Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/tgXHz8gzde8nL8u9-odgzdtG_tY.roa
File: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (raw, json)
Hash identifier: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=
Subject key identifier: B6:05:C7:CF:C8:33:75:EF:27:2F:CB:BD:FA:87:60:CD:DB:46:FE:D6
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019425FC4EBA531D0408522AD45E2695F225
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/tgXHz8gzde8nL8u9-odgzdtG_tY.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 185.198.204.0/23 maxlen: 23
2a00:f080::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4e:ba:53:1d:04:08:52:2a:d4:5e:26:95:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b605c7cfc83375ef272fcbbdfa8760cddb46fed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:c6:e8:39:2e:42:3b:de:30:74:61:bc:37:
f5:db:9e:cd:80:23:21:04:5f:85:b8:02:24:57:01:
9c:b2:fb:51:3b:27:3a:d1:35:81:91:10:2d:d3:f9:
04:50:66:6c:ce:dd:cf:78:69:9f:d0:18:a5:59:ae:
94:64:4b:17:f7:f7:d8:8c:eb:3e:8a:6a:49:fe:b9:
59:b9:43:6f:8d:5e:89:9f:bf:9a:b0:f7:44:a9:5b:
06:dc:24:75:e0:ed:e8:06:b6:0f:f8:01:a9:e6:40:
79:f3:8a:3d:fa:88:7b:c3:a8:ad:91:b5:a0:6c:c2:
4b:60:81:6e:26:ff:2b:53:66:ee:cf:26:f5:d9:ab:
e2:39:d8:fc:51:1f:6b:ae:56:9e:4e:70:2b:be:3a:
88:1a:ad:c0:8b:c7:31:b3:54:db:28:ac:f7:0a:bb:
7e:dc:92:4e:c0:b9:31:4b:7d:39:e9:72:23:65:bd:
9b:f5:c8:9c:1c:33:1d:a6:f5:c9:ba:f2:26:99:43:
5d:20:42:5f:f4:e6:db:ab:f8:a3:61:e2:08:2d:d2:
8a:d9:22:1c:2f:79:8e:06:2d:25:93:05:23:87:07:
55:ce:a0:34:b2:f7:ac:34:8d:74:33:59:c9:9a:8c:
77:87:9d:88:a0:79:eb:8e:ae:2e:f6:41:76:be:bf:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:C7:CF:C8:33:75:EF:27:2F:CB:BD:FA:87:60:CD:DB:46:FE:D6
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/tgXHz8gzde8nL8u9-odgzdtG_tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.204.0/23
IPv6:
2a00:f080::/42
Signature Algorithm: sha256WithRSAEncryption
71:18:b0:f7:0a:8c:80:4c:6f:78:3f:cc:81:fe:86:26:f2:08:
00:cc:1f:b8:f3:95:24:3b:c8:8f:bc:b5:4a:a7:ef:7a:71:28:
4e:32:a4:63:36:0c:b6:a5:41:30:5f:15:bf:3c:96:1f:23:ec:
4f:86:51:f4:3c:5c:5c:0a:c5:c4:c7:87:09:90:57:7e:71:43:
9b:96:cb:95:cc:e9:b7:30:10:93:4b:56:12:ec:f4:15:45:71:
8e:00:7c:90:99:10:fa:37:8e:39:bd:de:d1:d6:6e:dc:5b:2b:
40:e6:e3:8a:3d:9d:cc:6d:5c:47:cb:69:9a:4f:6d:34:10:c5:
89:be:59:aa:8e:96:d0:97:90:3b:00:56:79:21:b3:dc:4d:19:
d2:84:e5:b0:0f:63:52:42:0a:39:db:5a:62:56:4c:54:7c:6d:
1e:d6:81:75:fd:d4:83:ff:3f:86:a1:a0:ad:0a:28:58:86:2b:
e7:e8:42:84:79:b0:c9:0a:c4:ca:af:82:19:bb:14:b7:f5:3d:
42:a5:55:3a:84:15:d7:04:df:25:1e:b1:3f:e9:71:0b:16:08:
22:f1:74:4e:00:c9:1c:45:fd:c6:a8:87:57:07:86:98:a2:f3:
bf:31:c4:ef:01:54:1b:27:52:7a:9e:89:d6:9f:7a:14:4f:49:
22:2d:7f:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/E66Ux0ECFIq1F4mlfIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjUwMTAyMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA1YzdjZmM4MzM3NWVmMjcyZmNiYmRmYTg3NjBjZGRiNDZmZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCDG6DkuQjveMHRhvDf1257NgCMh
BF+FuAIkVwGcsvtROyc60TWBkRAt0/kEUGZszt3PeGmf0BilWa6UZEsX9/fYjOs+
impJ/rlZuUNvjV6Jn7+asPdEqVsG3CR14O3oBrYP+AGp5kB584o9+oh7w6itkbWg
bMJLYIFuJv8rU2buzyb12aviOdj8UR9rrlaeTnArvjqIGq3Ai8cxs1TbKKz3Crt+
3JJOwLkxS3056XIjZb2b9cicHDMdpvXJuvImmUNdIEJf9Obbq/ijYeIILdKK2SIc
L3mOBi0lkwUjhwdVzqA0svesNI10M1nJmox3h52IoHnrjq4u9kF2vr+NpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLYFx8/IM3XvJy/LvfqHYM3bRv7WMB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvdGdYSHo4Z3pkZThuTDh1OS1vZGd6ZHRHX3RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBucbMMA8E
AgACMAkDBwYqAPCAAAAwDQYJKoZIhvcNAQELBQADggEBAHEYsPcKjIBMb3g/zIH+
hibyCADMH7jzlSQ7yI+8tUqn73pxKE4ypGM2DLalQTBfFb88lh8j7E+GUfQ8XFwK
xcTHhwmQV35xQ5uWy5XM6bcwEJNLVhLs9BVFcY4AfJCZEPo3jjm93tHWbtxbK0Dm
44o9ncxtXEfLaZpPbTQQxYm+WaqOltCXkDsAVnkhs9xNGdKE5bAPY1JCCjnbWmJW
TFR8bR7WgXX91IP/P4ahoK0KKFiGK+foQoR5sMkKxMqvghm7FLf1PUKlVTqEFdcE
3yUesT/pcQsWCCLxdE4AyRxF/caoh1cHhpii878xxO8BVBsnUnqeidafehRPSSIt
fzo=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:46 2025 by rpki-client