Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tq3T7KmkTwciWUP9R922nb2c4c0.roa
File: Tq3T7KmkTwciWUP9R922nb2c4c0.roa (raw, json)
Hash identifier: NdahDiNnv7jQ2afvqU6O5LY76IX8Z6Na8+Uvfxg5IkQ=
Subject key identifier: 4E:AD:D3:EC:A9:A4:4F:07:22:59:43:FD:47:DD:B6:9D:BD:9C:E1:CD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B594E369056FB4CE7945409FB14AE5
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tq3T7KmkTwciWUP9R922nb2c4c0.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 91.243.88.0/22 maxlen: 22
91.243.92.0/22 maxlen: 22
193.93.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:94:e3:69:05:6f:b4:ce:79:45:40:9f:b1:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eadd3eca9a44f07225943fd47ddb69dbd9ce1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:c9:6d:74:e5:f0:78:fb:f2:2f:02:9c:92:
76:8a:1f:86:af:58:f4:12:5a:60:0e:d1:96:1b:f4:
e2:ad:d1:b4:1d:53:bd:1b:6e:01:f6:03:ee:d5:c5:
bc:7b:2f:72:a3:a0:9f:02:ec:ba:f8:cc:70:75:a8:
59:44:11:be:5e:8e:65:f7:0f:bb:4b:1d:85:60:9e:
58:b0:d6:6a:cd:fc:49:d0:a7:81:22:33:d3:3d:87:
92:39:ef:95:27:f0:bc:53:3f:0d:62:65:3d:60:ee:
40:d2:2d:ac:91:d7:f6:2b:67:dd:c7:5e:c1:e9:f2:
1e:32:33:a9:c7:47:2c:ee:d5:32:08:db:5c:dd:57:
3e:66:6e:4d:08:95:4e:61:bc:a3:7d:69:52:bc:89:
ed:b4:12:cb:dc:f0:e1:b9:6d:59:34:d3:c3:2d:4f:
39:60:e9:d2:35:67:a1:bb:e5:b1:11:26:93:07:87:
b5:92:1f:7c:c1:1c:86:30:45:e1:38:de:00:3f:9c:
e5:c2:d3:0d:1d:d1:97:dd:6f:c3:6f:65:7e:7f:5e:
af:67:0f:1c:c1:0d:57:ac:3d:ce:c2:50:25:fc:cc:
ee:49:ab:73:75:73:0d:e0:9d:0b:09:56:14:84:60:
27:d4:e5:90:19:07:26:00:56:b4:d4:55:5a:b3:3d:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:D3:EC:A9:A4:4F:07:22:59:43:FD:47:DD:B6:9D:BD:9C:E1:CD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tq3T7KmkTwciWUP9R922nb2c4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.88.0/21
193.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:4b:d1:78:0c:05:5f:25:07:41:84:df:01:97:b3:b1:31:16:
09:55:47:a3:34:43:f4:53:62:be:26:67:69:1e:2c:0d:2c:08:
95:d6:37:4c:35:38:f8:d3:5a:45:d1:cf:80:40:08:c6:b1:3c:
41:3c:62:85:53:4a:44:91:ec:0b:8f:ce:66:98:8b:d7:56:43:
4b:ae:04:5c:22:48:fc:9e:86:11:4f:78:10:4d:4b:82:01:47:
66:b9:67:40:4d:3f:fb:ac:7f:9b:4f:48:68:40:73:52:a7:90:
04:00:0b:14:8a:ba:ae:c1:9f:40:4f:6d:b8:69:70:e5:ae:06:
04:23:f0:aa:8d:49:22:06:ac:6e:ff:ce:b0:0e:60:86:4b:d1:
28:e9:2b:ab:82:96:be:10:5d:28:17:dd:3b:70:3a:0c:dc:69:
5d:20:59:54:f4:05:23:41:51:d8:51:56:76:48:a1:26:14:b2:
c1:82:62:a8:34:75:89:97:76:cf:2a:0a:75:40:84:fe:f2:7f:
ac:90:fe:40:fb:b5:47:a7:d3:89:cf:e0:b6:d8:13:e1:dc:4b:
35:23:e0:a2:f5:bf:e6:ea:37:19:f7:e9:bd:a1:44:94:ff:4a:
af:af:dc:aa:08:fe:fd:2d:71:89:d4:c1:61:91:91:2a:21:2d:
a3:4d:47:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntZTjaQVvtM55RUCfsUrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWFkZDNlY2E5YTQ0ZjA3MjI1OTQzZmQ0N2RkYjY5ZGJkOWNlMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvELJbXTl8Hj78i8CnJJ2ih+Gr1j0
ElpgDtGWG/TirdG0HVO9G24B9gPu1cW8ey9yo6CfAuy6+MxwdahZRBG+Xo5l9w+7
Sx2FYJ5YsNZqzfxJ0KeBIjPTPYeSOe+VJ/C8Uz8NYmU9YO5A0i2skdf2K2fdx17B
6fIeMjOpx0cs7tUyCNtc3Vc+Zm5NCJVOYbyjfWlSvInttBLL3PDhuW1ZNNPDLU85
YOnSNWehu+WxESaTB4e1kh98wRyGMEXhON4AP5zlwtMNHdGX3W/Db2V+f16vZw8c
wQ1XrD3OwlAl/MzuSatzdXMN4J0LCVYUhGAn1OWQGQcmAFa01FVasz3ccQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE6t0+yppE8HIllD/Ufdtp29nOHNMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvVHEzVDdLbWtUd2NpV1VQOVI5MjJuYjJjNGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW/NYAwQC
wV3AMA0GCSqGSIb3DQEBCwUAA4IBAQDDS9F4DAVfJQdBhN8Bl7OxMRYJVUejNEP0
U2K+JmdpHiwNLAiV1jdMNTj401pF0c+AQAjGsTxBPGKFU0pEkewLj85mmIvXVkNL
rgRcIkj8noYRT3gQTUuCAUdmuWdATT/7rH+bT0hoQHNSp5AEAAsUirquwZ9AT224
aXDlrgYEI/CqjUkiBqxu/86wDmCGS9Eo6Surgpa+EF0oF907cDoM3GldIFlU9AUj
QVHYUVZ2SKEmFLLBgmKoNHWJl3bPKgp1QIT+8n+skP5A+7VHp9OJz+C22BPh3Es1
I+Ci9b/m6jcZ9+m9oUSU/0qvr9yqCP79LXGJ1MFhkZEqIS2jTUdU
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:39 2025 by rpki-client