Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/TeM9OzX8sQpqWpDItBlSbfU5TWA.roa
File: TeM9OzX8sQpqWpDItBlSbfU5TWA.roa (raw, json)
Hash identifier: GQ0DaMaVE4ZcrNCViKsSogvmznrtITdeEy+eY3JUQMo=
Subject key identifier: 4D:E3:3D:3B:35:FC:B1:0A:6A:5A:90:C8:B4:19:52:6D:F5:39:4D:60
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019420D5E66720720A972AC6BF56119820EB
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/TeM9OzX8sQpqWpDItBlSbfU5TWA.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 185.8.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:67:20:72:0a:97:2a:c6:bf:56:11:98:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de33d3b35fcb10a6a5a90c8b419526df5394d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:70:7a:3e:91:69:65:4d:f3:ef:9b:0e:5a:
72:1c:7d:60:62:f4:60:a7:df:65:c9:a2:09:82:55:
5c:38:21:1e:cd:3b:4f:cf:61:7c:95:db:db:d3:68:
aa:64:a5:67:58:2b:1e:b3:ad:3b:49:ef:55:7a:e2:
1c:3c:81:c7:ba:98:69:dc:f8:81:b0:77:bb:0c:23:
57:27:78:60:62:07:f0:c2:16:bb:38:29:df:18:2a:
18:72:91:2b:ba:9e:40:54:21:15:43:b1:ba:59:ba:
d0:7c:0b:e4:47:d5:16:be:11:98:e9:c4:27:1c:fe:
5f:d6:03:18:5a:8b:7f:4c:c4:f1:c9:1d:21:b4:3b:
c4:1a:8e:1e:35:81:f7:5d:1b:bd:d6:58:4a:ff:d6:
c0:1c:eb:27:2c:4f:9e:56:ae:92:44:db:14:3a:fd:
0e:7f:d1:9f:a9:94:8e:74:e1:32:d8:b9:2a:46:7e:
4a:9f:a3:21:4e:a6:b1:5f:cb:7b:c6:8a:a2:21:98:
57:50:82:d2:e6:7e:ed:0a:7c:75:35:4e:4a:39:8f:
61:95:21:d0:a0:8c:09:4f:29:3d:ff:38:ce:0c:ab:
16:f8:c7:a5:a3:35:4e:41:f2:51:13:b7:ed:e0:00:
aa:59:a1:6a:d8:94:41:ca:e7:9d:cd:50:3e:73:c6:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:3D:3B:35:FC:B1:0A:6A:5A:90:C8:B4:19:52:6D:F5:39:4D:60
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/TeM9OzX8sQpqWpDItBlSbfU5TWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.141.0/24
Signature Algorithm: sha256WithRSAEncryption
11:58:16:f6:ea:71:6d:dd:6a:07:54:ff:fa:59:7f:b6:6b:99:
ed:8c:6a:01:5b:be:03:38:07:d5:b5:d9:cd:9f:38:6d:06:53:
9d:b3:22:d1:b7:af:08:2f:19:26:80:bb:6b:71:89:1d:6d:28:
37:5b:78:50:62:07:ca:37:95:e9:8c:fa:7e:c4:c0:98:90:f7:
04:4f:42:92:14:41:83:c9:0b:d3:4b:44:f0:79:1f:fd:3e:42:
d8:86:de:da:1b:14:81:84:7f:d8:c7:f2:c4:6d:f2:24:73:52:
3d:cb:22:67:bc:bf:0d:1e:de:74:cf:5b:f4:da:f0:0a:23:35:
fa:22:5e:50:b9:2c:6a:32:71:8a:72:f4:b1:5d:37:16:a2:28:
3d:9f:89:31:83:f7:46:b9:44:c4:35:fb:9b:d0:38:39:6f:7e:
8e:19:b8:45:4b:94:61:29:c9:f0:20:b0:8c:f6:05:0a:a4:69:
9a:4f:4e:ef:f7:47:8f:e2:6f:10:4f:f7:e4:62:fb:41:8f:2b:
2c:7f:15:0e:d6:d3:79:ba:bc:1d:ac:a0:8a:06:d1:5f:87:6f:
4c:d2:ee:7d:b5:b5:7d:fb:a5:eb:40:ff:03:bc:b1:78:c6:c0:
0b:cc:20:98:03:b1:5b:84:2e:aa:43:56:c4:a9:7d:7b:e8:6a:
cf:9e:95:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1eZnIHIKlyrGv1YRmCDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl
NDExMDIwHhcNMjUwMTAxMDc0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGUzM2QzYjM1ZmNiMTBhNmE1YTkwYzhiNDE5NTI2ZGY1Mzk0ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSxwej6RaWVN8++bDlpyHH1gYvRg
p99lyaIJglVcOCEezTtPz2F8ldvb02iqZKVnWCses607Se9VeuIcPIHHuphp3PiB
sHe7DCNXJ3hgYgfwwha7OCnfGCoYcpErup5AVCEVQ7G6WbrQfAvkR9UWvhGY6cQn
HP5f1gMYWot/TMTxyR0htDvEGo4eNYH3XRu91lhK/9bAHOsnLE+eVq6SRNsUOv0O
f9GfqZSOdOEy2LkqRn5Kn6MhTqaxX8t7xoqiIZhXUILS5n7tCnx1NU5KOY9hlSHQ
oIwJTyk9/zjODKsW+MelozVOQfJRE7ft4ACqWaFq2JRByuedzVA+c8ZaLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3jPTs1/LEKalqQyLQZUm31OU1gMB8GA1UdIwQY
MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt
ZTU2ZTczODM4MGRlLzEvVGVNOU96WDhzUXBxV3BESXRCbFNiZlU1VFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl
LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQiNMA0G
CSqGSIb3DQEBCwUAA4IBAQARWBb26nFt3WoHVP/6WX+2a5ntjGoBW74DOAfVtdnN
nzhtBlOdsyLRt68ILxkmgLtrcYkdbSg3W3hQYgfKN5XpjPp+xMCYkPcET0KSFEGD
yQvTS0TweR/9PkLYht7aGxSBhH/Yx/LEbfIkc1I9yyJnvL8NHt50z1v02vAKIzX6
Il5QuSxqMnGKcvSxXTcWoig9n4kxg/dGuUTENfub0Dg5b36OGbhFS5RhKcnwILCM
9gUKpGmaT07v90eP4m8QT/fkYvtBjyssfxUO1tN5urwdrKCKBtFfh29M0u59tbV9
+6XrQP8DvLF4xsALzCCYA7FbhC6qQ1bEqX176GrPnpUd
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:48 2025 by rpki-client