Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/T-zwd3E8gbu-MxAIPetL9QmvKh0.roa
File: T-zwd3E8gbu-MxAIPetL9QmvKh0.roa (raw, json)
Hash identifier: 092w0Bm8URvR9yowFyiwo856iRLSuK3dnjktNqsPJK0=
Subject key identifier: 4F:EC:F0:77:71:3C:81:BB:BE:33:10:08:3D:EB:4B:F5:09:AF:2A:1D
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01942067CF6577A28413439CDCAEAD175E51
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/T-zwd3E8gbu-MxAIPetL9QmvKh0.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61118
IP address blocks: 212.15.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:65:77:a2:84:13:43:9c:dc:ae:ad:17:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fecf077713c81bbbe3310083deb4bf509af2a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:cd:ef:20:2d:f0:aa:f1:95:38:c5:a4:0a:
40:7d:c9:89:af:5d:90:75:94:64:8e:24:fc:01:f9:
84:e2:b6:a9:5a:ef:8b:91:7e:03:c8:1a:d6:92:52:
84:a8:1a:95:a5:a2:ec:23:d9:d8:f8:7a:c0:87:fa:
95:cf:46:e2:62:4b:5c:75:31:34:5f:c3:89:db:e8:
e5:34:5c:95:10:0c:1f:8f:f8:29:be:3b:57:75:42:
eb:fa:06:6c:a8:fc:bf:6d:9c:24:54:f2:f6:4e:f5:
ac:d8:67:a4:f8:73:e3:01:03:95:5c:5e:f9:c8:08:
34:95:7a:b3:d0:1f:92:03:31:05:cc:e5:a4:45:8f:
18:ae:3d:7f:1b:13:87:e1:bb:53:b7:d0:f6:57:96:
07:cd:b9:3c:69:c1:8a:5c:91:8c:b1:d9:2f:7d:b7:
4c:2f:81:34:46:c4:cc:7a:10:9b:c4:8b:12:c7:a2:
f3:9b:c9:24:73:39:32:e6:32:fa:bd:66:d2:8c:c3:
5e:a2:64:91:a6:b9:9f:27:3c:6c:36:7c:e0:25:a6:
d4:1b:e4:14:b6:33:b4:3d:44:d2:7b:b5:0c:0e:2e:
58:d5:23:87:98:a6:17:5c:35:4f:c5:1c:02:09:2f:
41:49:e5:d8:03:5f:fc:9a:be:e5:33:39:c3:fd:db:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:F0:77:71:3C:81:BB:BE:33:10:08:3D:EB:4B:F5:09:AF:2A:1D
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/T-zwd3E8gbu-MxAIPetL9QmvKh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.60.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bc:f4:c4:2e:61:8f:fe:2e:f0:6a:5a:e8:bd:49:08:68:4f:
c7:22:56:1a:d4:bf:76:97:47:7d:4a:44:fb:bd:31:dc:92:23:
b0:b5:eb:e7:cb:02:f7:5a:c5:0a:ed:4c:5f:42:c0:01:3a:2b:
c0:f4:c4:ea:e6:70:dd:97:19:87:2b:19:c1:d7:c6:1d:d9:b4:
8c:e8:09:7b:65:94:f2:fc:11:81:a1:89:44:50:5c:e9:55:81:
c4:4f:24:fb:ef:5e:c5:66:7b:93:6b:13:11:02:71:82:09:da:
c8:4b:ea:35:a8:2a:f6:58:8e:85:75:4c:77:52:ff:03:c8:1f:
6d:fe:ad:37:52:49:81:b5:7d:d4:a3:fd:24:e3:15:9e:48:f7:
04:a6:54:81:be:5b:a1:35:06:37:90:5a:0e:a7:cc:84:9f:d8:
e1:29:b8:f1:4f:74:fe:37:e6:68:49:65:fd:5d:07:dc:bc:fa:
34:9f:66:7c:4a:63:31:30:2d:73:2d:d0:a1:c2:8e:42:09:be:
26:cf:f0:97:88:47:ec:65:c0:bb:c4:a2:cf:c1:08:9c:db:5c:
e5:c2:18:eb:c4:e8:9f:63:dc:c2:1d:d6:5e:81:e7:4c:68:ce:
48:6e:5d:05:0b:a5:8b:68:2e:93:66:7e:42:22:b5:1a:52:fe:
33:2a:e2:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ89ld6KEE0Oc3K6tF15RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmVjZjA3NzcxM2M4MWJiYmUzMzEwMDgzZGViNGJmNTA5YWYyYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsnN7yAt8KrxlTjFpApAfcmJr12Q
dZRkjiT8AfmE4rapWu+LkX4DyBrWklKEqBqVpaLsI9nY+HrAh/qVz0biYktcdTE0
X8OJ2+jlNFyVEAwfj/gpvjtXdULr+gZsqPy/bZwkVPL2TvWs2Gek+HPjAQOVXF75
yAg0lXqz0B+SAzEFzOWkRY8Yrj1/GxOH4btTt9D2V5YHzbk8acGKXJGMsdkvfbdM
L4E0RsTMehCbxIsSx6Lzm8kkczky5jL6vWbSjMNeomSRprmfJzxsNnzgJabUG+QU
tjO0PUTSe7UMDi5Y1SOHmKYXXDVPxRwCCS9BSeXYA1/8mr7lMznD/dsf5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/s8HdxPIG7vjMQCD3rS/UJryodMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvVC16d2QzRThnYnUtTXhBSVBldEw5UW12S2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1A88MA0G
CSqGSIb3DQEBCwUAA4IBAQBUvPTELmGP/i7walrovUkIaE/HIlYa1L92l0d9SkT7
vTHckiOwtevnywL3WsUK7UxfQsABOivA9MTq5nDdlxmHKxnB18Yd2bSM6Al7ZZTy
/BGBoYlEUFzpVYHETyT7717FZnuTaxMRAnGCCdrIS+o1qCr2WI6FdUx3Uv8DyB9t
/q03UkmBtX3Uo/0k4xWeSPcEplSBvluhNQY3kFoOp8yEn9jhKbjxT3T+N+ZoSWX9
XQfcvPo0n2Z8SmMxMC1zLdChwo5CCb4mz/CXiEfsZcC7xKLPwQic21zlwhjrxOif
Y9zCHdZegedMaM5Ibl0FC6WLaC6TZn5CIrUaUv4zKuIy
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:51 2025 by rpki-client