Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TjRVD4eTC9ou630w_SogsYsS2i8.roa
File: TjRVD4eTC9ou630w_SogsYsS2i8.roa (raw, json)
Hash identifier: MzxiND3DLT/Z9YUtjr+3wENZnheDLjvzlFroyg2KDBQ=
Subject key identifier: 4E:34:55:0F:87:93:0B:DA:2E:EB:7D:30:FD:2A:20:B1:8B:12:DA:2F
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE1A1F1367BD0BF642DD083BC9483
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TjRVD4eTC9ou630w_SogsYsS2i8.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11938
IP address blocks: 2a12:8fc1::/32 maxlen: 32
2a12:8fc1:1000::/36 maxlen: 36
2a12:8fc1:2000::/36 maxlen: 36
2a12:8fc1:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:a1:f1:36:7b:d0:bf:64:2d:d0:83:bc:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e34550f87930bda2eeb7d30fd2a20b18b12da2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:f8:38:75:0b:a3:f9:4e:da:0a:81:60:60:
78:2e:0d:6e:72:15:6a:ec:a8:88:54:aa:68:ae:00:
6e:51:35:f8:e9:2c:a5:e1:c0:23:34:f7:32:82:74:
ef:a2:60:57:d7:aa:a1:65:9f:19:1d:1e:57:ef:14:
53:46:32:33:bc:7d:6c:03:82:b6:96:17:07:5f:8d:
d9:d6:d3:ab:f4:02:8d:eb:db:39:0a:63:f2:8f:2b:
95:26:41:35:ed:ec:19:be:f0:47:78:75:c4:45:f3:
0d:19:0f:1b:17:95:d6:da:1b:07:89:24:10:43:9c:
d9:fe:82:0b:a3:c2:6a:47:5d:12:c3:8c:47:ba:55:
c1:ae:c9:78:12:b6:35:60:c9:ef:b9:a0:cf:9b:b5:
cb:8a:84:12:57:52:1c:d0:db:68:da:3c:b0:7d:ee:
0e:40:28:ae:34:0e:aa:09:c8:2c:38:36:64:b0:37:
b2:71:c4:94:1c:9c:92:a6:af:09:81:2c:9e:1e:09:
15:c3:c7:5e:8a:9b:69:ac:16:cc:bc:18:61:6e:b7:
70:c1:29:8b:2f:62:ad:8b:55:bf:3b:3d:88:a6:d2:
0d:25:3d:a4:18:44:52:38:5a:ac:c4:25:8d:ff:76:
49:be:95:93:81:c4:9b:fc:78:75:90:86:4a:e1:dd:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:55:0F:87:93:0B:DA:2E:EB:7D:30:FD:2A:20:B1:8B:12:DA:2F
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TjRVD4eTC9ou630w_SogsYsS2i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc1::/32
Signature Algorithm: sha256WithRSAEncryption
5b:1b:4b:b0:f3:a9:9c:a2:8f:8f:03:e8:10:07:b7:63:15:38:
ee:d7:5c:40:21:a5:ed:19:5b:82:7e:38:a5:fe:32:64:cc:8a:
28:b0:8c:c7:03:19:9e:b9:bc:64:4c:e7:85:6b:83:a5:b9:7a:
17:3d:86:90:e5:3d:33:25:b3:7a:d9:da:ed:fd:50:ac:8c:0e:
5b:e5:80:08:87:98:79:44:dd:c9:8f:9b:c2:4f:4d:40:ac:61:
98:52:38:08:d4:d4:91:42:80:2f:4a:c1:37:9a:9c:8a:27:5f:
b8:3f:86:63:1d:f8:24:3e:e5:1e:d1:8e:64:88:08:bf:49:39:
ff:01:3d:8f:aa:39:d1:3c:ce:67:7d:4a:63:31:71:99:ad:f1:
61:5b:59:7f:87:56:2b:fd:5f:5b:48:4d:ca:af:3a:0d:f8:f3:
0e:36:e0:8f:c9:53:18:77:09:de:fe:3d:1a:99:29:ef:8d:40:
0f:ea:d9:30:0f:3b:2a:7e:d4:43:5a:d4:c6:ee:11:d6:c2:4a:
c9:05:6f:ab:f2:ef:c5:ac:10:5e:3f:00:7f:79:61:c7:b6:53:
c5:bf:b5:44:16:91:26:7a:21:dc:18:30:20:6e:15:64:16:40:
fd:f3:0f:6c:f8:5b:9f:9d:a3:5d:55:b7:78:53:b1:29:95:4b:
59:17:6a:4c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijeGh8TZ70L9kLdCDvJSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1
ODkxMGIwHhcNMjUwMTAxMTU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM0NTUwZjg3OTMwYmRhMmVlYjdkMzBmZDJhMjBiMThiMTJkYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYz4OHULo/lO2gqBYGB4Lg1uchVq
7KiIVKporgBuUTX46Syl4cAjNPcygnTvomBX16qhZZ8ZHR5X7xRTRjIzvH1sA4K2
lhcHX43Z1tOr9AKN69s5CmPyjyuVJkE17ewZvvBHeHXERfMNGQ8bF5XW2hsHiSQQ
Q5zZ/oILo8JqR10Sw4xHulXBrsl4ErY1YMnvuaDPm7XLioQSV1Ic0Nto2jywfe4O
QCiuNA6qCcgsODZksDeyccSUHJySpq8JgSyeHgkVw8deiptprBbMvBhhbrdwwSmL
L2Kti1W/Oz2IptINJT2kGERSOFqsxCWN/3ZJvpWTgcSb/Hh1kIZK4d1ZxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE40VQ+HkwvaLut9MP0qILGLEtovMB8GA1UdIwQY
MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt
NThjOTZkNjZmMGExLzEvVGpSVkQ0ZVRDOW91NjMwd19Tb2dzWXNTMmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx
LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhKPwTAN
BgkqhkiG9w0BAQsFAAOCAQEAWxtLsPOpnKKPjwPoEAe3YxU47tdcQCGl7Rlbgn44
pf4yZMyKKLCMxwMZnrm8ZEznhWuDpbl6Fz2GkOU9MyWzetna7f1QrIwOW+WACIeY
eUTdyY+bwk9NQKxhmFI4CNTUkUKAL0rBN5qciidfuD+GYx34JD7lHtGOZIgIv0k5
/wE9j6o50TzOZ31KYzFxma3xYVtZf4dWK/1fW0hNyq86DfjzDjbgj8lTGHcJ3v49
Gpkp741AD+rZMA87Kn7UQ1rUxu4R1sJKyQVvq/LvxawQXj8Af3lhx7ZTxb+1RBaR
Jnoh3BgwIG4VZBZA/fMPbPhbn52jXVW3eFOxKZVLWRdqTA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:05 2025 by rpki-client