Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/TEHPMPoZisl9vOiLWV_tB3SmWaI.roa
File: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (raw, json)
Hash identifier: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=
Subject key identifier: 4C:41:CF:30:FA:19:8A:C9:7D:BC:E8:8B:59:5F:ED:07:74:A6:59:A2
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A3063CCADC65840F728F22CDE26A
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/TEHPMPoZisl9vOiLWV_tB3SmWaI.roa
Signing time: Thu 02 Jan 2025 11:48:39 +0000
ROA not before: Thu 02 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204092
IP address blocks: 80.67.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a3:06:3c:ca:dc:65:84:0f:72:8f:22:cd:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c41cf30fa198ac97dbce88b595fed0774a659a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:6f:22:00:c3:b9:d6:f6:01:ee:d7:c3:8d:
9b:1e:be:f3:d9:2e:27:89:82:8d:38:ea:5c:23:5f:
6c:95:82:3d:50:6e:a5:68:7a:b2:ed:66:47:63:16:
6e:bf:d1:b9:8f:e3:1a:90:31:8f:28:97:26:0a:86:
15:42:a3:c0:c1:6a:08:8f:9c:2b:6a:b1:01:a6:5e:
fc:4b:e9:e5:9a:40:9e:04:e6:bb:0b:dc:db:50:c7:
2f:c2:35:10:e5:49:07:71:92:94:19:06:87:46:79:
4e:8c:79:f2:bb:12:27:81:49:2b:db:92:d4:44:df:
ce:21:bb:fd:67:13:db:3a:96:02:8e:8b:db:d0:62:
21:d9:27:08:78:f6:ce:fb:6b:9b:be:a6:b6:fa:e5:
b2:1f:b8:06:55:15:c3:b0:a6:8d:bd:1f:67:23:dd:
bc:a8:f3:d0:8c:e3:a8:c1:db:b3:a9:21:05:fd:88:
ec:1b:4d:71:48:de:79:c8:66:12:36:55:70:ae:89:
05:32:27:29:ca:d1:e0:4d:ad:44:05:32:3d:9f:15:
b4:24:50:af:04:2e:40:64:86:e0:55:fd:0e:49:39:
f3:53:a1:ab:2d:36:0d:79:0c:65:67:8d:d0:ed:cc:
81:ec:bc:34:a4:70:3a:41:06:c2:c0:31:38:52:5f:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:CF:30:FA:19:8A:C9:7D:BC:E8:8B:59:5F:ED:07:74:A6:59:A2
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/TEHPMPoZisl9vOiLWV_tB3SmWaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6b:b9:07:65:fe:b1:71:53:5d:98:e0:65:a5:96:22:59:16:
e2:cd:56:4f:1d:84:b4:83:7b:0a:47:ea:92:d5:4b:37:f3:36:
9b:99:5b:bf:59:01:88:a9:35:00:b1:46:29:2e:3d:12:0e:05:
b4:c1:af:be:78:67:87:f0:72:f6:a3:13:e9:43:83:44:cb:85:
26:26:fa:20:63:2e:f1:23:c4:8e:45:aa:e9:cd:61:94:b2:a0:
84:d0:fe:0b:17:45:94:68:4f:10:90:9b:a5:90:fb:88:ff:07:
df:f8:2b:40:ba:5d:0c:b7:84:92:93:b9:18:4c:48:87:8d:75:
a5:fa:c9:22:2f:c3:46:7b:d0:02:ee:a6:93:e8:ac:0d:6c:fa:
ac:60:73:1e:eb:40:65:59:cd:da:33:7f:7b:1a:84:07:4c:c1:
59:1e:fb:4e:60:c5:f5:06:bf:67:de:66:a0:e4:45:11:f1:94:
33:e4:ce:41:ef:94:c4:0d:7a:da:e5:0f:84:bb:3f:3f:f1:5a:
ac:fb:fe:2a:29:3b:58:bd:4f:99:27:ac:61:48:4a:9b:e5:c6:
05:98:89:d1:73:f0:29:bf:4d:e3:67:e8:2f:ff:95:07:89:4d:
0f:24:79:23:fd:b0:ab:4b:3d:3d:be:14:06:4d:53:40:38:de:
28:69:ed:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2KMGPMrcZYQPco8izeJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjUwMTAyMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQxY2YzMGZhMTk4YWM5N2RiY2U4OGI1OTVmZWQwNzc0YTY1OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5vIgDDudb2Ae7Xw42bHr7z2S4n
iYKNOOpcI19slYI9UG6laHqy7WZHYxZuv9G5j+MakDGPKJcmCoYVQqPAwWoIj5wr
arEBpl78S+nlmkCeBOa7C9zbUMcvwjUQ5UkHcZKUGQaHRnlOjHnyuxIngUkr25LU
RN/OIbv9ZxPbOpYCjovb0GIh2ScIePbO+2ubvqa2+uWyH7gGVRXDsKaNvR9nI928
qPPQjOOowduzqSEF/YjsG01xSN55yGYSNlVwrokFMicpytHgTa1EBTI9nxW0JFCv
BC5AZIbgVf0OSTnzU6GrLTYNeQxlZ43Q7cyB7Lw0pHA6QQbCwDE4Ul/VCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExBzzD6GYrJfbzoi1lf7Qd0plmiMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvVEVIUE1Qb1ppc2w5dk9pTFdWX3RCM1NtV2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEO+MA0G
CSqGSIb3DQEBCwUAA4IBAQBba7kHZf6xcVNdmOBlpZYiWRbizVZPHYS0g3sKR+qS
1Us38zabmVu/WQGIqTUAsUYpLj0SDgW0wa++eGeH8HL2oxPpQ4NEy4UmJvogYy7x
I8SORarpzWGUsqCE0P4LF0WUaE8QkJulkPuI/wff+CtAul0Mt4SSk7kYTEiHjXWl
+skiL8NGe9AC7qaT6KwNbPqsYHMe60BlWc3aM397GoQHTMFZHvtOYMX1Br9n3mag
5EUR8ZQz5M5B75TEDXra5Q+Euz8/8Vqs+/4qKTtYvU+ZJ6xhSEqb5cYFmInRc/Ap
v03jZ+gv/5UHiU0PJHkj/bCrSz09vhQGTVNAON4oae1x
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:51 2025 by rpki-client