Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rTie_7PEv6-re-3-oCL-n4T2Vz8.roa
File: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (raw, json)
Hash identifier: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=
Subject key identifier: AD:38:9E:FF:B3:C4:BF:AF:AB:7B:ED:FE:A0:22:FE:9F:84:F6:57:3F
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B801CB8EFF61D1ED672C39629B014
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rTie_7PEv6-re-3-oCL-n4T2Vz8.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57841
IP address blocks: 31.42.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:80:1c:b8:ef:f6:1d:1e:d6:72:c3:96:29:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad389effb3c4bfafab7bedfea022fe9f84f6573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:0a:f0:55:4a:b0:a9:ea:35:21:85:90:91:
16:3e:b1:99:b2:e1:ef:9a:f3:e7:f4:76:5b:97:e5:
6e:40:ba:87:29:74:70:0e:af:81:3d:09:08:96:a9:
9f:4d:b4:2c:9f:83:51:6c:2d:05:a9:3c:ff:45:39:
bc:86:79:eb:e9:62:18:89:11:04:e1:38:77:fb:a5:
f0:1e:d8:44:54:82:d3:09:ed:22:f7:fa:22:47:dd:
d7:c7:53:de:0a:54:13:5a:7f:98:54:6d:e9:74:a3:
58:99:03:e9:39:ee:e6:13:a5:55:74:1d:5b:9c:a8:
af:ad:fe:c4:6c:80:97:f8:f9:2e:9d:a2:4a:59:94:
e8:e1:8f:e5:66:62:55:5e:aa:a8:b5:e8:84:f6:d4:
74:dc:a5:58:b6:57:d3:85:e4:02:e8:d9:4e:3f:f3:
f9:1e:1a:a3:9c:9e:53:e8:ff:2c:02:b6:f5:10:b3:
c2:c2:39:50:a1:c1:42:98:75:6f:83:f0:8f:c1:ab:
db:fe:ae:51:e4:2a:61:e2:5a:f5:ff:3e:a5:13:ee:
95:57:f0:d1:03:84:49:f6:94:27:a8:62:13:ac:d7:
3b:db:8e:0d:37:b7:b9:ea:ad:db:dd:c4:b9:73:ae:
2a:7e:79:5c:e8:b3:ba:71:54:0a:e5:44:97:44:f1:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:9E:FF:B3:C4:BF:AF:AB:7B:ED:FE:A0:22:FE:9F:84:F6:57:3F
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rTie_7PEv6-re-3-oCL-n4T2Vz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.88.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:14:1f:43:84:36:18:53:4f:12:40:b8:65:b6:48:a5:e0:62:
1e:6b:90:f2:79:34:bd:92:f2:7e:51:5c:8a:2b:52:a6:78:0f:
df:4c:2c:db:fd:5d:f1:ab:2f:3d:b0:e8:81:7c:31:a0:fa:47:
65:ee:c2:20:a3:65:1a:b8:50:0f:e6:41:e5:a6:b3:1f:bd:d6:
6a:b9:43:85:4c:36:d2:38:22:0f:93:94:a0:ee:e5:c4:8f:49:
82:b9:f8:e2:be:ba:74:0f:e4:9c:96:62:40:8d:22:99:9d:59:
59:4b:67:8c:83:7d:0a:c3:a5:ae:79:dc:ec:a4:eb:91:ff:dc:
95:3f:2e:e0:42:23:fd:de:c1:af:97:ca:f5:10:0a:35:d1:07:
b6:90:d1:8c:f6:33:53:e5:33:44:9e:7a:db:5d:d3:c0:7e:98:
70:c8:d9:c3:2e:e8:47:3a:76:16:73:06:38:ba:bc:b3:c0:12:
52:f7:b1:23:0c:2e:d4:1e:1d:24:3f:3b:95:51:a3:27:bf:cd:
a0:f5:78:69:47:77:f0:af:22:84:3d:1b:74:d7:60:b7:1a:f5:
1e:18:5e:2e:24:ef:9b:c7:13:97:1c:d5:e6:d2:9e:09:a5:26:
b9:a0:41:94:65:ab:fc:26:51:32:e8:f9:86:9b:e2:de:b8:3b:
a9:3e:17:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4AcuO/2HR7WcsOWKbAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjUwMTAyMDk0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDM4OWVmZmIzYzRiZmFmYWI3YmVkZmVhMDIyZmU5Zjg0ZjY1NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl0K8FVKsKnqNSGFkJEWPrGZsuHv
mvPn9HZbl+VuQLqHKXRwDq+BPQkIlqmfTbQsn4NRbC0FqTz/RTm8hnnr6WIYiREE
4Th3+6XwHthEVILTCe0i9/oiR93Xx1PeClQTWn+YVG3pdKNYmQPpOe7mE6VVdB1b
nKivrf7EbICX+PkunaJKWZTo4Y/lZmJVXqqoteiE9tR03KVYtlfTheQC6NlOP/P5
HhqjnJ5T6P8sArb1ELPCwjlQocFCmHVvg/CPwavb/q5R5Cph4lr1/z6lE+6VV/DR
A4RJ9pQnqGITrNc7244NN7e56q3b3cS5c64qfnlc6LO6cVQK5USXRPGkwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK04nv+zxL+vq3vt/qAi/p+E9lc/MB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvclRpZV83UEV2Ni1yZS0zLW9DTC1uNFQyVno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHypYMA0G
CSqGSIb3DQEBCwUAA4IBAQAdFB9DhDYYU08SQLhltkil4GIea5DyeTS9kvJ+UVyK
K1KmeA/fTCzb/V3xqy89sOiBfDGg+kdl7sIgo2UauFAP5kHlprMfvdZquUOFTDbS
OCIPk5Sg7uXEj0mCufjivrp0D+SclmJAjSKZnVlZS2eMg30Kw6WuedzspOuR/9yV
Py7gQiP93sGvl8r1EAo10Qe2kNGM9jNT5TNEnnrbXdPAfphwyNnDLuhHOnYWcwY4
uryzwBJS97EjDC7UHh0kPzuVUaMnv82g9XhpR3fwryKEPRt012C3GvUeGF4uJO+b
xxOXHNXm0p4JpSa5oEGUZav8JlEy6PmGm+LeuDupPhdT
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:43:22 2025 by rpki-client