Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TkY9d9fk0tqwl4za7b6OccXc3cM.roa
File: TkY9d9fk0tqwl4za7b6OccXc3cM.roa (raw, json)
Hash identifier: 3BTs+wq9NpVaS8vHrl8psqi0eR2tdKOFc2y+AKeDMic=
Subject key identifier: 4E:46:3D:77:D7:E4:D2:DA:B0:97:8C:DA:ED:BE:8E:71:C5:DC:DD:C3
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018356023C7B3E2DADF9366702067AF9E4F1
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TkY9d9fk0tqwl4za7b6OccXc3cM.roa
Signing time: Mon 19 Sep 2022 13:48:50 +0000
ROA not before: Mon 19 Sep 2022 13:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 194.107.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:02:3c:7b:3e:2d:ad:f9:36:67:02:06:7a:f9:e4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 19 13:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e463d77d7e4d2dab0978cdaedbe8e71c5dcddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:b5:ad:a4:9b:23:16:4d:a7:f2:97:70:aa:
40:66:e2:a2:fe:c5:fb:d7:55:1b:56:8c:b9:ed:f9:
09:65:52:21:7e:88:dc:31:23:69:78:9b:da:bf:4e:
54:3d:26:6d:90:1b:4a:e2:d0:e9:7d:02:76:41:91:
8f:ab:2f:3d:14:02:ac:8c:fd:84:34:02:39:98:c9:
6f:b3:9f:dd:3f:c7:a5:7a:54:54:c5:94:f3:86:7a:
77:63:67:1f:e9:43:6b:b1:79:41:3a:8c:03:1b:4d:
cd:be:57:8a:3a:f3:d3:e6:ed:92:c7:4e:ae:73:fd:
a8:26:b0:bb:b7:68:ff:86:d4:b0:9c:00:ed:98:11:
9b:87:49:e2:ee:74:71:88:0c:9c:d6:d6:16:5a:c1:
5e:4f:33:79:08:25:2c:90:22:ad:26:99:14:50:19:
70:6b:c7:c3:55:34:72:3b:a7:f3:b7:d0:07:87:f4:
f9:20:92:f9:8d:42:0a:a3:27:dd:ab:44:a0:a0:9e:
a8:9b:e1:e5:2f:84:6d:a6:04:d5:69:07:a1:23:4c:
6e:20:cc:e6:7d:ce:63:e8:a7:ff:f3:db:93:cd:86:
ff:29:73:99:06:9c:a9:ca:8d:09:b6:01:7c:74:53:
d4:48:1c:1a:ad:54:26:86:42:89:fb:f6:db:81:c6:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:3D:77:D7:E4:D2:DA:B0:97:8C:DA:ED:BE:8E:71:C5:DC:DD:C3
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TkY9d9fk0tqwl4za7b6OccXc3cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fa:a6:b7:56:e2:7e:bb:ac:b2:25:db:16:70:c1:42:16:1f:
16:0b:46:b1:ed:df:27:1e:c5:d0:24:4e:bc:71:d4:81:ea:b1:
dc:2a:46:9b:81:10:59:b9:bc:fd:03:40:d2:c4:b5:28:e2:aa:
99:82:33:54:c0:48:76:03:cb:62:78:1f:6d:d5:08:fd:63:5a:
5f:f0:fa:3d:96:6e:da:a3:22:94:d4:0a:64:f0:6f:3d:a6:3d:
0f:6a:ae:06:e7:c3:96:af:57:f4:03:46:3f:3d:ef:61:8f:97:
b4:68:c0:63:1e:fb:17:79:08:c2:b1:7a:67:66:55:db:5d:c5:
10:bb:c7:f8:e8:31:e1:d4:f3:85:13:e0:ad:bf:af:fd:24:49:
ba:d1:0d:6e:84:ce:96:4e:4a:37:f6:78:5a:d5:85:6e:42:6e:
12:3c:ac:ce:04:96:bd:7f:b4:e5:22:7c:dc:fc:04:e7:e7:f8:
73:ad:c0:5d:69:43:3f:2a:a2:2d:cc:72:4c:2a:94:a0:c1:8a:
29:d6:c0:08:98:32:44:c1:da:bd:ef:bb:93:71:48:ef:0a:06:
45:10:4a:b5:8c:95:43:db:b8:8a:46:03:bb:e9:6a:12:10:b7:
dd:60:00:b4:a2:82:05:33:2c:e6:aa:29:a1:f9:90:bb:9c:ed:
e2:fc:3f:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNWAjx7Pi2t+TZnAgZ6+eTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjIwOTE5MTM0ODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTQ2M2Q3N2Q3ZTRkMmRhYjA5NzhjZGFlZGJlOGU3MWM1ZGNkZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u+1raSbIxZNp/KXcKpAZuKi/sX7
11UbVoy57fkJZVIhfojcMSNpeJvav05UPSZtkBtK4tDpfQJ2QZGPqy89FAKsjP2E
NAI5mMlvs5/dP8elelRUxZTzhnp3Y2cf6UNrsXlBOowDG03NvleKOvPT5u2Sx06u
c/2oJrC7t2j/htSwnADtmBGbh0ni7nRxiAyc1tYWWsFeTzN5CCUskCKtJpkUUBlw
a8fDVTRyO6fzt9AHh/T5IJL5jUIKoyfdq0SgoJ6om+HlL4RtpgTVaQehI0xuIMzm
fc5j6Kf/89uTzYb/KXOZBpypyo0JtgF8dFPUSBwarVQmhkKJ+/bbgcZOwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE5GPXfX5NLasJeM2u2+jnHF3N3DMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvVGtZOWQ5ZmswdHF3bDR6YTdiNk9jY1hjM2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmugMA0G
CSqGSIb3DQEBCwUAA4IBAQBo+qa3VuJ+u6yyJdsWcMFCFh8WC0ax7d8nHsXQJE68
cdSB6rHcKkabgRBZubz9A0DSxLUo4qqZgjNUwEh2A8tieB9t1Qj9Y1pf8Po9lm7a
oyKU1Apk8G89pj0Paq4G58OWr1f0A0Y/Pe9hj5e0aMBjHvsXeQjCsXpnZlXbXcUQ
u8f46DHh1POFE+Ctv6/9JEm60Q1uhM6WTko39nha1YVuQm4SPKzOBJa9f7TlInzc
/ATn5/hzrcBdaUM/KqItzHJMKpSgwYop1sAImDJEwdq977uTcUjvCgZFEEq1jJVD
27iKRgO76WoSELfdYAC0ooIFMyzmqimh+ZC7nO3i/D9w
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:00 2025 by rpki-client