
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa
File: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (raw, json)
Hash identifier: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=
Subject key identifier: 4C:F4:E2:A6:60:9F:F4:1B:0E:18:57:32:3E:86:21:20:F2:4F:4B:60
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 0194236A49AF589102539AEEDAD10B5771AF
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57119
IP address blocks: 185.212.20.0/22 maxlen: 22
185.212.20.0/24 maxlen: 24
185.212.21.0/24 maxlen: 24
185.212.22.0/24 maxlen: 24
185.212.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:49:af:58:91:02:53:9a:ee:da:d1:0b:57:71:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf4e2a6609ff41b0e1857323e862120f24f4b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:df:76:a9:05:3b:8c:80:0b:9c:80:f8:cf:
8f:02:bb:52:e1:bd:b6:a5:ec:ba:67:2f:f1:15:5a:
1b:e3:41:ca:be:3a:7c:15:44:75:dd:57:80:41:80:
2c:76:77:7b:47:b3:3f:e6:0b:9b:c7:72:b5:fd:88:
0d:0b:78:c8:d7:fd:37:5f:98:d4:e8:d4:e6:9f:08:
ba:d2:11:54:01:0c:d3:1d:2a:9a:7c:6d:fa:c0:d4:
a7:38:d1:80:85:dc:fa:6b:ac:b8:1f:ff:04:4b:c4:
f3:73:76:02:05:90:4d:75:95:35:f6:11:0e:d1:b5:
b9:16:22:6f:be:02:40:bc:cd:29:6d:85:29:27:3e:
b0:03:2e:86:2a:dc:7c:82:0b:bd:c4:2d:27:93:4a:
c8:8b:09:a0:04:92:ad:9e:7a:58:52:27:a6:cd:13:
31:a4:85:a8:25:05:58:ec:ae:ae:d3:78:20:f1:09:
ba:8d:dc:2f:78:bd:1f:3b:83:62:f5:f9:35:41:d8:
ff:3f:2d:03:32:63:b7:0d:8e:f9:1e:6a:27:14:2f:
78:5a:65:43:bc:f6:df:af:11:4a:59:a6:43:6d:dd:
7e:22:95:05:7a:35:f1:ed:bf:09:c6:d8:ad:8d:1a:
81:07:f0:11:4a:ec:e5:af:0e:c3:da:cd:24:55:3f:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:E2:A6:60:9F:F4:1B:0E:18:57:32:3E:86:21:20:F2:4F:4B:60
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:97:d3:f3:9c:c4:37:97:09:f5:2f:18:ff:87:81:82:79:3d:
08:32:dc:a1:e4:78:9e:f9:e2:df:40:b4:79:75:eb:65:8e:dc:
4b:10:6c:e1:72:23:00:cf:fd:47:61:17:a7:b9:6c:75:63:48:
e6:b9:9c:d4:9d:b0:14:af:6e:d0:89:22:32:e7:0a:3f:31:22:
3b:21:6c:8d:ef:94:e0:96:7a:04:ac:0d:03:53:e1:b5:ad:72:
fb:27:76:83:45:34:eb:2b:26:e7:d0:61:95:a3:09:45:91:20:
65:c3:6f:9a:6a:2e:72:26:7d:c2:16:ce:f4:bd:bf:c5:3e:9e:
24:3b:23:b8:ca:c2:73:cd:23:c9:bb:53:5e:b8:1c:48:a3:a1:
9b:77:d5:0e:af:52:36:f9:d0:b0:46:04:8a:2e:d0:af:f3:ed:
f6:5f:05:8e:51:d4:0a:17:3f:e4:cc:ae:39:aa:b9:54:1f:0d:
65:41:1d:20:7d:e0:01:8e:d0:ca:22:f0:03:02:79:1c:d0:16:
1c:c7:5c:5e:7d:c0:5f:77:43:65:5a:d1:d5:65:8d:01:54:9f:
f4:ad:9c:4a:3a:a7:2b:f4:90:e9:c5:cf:72:52:ae:f2:56:9c:
20:fe:99:82:88:08:e9:27:fa:ed:35:e7:99:b2:9a:cb:bc:4c:
d4:aa:91:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakmvWJECU5ru2tELV3GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi
NWQ3MmEwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y0ZTJhNjYwOWZmNDFiMGUxODU3MzIzZTg2MjEyMGYyNGY0YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW7fdqkFO4yAC5yA+M+PArtS4b22
pey6Zy/xFVob40HKvjp8FUR13VeAQYAsdnd7R7M/5gubx3K1/YgNC3jI1/03X5jU
6NTmnwi60hFUAQzTHSqafG36wNSnONGAhdz6a6y4H/8ES8Tzc3YCBZBNdZU19hEO
0bW5FiJvvgJAvM0pbYUpJz6wAy6GKtx8ggu9xC0nk0rIiwmgBJKtnnpYUiemzRMx
pIWoJQVY7K6u03gg8Qm6jdwveL0fO4Ni9fk1Qdj/Py0DMmO3DY75HmonFC94WmVD
vPbfrxFKWaZDbd1+IpUFejXx7b8JxtitjRqBB/ARSuzlrw7D2s0kVT/8mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEz04qZgn/QbDhhXMj6GISDyT0tgMB8GA1UdIwQY
MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt
MWE5YWJhYjI0ZGM5LzEvVFBUaXBtQ2Y5QnNPR0ZjeVBvWWhJUEpQUzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5
LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudQUMA0G
CSqGSIb3DQEBCwUAA4IBAQAal9PznMQ3lwn1Lxj/h4GCeT0IMtyh5Hie+eLfQLR5
detljtxLEGzhciMAz/1HYRenuWx1Y0jmuZzUnbAUr27QiSIy5wo/MSI7IWyN75Tg
lnoErA0DU+G1rXL7J3aDRTTrKybn0GGVowlFkSBlw2+aai5yJn3CFs70vb/FPp4k
OyO4ysJzzSPJu1NeuBxIo6Gbd9UOr1I2+dCwRgSKLtCv8+32XwWOUdQKFz/kzK45
qrlUHw1lQR0gfeABjtDKIvADAnkc0BYcx1xefcBfd0NlWtHVZY0BVJ/0rZxKOqcr
9JDpxc9yUq7yVpwg/pmCiAjpJ/rtNeeZsprLvEzUqpHI
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:12 2025 by rpki-client