Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ti-u3fQQn_wAXOj7yBlVytImKtw.roa
File: Ti-u3fQQn_wAXOj7yBlVytImKtw.roa (raw, json)
Hash identifier: 07IZwCw435bUbV9lJ68WVO5EDb4Qli+v8/mTyBUmiUg=
Subject key identifier: 4E:2F:AE:DD:F4:10:9F:FC:00:5C:E8:FB:C8:19:55:CA:D2:26:2A:DC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068538550314E50C4CE3E79BE95C6E8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ti-u3fQQn_wAXOj7yBlVytImKtw.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 193.233.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:85:50:31:4e:50:c4:ce:3e:79:be:95:c6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e2faeddf4109ffc005ce8fbc81955cad2262adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:5c:18:0b:06:29:be:01:6b:3b:ac:e8:fb:
a1:53:cd:fc:d1:bf:06:59:d9:c5:a6:e5:1f:f7:b3:
54:aa:b1:20:b7:71:a9:2e:03:7c:71:fc:d0:b8:62:
8f:9c:21:7b:55:38:f9:5b:cd:ea:35:ca:ff:5b:ab:
f6:a3:05:6b:64:a2:6d:0c:39:24:d9:e8:7e:44:ca:
68:22:ea:ff:f5:c5:92:dc:02:50:ca:4a:db:05:c3:
a9:ed:e8:35:ca:5d:8a:08:b9:df:f7:7a:d0:6a:85:
6d:c3:98:a0:17:ed:85:84:e8:fe:e0:9d:76:78:aa:
c0:16:2a:fa:58:ca:43:27:52:52:11:e5:cd:2c:fd:
7f:ca:41:d8:d9:bf:33:34:0d:b3:4b:ab:98:5f:e2:
66:f7:f9:71:1d:13:bb:b8:54:d0:b6:1c:df:41:90:
be:eb:9a:8a:fa:9f:26:45:78:07:5a:76:f2:7a:55:
0b:b3:83:5c:59:97:a0:42:6a:cf:62:e9:09:31:8d:
b2:67:8a:6b:1f:1d:78:2c:f4:35:c8:d7:3d:50:b7:
ca:0d:58:54:46:19:b3:62:5c:2c:c0:a6:dd:eb:72:
11:59:79:2b:9d:c6:5a:09:68:9f:16:d6:64:ac:e0:
05:a9:51:e7:a7:9d:00:32:99:ab:b6:99:83:82:8e:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2F:AE:DD:F4:10:9F:FC:00:5C:E8:FB:C8:19:55:CA:D2:26:2A:DC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ti-u3fQQn_wAXOj7yBlVytImKtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.16.0/24
Signature Algorithm: sha256WithRSAEncryption
98:87:4f:60:ca:b3:9a:41:9b:33:e1:ff:17:3b:eb:54:d4:9c:
c6:e3:05:05:e1:e9:8e:8b:83:cb:f0:be:c6:d4:6e:49:68:94:
b4:8b:d7:a0:69:a4:62:5d:e3:ec:df:e4:bc:6d:4c:89:b2:5d:
88:0d:cf:15:7b:36:da:17:ce:7f:c7:90:ed:b3:8c:de:cb:86:
35:c6:da:73:85:aa:e1:88:ea:fe:29:ba:ce:97:0f:11:e8:6b:
d1:bf:24:d4:c3:60:fd:bd:1b:a9:b8:7d:b3:78:9b:91:e5:b4:
d8:4e:fe:2e:3c:0a:83:b1:e6:fc:2c:71:4b:58:a3:e4:47:a9:
ba:42:02:b9:0c:5f:6f:d2:1f:37:11:36:51:3d:a8:e5:f5:80:
ad:e9:e6:69:83:38:40:63:76:34:2b:07:04:c3:65:cf:a2:78:
7b:de:ef:fd:63:34:5d:08:fd:0e:20:a3:c1:2a:f4:07:f8:16:
5a:cb:14:a2:b7:58:41:37:13:1b:aa:cc:c9:51:63:6c:6d:3f:
48:48:f3:4b:15:41:e9:c4:2a:9e:d8:41:56:15:88:7b:08:ae:
8d:ed:59:02:2f:31:0b:b7:20:8e:97:a3:79:61:b7:f5:9d:2d:
c8:84:83:e9:df:5f:9b:d6:ff:31:c3:63:f0:0c:b0:fb:bd:14:
bc:c7:d1:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFOFUDFOUMTOPnm+lcboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJmYWVkZGY0MTA5ZmZjMDA1Y2U4ZmJjODE5NTVjYWQyMjYyYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlcGAsGKb4Bazus6PuhU8380b8G
WdnFpuUf97NUqrEgt3GpLgN8cfzQuGKPnCF7VTj5W83qNcr/W6v2owVrZKJtDDkk
2eh+RMpoIur/9cWS3AJQykrbBcOp7eg1yl2KCLnf93rQaoVtw5igF+2FhOj+4J12
eKrAFir6WMpDJ1JSEeXNLP1/ykHY2b8zNA2zS6uYX+Jm9/lxHRO7uFTQthzfQZC+
65qK+p8mRXgHWnbyelULs4NcWZegQmrPYukJMY2yZ4prHx14LPQ1yNc9ULfKDVhU
RhmzYlwswKbd63IRWXkrncZaCWifFtZkrOAFqVHnp50AMpmrtpmDgo7W4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4vrt30EJ/8AFzo+8gZVcrSJircMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvVGktdTNmUVFuX3dBWE9qN3lCbFZ5dEltS3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekQMA0G
CSqGSIb3DQEBCwUAA4IBAQCYh09gyrOaQZsz4f8XO+tU1JzG4wUF4emOi4PL8L7G
1G5JaJS0i9egaaRiXePs3+S8bUyJsl2IDc8VezbaF85/x5Dts4zey4Y1xtpzharh
iOr+KbrOlw8R6GvRvyTUw2D9vRupuH2zeJuR5bTYTv4uPAqDseb8LHFLWKPkR6m6
QgK5DF9v0h83ETZRPajl9YCt6eZpgzhAY3Y0KwcEw2XPonh73u/9YzRdCP0OIKPB
KvQH+BZayxSit1hBNxMbqszJUWNsbT9ISPNLFUHpxCqe2EFWFYh7CK6N7VkCLzEL
tyCOl6N5Ybf1nS3IhIPp31+b1v8xw2PwDLD7vRS8x9H+
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:48:08 2025 by rpki-client