Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TYScj_RfaEqV_awY27gET3j4Z6Q.roa
File: TYScj_RfaEqV_awY27gET3j4Z6Q.roa (raw, json)
Hash identifier: ErzolPrK/sQMPV+Mkxwg/8FzjYql/j5KdDmSvZqQg9s=
Subject key identifier: 4D:84:9C:8F:F4:5F:68:4A:95:FD:AC:18:DB:B8:04:4F:78:F8:67:A4
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C53F42DDC887F51F71C507D97A3B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TYScj_RfaEqV_awY27gET3j4Z6Q.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49490
IP address blocks: 109.248.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c5:3f:42:dd:c8:87:f5:1f:71:c5:07:d9:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d849c8ff45f684a95fdac18dbb8044f78f867a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:1c:e8:65:62:b7:29:61:2a:42:9b:cc:fe:
8b:ad:3e:2e:a8:81:bb:26:d3:09:02:2f:22:64:1d:
78:75:c5:cc:ad:cd:01:a4:f4:66:d7:11:f7:00:0c:
11:2c:a1:55:e4:d0:f8:e0:d8:9a:2b:ec:ee:70:09:
af:0f:52:42:1e:a7:7b:fd:dd:5e:0d:d9:55:36:3a:
29:99:73:4f:8e:78:a5:d4:da:94:75:db:99:05:69:
f5:6b:6c:d5:12:ac:32:81:de:6a:b7:55:38:78:39:
1a:00:2d:e9:ab:92:20:ff:fd:ae:e5:54:45:de:09:
9b:ab:d8:53:de:73:73:27:ab:e8:54:32:ec:4d:40:
01:bf:f6:ec:9d:39:f0:12:07:6b:79:66:52:0b:d1:
a5:56:6c:8d:a2:d4:34:4e:dc:0e:1e:9f:c6:70:ee:
98:7f:6d:9f:2b:2e:71:ef:ed:ba:79:59:9e:dd:17:
4c:0a:db:09:66:c0:33:81:c8:15:b6:c8:ea:ef:8e:
2a:e6:dc:20:a9:49:06:fa:96:ab:a9:90:86:65:5f:
6c:40:97:b4:d6:f1:9d:20:91:b2:de:c7:bc:ad:90:
ea:46:26:a7:da:b0:30:5b:05:b4:f6:e0:99:dc:70:
a3:90:69:7b:f0:d1:2f:e6:df:19:3d:9f:7a:7c:8b:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:9C:8F:F4:5F:68:4A:95:FD:AC:18:DB:B8:04:4F:78:F8:67:A4
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TYScj_RfaEqV_awY27gET3j4Z6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.232.0/23
Signature Algorithm: sha256WithRSAEncryption
51:9d:0e:18:be:eb:aa:8e:56:5d:db:26:98:fc:0c:46:e0:30:
73:19:8d:48:f5:6c:68:59:e4:d5:2b:19:15:c3:8b:ea:4c:71:
1c:b8:60:1a:d1:ea:37:ea:69:c6:d3:19:b0:da:b4:c7:b6:87:
6b:d4:62:2e:db:66:ff:2b:9a:ba:62:34:0b:0f:8d:c5:c5:07:
d3:ce:b6:ce:3b:21:9d:20:4e:d3:60:63:89:89:aa:ff:59:95:
ad:a5:89:01:73:71:e4:7d:ed:01:8b:70:27:da:ac:a2:dd:a4:
28:8d:97:8c:85:86:39:8d:54:88:52:c0:93:0f:28:2d:bd:47:
6f:5a:1a:0c:77:a5:c0:59:24:87:1e:7f:ce:e9:d5:bb:1e:0e:
62:5e:fc:c8:2f:a5:88:65:d2:43:4e:61:49:57:0e:72:6f:fb:
a4:af:d5:65:ce:52:49:49:5b:cb:2d:59:c8:f3:c0:40:da:bb:
1c:30:c0:05:75:9a:89:a9:92:b8:f8:c7:5e:5e:02:d0:ef:67:
8e:6b:9b:ce:15:a2:5a:ca:ec:f0:65:68:bd:66:2c:77:70:4a:
48:17:67:bd:95:d1:ef:56:ea:ab:b7:e7:36:64:e1:e9:54:47:
6a:1b:e1:7f:fc:9a:9f:1e:dd:4f:ec:bc:f8:e0:e4:5f:e6:93:
1f:96:0d:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8U/Qt3Ih/UfccUH2Xo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDg0OWM4ZmY0NWY2ODRhOTVmZGFjMThkYmI4MDQ0Zjc4Zjg2N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUc6GVitylhKkKbzP6LrT4uqIG7
JtMJAi8iZB14dcXMrc0BpPRm1xH3AAwRLKFV5ND44NiaK+zucAmvD1JCHqd7/d1e
DdlVNjopmXNPjnil1NqUdduZBWn1a2zVEqwygd5qt1U4eDkaAC3pq5Ig//2u5VRF
3gmbq9hT3nNzJ6voVDLsTUABv/bsnTnwEgdreWZSC9GlVmyNotQ0TtwOHp/GcO6Y
f22fKy5x7+26eVme3RdMCtsJZsAzgcgVtsjq744q5twgqUkG+parqZCGZV9sQJe0
1vGdIJGy3se8rZDqRian2rAwWwW09uCZ3HCjkGl78NEv5t8ZPZ96fIvCJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2EnI/0X2hKlf2sGNu4BE94+GekMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVFlTY2pfUmZhRXFWX2F3WTI3Z0VUM2o0WjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbfjoMA0G
CSqGSIb3DQEBCwUAA4IBAQBRnQ4YvuuqjlZd2yaY/AxG4DBzGY1I9WxoWeTVKxkV
w4vqTHEcuGAa0eo36mnG0xmw2rTHtodr1GIu22b/K5q6YjQLD43FxQfTzrbOOyGd
IE7TYGOJiar/WZWtpYkBc3Hkfe0Bi3An2qyi3aQojZeMhYY5jVSIUsCTDygtvUdv
WhoMd6XAWSSHHn/O6dW7Hg5iXvzIL6WIZdJDTmFJVw5yb/ukr9VlzlJJSVvLLVnI
88BA2rscMMAFdZqJqZK4+MdeXgLQ72eOa5vOFaJayuzwZWi9Zix3cEpIF2e9ldHv
Vuqrt+c2ZOHpVEdqG+F//JqfHt1P7Lz44ORf5pMflg0v
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:33 2025 by rpki-client