Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa
File: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (raw, json)
Hash identifier: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=
Subject key identifier: 4C:CC:2B:43:D5:44:0B:77:56:C1:D3:9D:4B:38:5C:86:A7:7D:2C:A5
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019522E87FAD1DFC21BC40C86A513C911910
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa
Signing time: Thu 20 Feb 2025 10:30:17 +0000
ROA not before: Thu 20 Feb 2025 10:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.101.0/24 maxlen: 24
2a14:8980::/48 maxlen: 48
2a14:8981::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:e8:7f:ad:1d:fc:21:bc:40:c8:6a:51:3c:91:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Feb 20 10:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ccc2b43d5440b7756c1d39d4b385c86a77d2ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:c2:f7:00:3b:8e:23:a0:a9:ee:f0:d3:89:
fa:f6:9d:a4:c2:3a:65:a5:66:f7:c4:e0:78:75:89:
58:b3:fa:a3:f4:c5:0a:e7:7d:4a:89:e6:68:75:73:
f0:e1:48:92:3b:70:44:93:ed:22:1e:d1:b8:7e:a9:
17:97:5b:42:4d:a5:ba:0b:d9:c8:9e:86:5b:e0:2c:
de:79:3b:a0:b1:2f:43:58:67:53:a5:21:b9:bc:c8:
e1:32:30:b2:2f:4d:2f:27:bf:d5:ea:b8:2b:35:1a:
f7:5c:a8:3a:d5:4e:46:f5:80:de:98:a7:98:51:75:
67:71:1b:a2:8f:ca:a9:bd:90:c9:16:ce:ca:e9:5d:
0e:bf:cf:4e:5b:5f:5e:a7:09:c3:49:4b:41:8b:04:
88:26:34:ff:6a:42:de:91:65:f2:fb:45:be:3a:31:
4c:c3:42:43:71:90:bd:75:08:15:7f:71:17:bb:5d:
a4:72:d7:6a:12:a3:95:c7:76:51:d3:b4:6c:6b:ee:
33:18:4b:6e:cc:4b:2c:32:48:f6:fe:81:08:b8:a7:
53:87:c5:89:08:f4:1a:19:5b:7e:38:aa:46:4d:1c:
dd:1c:8f:1d:b1:0c:d9:45:5e:f7:bc:61:b6:bc:01:
57:04:46:8f:b0:68:81:27:e3:9c:fc:0e:37:cf:62:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CC:2B:43:D5:44:0B:77:56:C1:D3:9D:4B:38:5C:86:A7:7D:2C:A5
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.101.0/24
IPv6:
2a14:8980::/48
2a14:8981::/48
Signature Algorithm: sha256WithRSAEncryption
3b:57:e7:1e:9c:28:e7:4d:fd:03:1e:24:5c:4b:e4:2b:58:29:
57:2d:56:c2:6b:3c:d1:05:92:72:ce:4e:ec:38:22:59:39:7b:
18:95:89:3a:95:af:d5:94:2c:5c:52:7a:98:81:0d:8c:0e:4a:
59:2b:38:bd:78:2b:6b:05:26:30:d6:06:65:3a:31:58:d5:72:
d1:2d:3d:4a:15:7c:71:35:fe:1c:eb:6f:ae:93:b8:10:11:ed:
74:d1:77:52:30:14:a2:65:b6:1d:e7:bd:b7:67:e9:a9:f3:55:
a4:bb:65:2f:19:3b:ba:12:19:3b:7c:ac:bd:39:66:e6:b0:a7:
8d:72:91:02:9e:b0:4e:5a:67:ea:98:c6:80:be:b3:ad:c8:06:
d1:1a:84:cc:f0:7c:e5:e9:5b:a1:5d:b2:e1:56:f2:f3:71:71:
fb:7a:3e:a0:18:55:39:19:db:f5:4e:67:9f:3b:4b:c4:6d:f1:
69:71:15:f9:7c:a9:d6:dc:13:d5:1c:2c:f0:82:63:37:4c:9c:
2d:f7:23:b9:55:5d:a2:ab:da:f4:2e:16:bb:a0:f0:b1:3d:2a:
44:1a:eb:8f:33:b6:37:fe:19:a9:e1:10:e0:34:35:37:8a:a4:
08:10:e5:19:11:d3:91:1e:d7:a9:6a:0d:92:a7:4f:1a:ce:95:
07:fe:75:80
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZUi6H+tHfwhvEDIalE8kRkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi
ZTg2OGUwHhcNMjUwMjIwMTAzMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2NjMmI0M2Q1NDQwYjc3NTZjMWQzOWQ0YjM4NWM4NmE3N2QyY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxjC9wA7jiOgqe7w04n69p2kwjpl
pWb3xOB4dYlYs/qj9MUK531KieZodXPw4UiSO3BEk+0iHtG4fqkXl1tCTaW6C9nI
noZb4CzeeTugsS9DWGdTpSG5vMjhMjCyL00vJ7/V6rgrNRr3XKg61U5G9YDemKeY
UXVncRuij8qpvZDJFs7K6V0Ov89OW19epwnDSUtBiwSIJjT/akLekWXy+0W+OjFM
w0JDcZC9dQgVf3EXu12kctdqEqOVx3ZR07Rsa+4zGEtuzEssMkj2/oEIuKdTh8WJ
CPQaGVt+OKpGTRzdHI8dsQzZRV73vGG2vAFXBEaPsGiBJ+Oc/A43z2JIKQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFEzMK0PVRAt3VsHTnUs4XIanfSylMB8GA1UdIwQY
MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt
NTNmNTc1MDRlZjM1LzEvVE13clE5VkVDM2RXd2RPZFN6aGNocWQ5TEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1
LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYb9AwQA
wYdlMBgEAgACMBIDBwAqFImAAAADBwAqFImBAAAwDQYJKoZIhvcNAQELBQADggEB
ADtX5x6cKOdN/QMeJFxL5CtYKVctVsJrPNEFknLOTuw4Ilk5exiViTqVr9WULFxS
epiBDYwOSlkrOL14K2sFJjDWBmU6MVjVctEtPUoVfHE1/hzrb66TuBAR7XTRd1Iw
FKJlth3nvbdn6anzVaS7ZS8ZO7oSGTt8rL05Zuawp41ykQKesE5aZ+qYxoC+s63I
BtEahMzwfOXpW6FdsuFW8vNxcft6PqAYVTkZ2/VOZ587S8Rt8WlxFfl8qdbcE9Uc
LPCCYzdMnC33I7lVXaKr2vQuFrug8LE9KkQa648ztjf+GanhEOA0NTeKpAgQ5RkR
05Ee16lqDZKnTxrOlQf+dYA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:25 2025 by rpki-client