Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/tw53VyqONmO9P7i2y6gpvj2fu_U.roa
File: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (raw, json)
Hash identifier: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=
Subject key identifier: B7:0E:77:57:2A:8E:36:63:BD:3F:B8:B6:CB:A8:29:BE:3D:9F:BB:F5
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 0194206806278BFFF0BBD84E959BF20F0B7E
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/tw53VyqONmO9P7i2y6gpvj2fu_U.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203081
IP address blocks: 185.145.4.0/22 maxlen: 22
2a07:44c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:27:8b:ff:f0:bb:d8:4e:95:9b:f2:0f:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b70e77572a8e3663bd3fb8b6cba829be3d9fbbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:d5:36:0d:95:ef:8f:ac:e7:3b:d4:5a:d2:
66:29:fc:36:0a:d3:a6:ad:62:a6:4c:03:78:25:f8:
f4:65:8e:49:86:62:ce:f6:13:a7:46:dc:b0:04:a7:
e9:88:21:a0:ac:dc:a0:8a:90:98:fe:17:49:b8:03:
21:07:29:88:68:ae:ad:f1:fc:ae:b8:65:ed:94:2f:
11:b1:fd:84:86:44:af:4a:6a:ab:7d:e7:d4:55:b4:
df:bb:f0:19:cd:c8:03:22:8c:ab:20:f0:e2:73:a4:
15:aa:bd:72:db:d8:65:f0:b6:8a:b4:2e:ef:01:12:
a9:e0:b4:b7:b3:b6:b9:0c:9f:e6:3c:ad:bd:d3:ae:
87:f3:d2:f7:94:44:9c:5d:49:c5:39:52:3e:eb:70:
21:66:8a:a5:29:91:d1:2e:a3:93:65:0e:0e:65:f1:
75:55:98:00:5f:24:ca:00:76:df:0b:1b:77:0d:ff:
e0:b3:ed:0c:18:d2:12:a1:fd:b2:df:40:2c:e7:f3:
cf:4f:0d:07:d3:e4:2e:86:f2:6e:0d:03:ae:72:8f:
1e:1e:8a:c3:da:3a:f0:78:a1:e5:d3:ca:62:2e:bc:
ca:ad:60:d2:a3:02:5b:11:b4:e4:7d:6a:20:eb:dc:
85:7d:5a:e5:bf:e6:35:0a:da:73:f0:0a:86:b2:15:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:77:57:2A:8E:36:63:BD:3F:B8:B6:CB:A8:29:BE:3D:9F:BB:F5
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/tw53VyqONmO9P7i2y6gpvj2fu_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.4.0/22
IPv6:
2a07:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:4c:49:51:8b:78:eb:99:6f:7a:35:6b:66:96:d7:73:56:16:
50:af:a6:ff:c8:fa:13:32:be:50:37:0f:ba:ec:f1:fe:a0:f4:
57:7a:43:3d:f7:22:1d:00:9f:58:ca:94:f2:8f:1e:4b:30:cb:
91:6a:63:87:81:9e:aa:c5:fd:40:f5:58:ab:a2:fb:f0:c7:aa:
2c:8c:7f:26:a1:66:81:b7:06:da:85:28:0e:23:b3:1e:67:0e:
d5:dd:a0:3c:26:f2:d0:48:26:16:0a:82:b0:23:27:ba:90:e5:
bc:4e:91:21:90:ae:58:44:16:0a:e6:11:68:7f:22:4d:17:66:
e4:86:bc:5c:57:38:b2:d2:c8:f7:6d:1c:32:32:7b:ff:0f:2b:
52:58:17:18:7c:6a:f6:fe:61:f1:3a:1e:f6:1b:74:75:a4:58:
21:eb:ab:5d:38:6a:73:e9:6c:4a:29:f7:ca:06:ff:48:e3:de:
81:c4:36:7f:32:2b:35:ce:c4:6b:3f:f7:e2:0c:57:6e:14:1e:
94:07:3f:36:87:84:c7:ff:d0:94:cc:f7:f0:be:79:cf:a5:0f:
94:fa:ab:81:f8:16:73:f6:1a:c7:b4:ab:15:40:c3:30:38:9e:
dd:8e:c7:3f:da:ad:9d:21:b2:ba:71:fe:27:38:c0:89:fe:90:
ab:f9:4c:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaAYni//wu9hOlZvyDwt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk
YTViYmMwHhcNMjUwMTAxMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzBlNzc1NzJhOGUzNjYzYmQzZmI4YjZjYmE4MjliZTNkOWZiYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpDVNg2V74+s5zvUWtJmKfw2CtOm
rWKmTAN4Jfj0ZY5JhmLO9hOnRtywBKfpiCGgrNygipCY/hdJuAMhBymIaK6t8fyu
uGXtlC8Rsf2EhkSvSmqrfefUVbTfu/AZzcgDIoyrIPDic6QVqr1y29hl8LaKtC7v
ARKp4LS3s7a5DJ/mPK29066H89L3lEScXUnFOVI+63AhZoqlKZHRLqOTZQ4OZfF1
VZgAXyTKAHbfCxt3Df/gs+0MGNISof2y30As5/PPTw0H0+QuhvJuDQOuco8eHorD
2jrweKHl08piLrzKrWDSowJbEbTkfWog69yFfVrlv+Y1Ctpz8AqGshUMawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLcOd1cqjjZjvT+4tsuoKb49n7v1MB8GA1UdIwQY
MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt
NWI5MTAxNTcyNzFiLzEvdHc1M1Z5cU9ObU85UDdpMnk2Z3B2ajJmdV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi
LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZEEMA0E
AgACMAcDBQMqB0TAMA0GCSqGSIb3DQEBCwUAA4IBAQBZTElRi3jrmW96NWtmltdz
VhZQr6b/yPoTMr5QNw+67PH+oPRXekM99yIdAJ9YypTyjx5LMMuRamOHgZ6qxf1A
9Virovvwx6osjH8moWaBtwbahSgOI7MeZw7V3aA8JvLQSCYWCoKwIye6kOW8TpEh
kK5YRBYK5hFofyJNF2bkhrxcVziy0sj3bRwyMnv/DytSWBcYfGr2/mHxOh72G3R1
pFgh66tdOGpz6WxKKffKBv9I496BxDZ/Mis1zsRrP/fiDFduFB6UBz82h4TH/9CU
zPfwvnnPpQ+U+quB+BZz9hrHtKsVQMMwOJ7djsc/2q2dIbK6cf4nOMCJ/pCr+UxV
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:15 2025 by rpki-client