Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/TSv9KJbVBxOg0MT-80nl3brGCYM.roa
File: TSv9KJbVBxOg0MT-80nl3brGCYM.roa (raw, json)
Hash identifier: ItueuN0sC8/J6r0dea1oQOCkEIfanlmoxc417L+bpzc=
Subject key identifier: 4D:2B:FD:28:96:D5:07:13:A0:D0:C4:FE:F3:49:E5:DD:BA:C6:09:83
Certificate issuer: /CN=feac88baf93dc07a1d29a50db3d50575d332c799
Certificate serial: 4FBC62
Authority key identifier: FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/TSv9KJbVBxOg0MT-80nl3brGCYM.roa
Signing time: Sat 01 Jan 2022 00:57:18 +0000
ROA not before: Sat 01 Jan 2022 00:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225570 (0x4fbc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feac88baf93dc07a1d29a50db3d50575d332c799
Validity
Not Before: Jan 1 00:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2bfd2896d50713a0d0c4fef349e5ddbac60983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:ac:ba:a5:7e:42:30:9a:85:fd:f3:f8:a9:
ad:48:a5:0c:17:15:f0:74:1b:64:81:5b:8a:b5:76:
48:04:2c:66:fe:d6:dc:6e:48:de:52:76:91:b6:51:
b6:0b:a7:c0:ab:d4:f6:31:e5:53:4e:84:ef:a4:15:
c3:14:75:61:9a:fe:fc:14:a1:eb:3f:80:a1:47:87:
48:4e:51:f0:f3:59:15:69:4a:22:87:51:4a:e7:3a:
7d:ed:ff:6d:fc:d5:e4:91:e4:e4:57:28:5f:ac:b8:
b7:18:f7:05:22:8b:fe:1c:e5:47:db:2b:eb:fd:16:
13:46:fb:ad:3f:8e:3e:79:d1:76:1e:14:71:c4:81:
b6:ca:78:db:42:30:f8:5f:1d:10:4f:86:80:1e:a3:
94:f5:61:ac:5e:7a:53:bd:97:70:e8:c0:de:ff:a3:
0b:5e:bc:c8:f7:ec:73:0e:5a:b2:4d:31:14:08:3a:
bf:07:a3:3d:05:8d:26:1a:77:b7:06:e1:16:86:39:
e9:1f:d1:34:1d:6d:4e:f3:3d:f0:1b:b4:f7:33:b5:
35:c7:8e:06:d1:0e:88:07:60:28:3b:10:c8:5c:bc:
66:c6:50:d7:e6:80:3e:a2:1b:0c:19:f3:61:29:ed:
95:32:4b:d1:43:c8:d3:ce:03:1f:b7:4c:22:09:e0:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:FD:28:96:D5:07:13:A0:D0:C4:FE:F3:49:E5:DD:BA:C6:09:83
X509v3 Authority Key Identifier:
keyid:FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/TSv9KJbVBxOg0MT-80nl3brGCYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:27:a3:87:ef:30:16:2b:d2:67:d0:91:b0:e4:32:08:a2:fd:
32:3d:33:52:cd:73:d3:a7:c5:ee:1b:2d:f4:6d:74:82:7a:fc:
67:3a:34:4a:5d:e4:b0:f8:55:14:ca:e7:59:75:40:c6:c9:be:
c5:33:ba:1c:8d:e6:a1:73:87:f5:91:12:44:78:aa:98:19:71:
dc:f7:bb:3e:6a:db:9d:e6:09:8f:35:36:05:e8:c7:6d:a1:c0:
6a:e6:5d:35:b5:13:6d:6f:e4:b5:97:36:f5:d9:3d:b6:84:93:
74:35:eb:85:41:cd:c8:be:41:ff:85:1d:a9:6a:e0:8f:d4:9e:
9c:c8:b9:59:af:9d:e7:c5:59:90:38:43:f1:75:50:b0:f7:f0:
c0:dd:d2:c7:29:c7:7b:8c:f3:85:0c:6e:e1:72:6b:ea:4b:2e:
14:cf:b6:26:03:ea:bf:c6:14:1b:d3:ee:e5:1e:7f:e9:28:9a:
26:f2:d2:b3:a4:56:43:e3:dd:6e:47:c7:d0:d7:bd:b7:86:0b:
8c:51:35:6f:a8:36:f2:59:2c:4c:67:c1:01:b6:6a:4a:a4:02:
f4:73:00:fe:46:3b:d2:cf:71:4d:c6:82:3b:2a:60:c3:54:2f:
97:c2:6e:61:9e:84:09:8d:92:03:eb:7c:fd:10:45:90:cd:32:
64:db:43:9c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDT7xiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZl
YWM4OGJhZjkzZGMwN2ExZDI5YTUwZGIzZDUwNTc1ZDMzMmM3OTkwHhcNMjIwMTAx
MDA1NzE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZDJiZmQyODk2ZDUw
NzEzYTBkMGM0ZmVmMzQ5ZTVkZGJhYzYwOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq42suqV+QjCahf3z+KmtSKUMFxXwdBtkgVuKtXZIBCxm/tbc
bkjeUnaRtlG2C6fAq9T2MeVTToTvpBXDFHVhmv78FKHrP4ChR4dITlHw81kVaUoi
h1FK5zp97f9t/NXkkeTkVyhfrLi3GPcFIov+HOVH2yvr/RYTRvutP44+edF2HhRx
xIG2ynjbQjD4Xx0QT4aAHqOU9WGsXnpTvZdw6MDe/6MLXrzI9+xzDlqyTTEUCDq/
B6M9BY0mGne3BuEWhjnpH9E0HW1O8z3wG7T3M7U1x44G0Q6IB2AoOxDIXLxmxlDX
5oA+ohsMGfNhKe2VMkvRQ8jTzgMft0wiCeCxCwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFE0r/SiW1QcToNDE/vNJ5d26xgmDMB8GA1UdIwQYMBaAFP6siLr5PcB6HSml
DbPVBXXTMseZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
X3F5SXV2azl3SG9kS2FVTnM5VUZkZE15eDVrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYy82MmJhMDQtOGMwMS00ODQ1LTk1YmMtZDA3MjlkOTBlMjdhLzEv
VFN2OUtKYlZCeE9nME1ULTgwbmwzYnJHQ1lNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82
MmJhMDQtOGMwMS00ODQ1LTk1YmMtZDA3MjlkOTBlMjdhLzEvX3F5SXV2azl3SG9k
S2FVTnM5VUZkZE15eDVrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xPMA0GCSqGSIb3DQEBCwUAA4IB
AQAPJ6OH7zAWK9Jn0JGw5DIIov0yPTNSzXPTp8XuGy30bXSCevxnOjRKXeSw+FUU
yudZdUDGyb7FM7ocjeahc4f1kRJEeKqYGXHc97s+atud5gmPNTYF6MdtocBq5l01
tRNtb+S1lzb12T22hJN0NeuFQc3IvkH/hR2pauCP1J6cyLlZr53nxVmQOEPxdVCw
9/DA3dLHKcd7jPOFDG7hcmvqSy4Uz7YmA+q/xhQb0+7lHn/pKJom8tKzpFZD491u
R8fQ1723hguMUTVvqDbyWSxMZ8EBtmpKpAL0cwD+RjvSz3FNxoI7KmDDVC+Xwm5h
noQJjZID63z9EEWQzTJk20Oc
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:39:09 2025 by rpki-client