Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/tmyLpJpJchhVaXtc4hY4-3-tLv0.roa
File: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (raw, json)
Hash identifier: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=
Subject key identifier: B6:6C:8B:A4:9A:49:72:18:55:69:7B:5C:E2:16:38:FB:7F:AD:2E:FD
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 0194228DD6CF231EBF0A26112FA68C5E2CED
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/tmyLpJpJchhVaXtc4hY4-3-tLv0.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48385
IP address blocks: 91.209.139.0/24 maxlen: 24
91.229.66.0/23 maxlen: 23
193.105.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d6:cf:23:1e:bf:0a:26:11:2f:a6:8c:5e:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b66c8ba49a49721855697b5ce21638fb7fad2efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:53:82:50:c9:cd:27:88:ea:12:67:49:93:
4a:9d:8d:af:1d:9f:fa:f5:0c:ad:81:e0:4f:ef:9d:
2e:05:97:80:21:5b:f2:21:3a:50:10:a3:80:cc:3b:
4e:94:19:cf:fa:39:a2:4a:64:d4:71:05:9c:86:7f:
ff:e9:8f:43:1c:00:87:ae:b1:13:5b:99:dd:fa:76:
45:06:78:02:53:25:f5:16:ce:c8:41:2d:6d:95:88:
09:9e:93:8c:e6:93:a9:60:c1:5f:b0:db:87:82:5b:
ba:81:2c:8e:e0:32:12:35:c6:94:c3:1b:24:2b:f6:
6d:d5:1c:6a:31:57:ed:a6:e9:e0:6a:ab:23:06:a8:
f5:28:38:5e:05:e1:1f:e3:37:7e:63:10:4b:b1:40:
c7:33:18:d4:4b:dd:f3:ef:f7:25:18:43:6c:03:90:
46:d3:af:b2:80:57:e6:f7:29:83:3d:59:d2:e2:26:
b4:fc:f9:78:f7:81:f2:c7:5c:45:3f:2b:b2:4b:4f:
2f:c3:b9:e2:50:5b:79:2e:67:4c:a8:ec:8e:5b:9b:
80:c1:0b:c3:f6:36:c6:86:56:d4:1e:cd:2b:fc:6e:
ef:1e:fb:80:ef:93:9b:54:a1:d5:5b:3b:bd:57:d9:
7c:35:08:e3:fb:e4:22:79:71:5a:4b:f5:38:b5:3a:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:8B:A4:9A:49:72:18:55:69:7B:5C:E2:16:38:FB:7F:AD:2E:FD
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/tmyLpJpJchhVaXtc4hY4-3-tLv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.139.0/24
91.229.66.0/23
193.105.41.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f3:49:0a:87:d8:f5:34:d3:62:2f:64:8d:32:01:2e:84:12:
31:a6:65:7e:8d:b3:cb:87:5c:15:a1:c5:77:39:3a:b2:f7:dd:
c2:74:81:79:83:cd:f4:cb:e1:2d:9f:26:56:75:ed:40:5a:bc:
96:fb:1a:fc:72:01:d0:22:6a:13:4f:37:a3:e2:0f:17:96:f4:
67:71:0d:9d:a4:bd:61:42:db:52:9d:29:ed:f1:5c:84:3f:0e:
6f:5c:b0:8d:c8:d4:9e:31:e1:f7:4b:4c:28:56:c5:b1:cf:a8:
47:b2:f3:7d:13:ca:38:3c:2a:d1:81:e4:47:b9:12:e2:32:57:
5b:16:23:ac:1c:21:8f:80:5d:55:ff:2e:5e:79:b4:b0:c8:46:
14:ab:24:e8:31:32:83:23:00:6f:8c:39:bb:47:23:a7:2c:94:
1b:37:63:0e:e9:b7:6e:7e:1d:66:9f:d4:64:bf:e2:75:01:f9:
d3:c6:ce:ed:f5:72:1b:b8:1d:1b:94:3c:0c:bb:af:d8:13:01:
ea:e5:1e:b4:e0:cf:d3:cf:22:cb:1b:52:b4:41:a3:3b:43:d3:
c9:db:f0:1a:d1:69:41:5f:58:29:61:75:59:26:05:5b:9d:a2:
2c:5b:a0:83:c2:0b:07:db:d8:ba:10:41:70:b8:56:39:3f:e3:
51:84:e3:7e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijdbPIx6/CiYRL6aMXiztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3
ODA0NGMwHhcNMjUwMTAxMTU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjZjOGJhNDlhNDk3MjE4NTU2OTdiNWNlMjE2MzhmYjdmYWQyZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42lTglDJzSeI6hJnSZNKnY2vHZ/6
9QytgeBP750uBZeAIVvyITpQEKOAzDtOlBnP+jmiSmTUcQWchn//6Y9DHACHrrET
W5nd+nZFBngCUyX1Fs7IQS1tlYgJnpOM5pOpYMFfsNuHglu6gSyO4DISNcaUwxsk
K/Zt1RxqMVftpungaqsjBqj1KDheBeEf4zd+YxBLsUDHMxjUS93z7/clGENsA5BG
06+ygFfm9ymDPVnS4ia0/Pl494Hyx1xFPyuyS08vw7niUFt5LmdMqOyOW5uAwQvD
9jbGhlbUHs0r/G7vHvuA75ObVKHVWzu9V9l8NQjj++QieXFaS/U4tTrwewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLZsi6SaSXIYVWl7XOIWOPt/rS79MB8GA1UdIwQY
MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt
MmRkNjUwZWE0YWMzLzEvdG15THBKcEpjaGhWYVh0YzRoWTQtMy10THYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz
LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9GLAwQB
W+VCAwQAwWkpMA0GCSqGSIb3DQEBCwUAA4IBAQBi80kKh9j1NNNiL2SNMgEuhBIx
pmV+jbPLh1wVocV3OTqy993CdIF5g830y+EtnyZWde1AWryW+xr8cgHQImoTTzej
4g8XlvRncQ2dpL1hQttSnSnt8VyEPw5vXLCNyNSeMeH3S0woVsWxz6hHsvN9E8o4
PCrRgeRHuRLiMldbFiOsHCGPgF1V/y5eebSwyEYUqyToMTKDIwBvjDm7RyOnLJQb
N2MO6bdufh1mn9Rkv+J1AfnTxs7t9XIbuB0blDwMu6/YEwHq5R604M/TzyLLG1K0
QaM7Q9PJ2/Aa0WlBX1gpYXVZJgVbnaIsW6CDwgsH29i6EEFwuFY5P+NRhON+
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:48 2025 by rpki-client