Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/Tli-MNBliT4GZ0SuL6-kYDFipSs.roa
File: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (raw, json)
Hash identifier: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=
Subject key identifier: 4E:58:BE:30:D0:65:89:3E:06:67:44:AE:2F:AF:A4:60:31:62:A5:2B
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019427481EFCAC9C442D9DA50928B631430B
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/Tli-MNBliT4GZ0SuL6-kYDFipSs.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198977
IP address blocks: 185.69.70.0/23 maxlen: 23
2a05:2100::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:fc:ac:9c:44:2d:9d:a5:09:28:b6:31:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e58be30d065893e066744ae2fafa4603162a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:6a:52:c5:4b:9f:a2:d3:c0:d5:68:f5:2e:
63:db:df:71:26:6b:dc:bc:b5:cf:0f:27:98:dc:9e:
f2:34:24:0e:67:f1:cc:64:88:fe:2e:ce:2e:99:46:
bd:dc:cd:19:c6:f1:9f:cf:ce:37:fa:60:90:ef:ba:
f9:74:50:0c:cc:0a:17:ed:ba:fe:02:e8:8c:96:2e:
87:5f:83:e4:b4:b6:eb:06:79:d9:b2:1b:2b:a4:6c:
07:f4:15:4d:16:7d:15:29:c4:a4:20:10:13:91:b1:
4c:3f:d1:c8:0a:7b:aa:bd:8a:25:36:49:3e:91:5f:
9f:0a:23:21:74:70:07:3f:eb:d9:cd:18:98:d4:98:
44:90:7d:a9:72:ad:4b:f5:bc:75:0a:84:88:3c:f2:
32:4b:e3:75:f6:1e:59:c8:6d:e3:83:f8:d5:e4:8b:
b8:38:a4:b2:2b:35:f8:83:73:ec:49:00:40:a9:60:
a2:79:b0:4a:d5:6a:f0:a4:67:62:c6:14:68:f9:ab:
bb:d4:66:d6:ef:db:57:17:e4:56:f8:68:ab:2e:14:
a8:a9:29:2f:4d:d0:a9:6a:8f:72:ad:f6:5f:f3:75:
55:a9:86:aa:a6:4f:cf:95:22:98:25:df:bd:95:02:
15:c0:ea:47:48:a2:db:cf:64:53:9a:01:c9:19:e9:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:BE:30:D0:65:89:3E:06:67:44:AE:2F:AF:A4:60:31:62:A5:2B
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/Tli-MNBliT4GZ0SuL6-kYDFipSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.70.0/23
IPv6:
2a05:2100::/30
Signature Algorithm: sha256WithRSAEncryption
54:23:70:37:eb:03:d6:4b:61:83:26:2f:c1:38:09:a1:f7:67:
d0:c9:e8:07:31:7d:93:ba:e3:7d:dd:c0:bc:fc:ae:62:33:ae:
38:4e:cc:f3:a9:b5:30:e4:f4:b4:a1:4e:3d:25:8b:a0:b7:70:
b1:6d:9a:c0:9a:9c:67:81:18:31:5d:e7:a2:ff:de:29:bc:23:
88:3f:bb:0e:35:7e:ee:5e:bc:c6:84:f7:9e:27:d5:3c:ce:72:
27:c1:aa:ab:e8:a8:d5:3b:2c:4a:c4:1b:ce:42:61:56:03:9f:
3f:2d:01:ea:d3:de:42:92:30:20:ed:13:4b:f9:c3:ed:7d:14:
6f:5d:9a:af:72:b1:71:2e:f2:ce:70:c1:bc:ad:fb:49:ee:80:
df:7b:2f:92:ce:50:50:1d:4b:75:ad:c4:f5:0c:58:36:aa:03:
1f:3a:dc:9b:7f:94:ef:4c:bf:df:0c:c1:8b:b3:ac:42:43:d4:
49:df:12:2b:95:11:4d:c1:30:8c:20:93:95:a6:c7:3a:b1:4a:
2b:f0:80:78:d2:36:5c:15:ac:77:30:67:19:07:75:16:24:84:
78:bb:36:bb:ca:07:b1:b0:9a:6a:54:01:65:1c:5d:dd:78:23:
7f:1e:1c:d9:a4:d9:0e:ed:33:df:83:7f:75:b8:51:6a:bf:23:
b5:38:8c:b1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnSB78rJxELZ2lCSi2MUMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmFmOTBlZDEzZDE3NTQ1MmNmNWU1YTE2MzJhNzk0YmYx
ZjRjOWEwHhcNMjUwMTAyMTM1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTU4YmUzMGQwNjU4OTNlMDY2NzQ0YWUyZmFmYTQ2MDMxNjJhNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CJqUsVLn6LTwNVo9S5j299xJmvc
vLXPDyeY3J7yNCQOZ/HMZIj+Ls4umUa93M0ZxvGfz843+mCQ77r5dFAMzAoX7br+
AuiMli6HX4PktLbrBnnZshsrpGwH9BVNFn0VKcSkIBATkbFMP9HICnuqvYolNkk+
kV+fCiMhdHAHP+vZzRiY1JhEkH2pcq1L9bx1CoSIPPIyS+N19h5ZyG3jg/jV5Iu4
OKSyKzX4g3PsSQBAqWCiebBK1WrwpGdixhRo+au71GbW79tXF+RW+GirLhSoqSkv
TdCpao9yrfZf83VVqYaqpk/PlSKYJd+9lQIVwOpHSKLbz2RTmgHJGem8JQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE5YvjDQZYk+BmdEri+vpGAxYqUrMB8GA1UdIwQY
MBaAFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYt
ZDUyZmRjOWU4Mjg3LzEvVGxpLU1OQmxpVDRHWjBTdUw2LWtZREZpcFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYtZDUyZmRjOWU4Mjg3
LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuUVGMA0E
AgACMAcDBQIqBSEAMA0GCSqGSIb3DQEBCwUAA4IBAQBUI3A36wPWS2GDJi/BOAmh
92fQyegHMX2TuuN93cC8/K5iM644TszzqbUw5PS0oU49JYugt3CxbZrAmpxngRgx
Xeei/94pvCOIP7sONX7uXrzGhPeeJ9U8znInwaqr6KjVOyxKxBvOQmFWA58/LQHq
095CkjAg7RNL+cPtfRRvXZqvcrFxLvLOcMG8rftJ7oDfey+SzlBQHUt1rcT1DFg2
qgMfOtybf5TvTL/fDMGLs6xCQ9RJ3xIrlRFNwTCMIJOVpsc6sUor8IB40jZcFax3
MGcZB3UWJIR4uza7ygexsJpqVAFlHF3deCN/HhzZpNkO7TPfg391uFFqvyO1OIyx
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:22 2025 by rpki-client