Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa
File: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (raw, json)
Hash identifier: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=
Subject key identifier: 4E:34:87:DD:6E:A2:99:0F:57:0E:37:67:E0:6B:ED:47:92:F4:4E:13
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F8538F0AF9191B2CB0C25FBEE610F
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198692
IP address blocks: 82.150.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:38:f0:af:91:91:b2:cb:0c:25:fb:ee:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3487dd6ea2990f570e3767e06bed4792f44e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:21:37:dd:a5:8d:33:1e:c5:50:41:e2:bf:
3b:aa:8c:e8:61:b8:d6:ef:01:26:ad:8f:fd:c3:df:
fd:1d:30:5f:93:a2:f0:e7:9a:f2:8c:bc:7b:c7:38:
de:37:7c:2e:96:55:69:68:bf:28:ea:06:2d:a7:80:
c7:73:c3:6d:b8:25:29:d4:e4:0d:fc:45:a3:00:3f:
32:b8:54:55:f1:0e:86:2c:37:ac:dd:61:1f:a2:e3:
05:2c:32:1a:10:2e:82:dd:47:8d:24:55:30:2c:42:
6a:2b:85:d3:c2:0c:ce:e5:2c:14:98:c2:4c:6f:68:
51:c1:80:6e:b9:69:f6:ae:38:2d:07:87:b9:bb:14:
d1:01:69:14:1b:85:a6:43:f1:89:40:a1:50:ae:96:
fc:41:94:24:ed:5f:03:a7:23:5f:a2:a4:25:aa:c9:
49:10:c3:9b:a3:1f:d0:9b:5a:9b:4c:9e:e3:29:28:
09:e6:fb:91:fc:3b:f6:66:14:16:f7:74:e0:e8:c2:
68:39:58:e7:a3:58:a4:49:17:a6:c9:2b:24:bf:fb:
2f:9d:a5:77:51:02:c9:52:73:1d:d8:6f:f9:d5:27:
31:e2:65:51:01:e7:f5:bd:89:71:1c:19:0b:0e:26:
9f:ea:b9:29:4d:d6:fb:88:40:12:a9:1b:54:3e:64:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:87:DD:6E:A2:99:0F:57:0E:37:67:E0:6B:ED:47:92:F4:4E:13
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:15:dc:1c:0c:9e:fb:f1:97:8b:e2:f0:04:39:e2:fd:0f:
1d:c3:a9:20:f5:59:0c:83:39:80:5c:4f:31:e4:5b:8f:36:03:
27:f2:c2:67:11:b3:0d:c3:5c:79:fc:ff:d9:fc:ea:ac:0e:ff:
9d:db:f9:7c:18:8e:0b:ed:60:43:a3:ca:55:99:76:74:1e:67:
52:43:2c:1b:ee:ba:05:d1:5d:b5:8d:81:24:a6:06:66:5a:0a:
cd:97:da:0b:9c:60:d9:3f:ff:86:10:67:cd:5f:fb:ba:67:9e:
2b:2f:fe:8c:cf:a0:eb:a6:4a:d4:08:56:09:48:23:fe:45:f8:
92:3b:a4:39:cc:94:08:c0:3d:38:8f:9b:1c:35:40:0e:fe:e8:
5d:bb:8d:71:78:20:1c:28:c7:1a:67:6b:8a:1c:66:02:0b:48:
84:10:61:f1:c2:94:72:17:a8:13:6c:d2:55:77:a0:6c:30:60:
f2:39:24:97:d7:85:24:0e:1e:f7:53:c5:16:44:a2:e8:04:19:
45:3a:89:dd:e7:0f:5f:84:9e:19:4b:16:90:c9:14:0a:e0:43:
a9:ec:41:f0:f0:05:2e:b3:55:22:1b:92:d4:fd:f3:4d:d4:bf:
74:42:4a:d4:d6:35:e8:b4:0d:75:bd:3d:db:c4:fc:f0:6c:49:
9e:b5:b9:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj4U48K+RkbLLDCX77mEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwMTAyMDU0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM0ODdkZDZlYTI5OTBmNTcwZTM3NjdlMDZiZWQ0NzkyZjQ0ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e4hN92ljTMexVBB4r87qozoYbjW
7wEmrY/9w9/9HTBfk6Lw55ryjLx7xzjeN3wullVpaL8o6gYtp4DHc8NtuCUp1OQN
/EWjAD8yuFRV8Q6GLDes3WEfouMFLDIaEC6C3UeNJFUwLEJqK4XTwgzO5SwUmMJM
b2hRwYBuuWn2rjgtB4e5uxTRAWkUG4WmQ/GJQKFQrpb8QZQk7V8DpyNfoqQlqslJ
EMObox/Qm1qbTJ7jKSgJ5vuR/Dv2ZhQW93Tg6MJoOVjno1ikSRemySskv/svnaV3
UQLJUnMd2G/51Scx4mVRAef1vYlxHBkLDiaf6rkpTdb7iEASqRtUPmQhPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE40h91uopkPVw43Z+Br7UeS9E4TMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvVGpTSDNXNmltUTlYRGpkbjRHdnRSNUwwVGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaKMA0G
CSqGSIb3DQEBCwUAA4IBAQAxXhXcHAye+/GXi+LwBDni/Q8dw6kg9VkMgzmAXE8x
5FuPNgMn8sJnEbMNw1x5/P/Z/OqsDv+d2/l8GI4L7WBDo8pVmXZ0HmdSQywb7roF
0V21jYEkpgZmWgrNl9oLnGDZP/+GEGfNX/u6Z54rL/6Mz6DrpkrUCFYJSCP+RfiS
O6Q5zJQIwD04j5scNUAO/uhdu41xeCAcKMcaZ2uKHGYCC0iEEGHxwpRyF6gTbNJV
d6BsMGDyOSSX14UkDh73U8UWRKLoBBlFOond5w9fhJ4ZSxaQyRQK4EOp7EHw8AUu
s1UiG5LU/fNN1L90QkrU1jXotA11vT3bxPzwbEmetbld
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:04 2025 by rpki-client