:c8:d9:8a:05:47:82:
dc:ff:00:c7:f3:39:c0:77:b3:85:32:51:83:93:c5:24:a8:50:
cc:8e:3b:da:81:ea:00:35:15:2a:7b:33:e7:48:d1:16:df:b0:
de:ce:c7:33:1e:2d:5b:1e:71:55:57:94:d7:b2:17:75:c7:46:
f6:50:82:7d:20:e8:67:a3:15:de:4d:b7:85:33:1d:44:b9:55:
ac:82:59:c7:9a:3e:f3:e5:ad:30:63:e9:ca:71:03:7a:1c:75:
71:65:82:d7:32:c1:f2:61:75:fa:63:ad:09:07:47:f6:c7:a1:
43:6c:89:ac:bf:75:b9:b6:b0:30:2f:16:84:a2:ea:9c:a2:ea:
e2:30:d7:1a:a2:09:53:f2:71:51:aa:23:98:7b:88:e0:48:05:
e1:eb:33:c8:83:5c:70:63:b0:aa:50:a7:73:80:2f:cf:06:19:
cf:a8:f5:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRTVN/XMF0nIN/tjnX4IaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjUwMTAxMjM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWMyZTUwN2Q2MDFiMDc3MWIyY2U5MGM0N2I5MTI5MGIwODJiOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wlueqTDfBV31kM+aQK6cyfRvucn
W/cWh6xEVJ8+QXacU7KnLTAR5zccgRKav/hxgHjg/OVbuQHhbpuMvFwfsF1HNi7t
MIOfKsRTQS6xAr2DBfFVWE388ZjSMx3v+t5MKnQiLUzAyIHsAI7QqpOtAJcJzKMO
1PA2TS//9n9kCqgm9oRpDgDWuT+iQv2SeyjSxKbQ/EdWjiKHdHS6ZFtcKZ5CNu7A
cflb/FZZqwoGi6LKZGsHGRJRePmmo9Yv6qKVNQUnPww6LrLJc9XCiM+E86Kr/lCK
MmgfILTazo3Gf6MyT/g+s2V1iiqMXH2Kjt+w6A/rIKWs7qELGUbHyerKEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLXC5QfWAbB3GyzpDEe5EpCwgrnXMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvdGNMbEI5WUJzSGNiTE9rTVI3a1NrTENDdWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ0fAwQA
TVPfMA0GCSqGSIb3DQEBCwUAA4IBAQCHc6I2qVw2ktdiGXlSW5KV4c3TASCkEyiW
Hqf9s283L6HOJJ0bcTAYqvzs6ygBneUGah0IPlgoRkgoVAKAcc0/wmNkC5jUiLhV
jsLC3zEEFNsZqY7I2YoFR4Lc/wDH8znAd7OFMlGDk8UkqFDMjjvageoANRUqezPn
SNEW37DezsczHi1bHnFVV5TXshd1x0b2UIJ9IOhnoxXeTbeFMx1EuVWsglnHmj7z
5a0wY+nKcQN6HHVxZYLXMsHyYXX6Y60JB0f2x6FDbImsv3W5trAwLxaEouqcouri
MNcaoglT8nFRqiOYe4jgSAXh6zPIg1xwY7CqUKdzgC/PBhnPqPUm
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:39 2025 by rpki-client