Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa
File: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (raw, json)
Hash identifier: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=
Subject key identifier: D5:36:12:28:81:C1:65:DA:96:B1:0D:BC:B1:CC:19:1B:FF:98:A3:DC
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CBAC56F616C9462E3F7F941AB690
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa
Signing time: Thu 02 Jan 2025 17:52:33 +0000
ROA not before: Thu 02 Jan 2025 17:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212423
IP address blocks: 188.93.247.128/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cb:ac:56:f6:16:c9:46:2e:3f:7f:94:1a:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d536122881c165da96b10dbcb1cc191bff98a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:ce:72:b4:60:76:c3:ce:f9:be:56:e3:d7:
e9:ed:70:fd:ac:b9:77:6d:92:74:02:0b:f7:8f:0e:
0d:66:54:88:38:8f:15:26:f9:a8:28:6f:05:aa:1c:
60:3a:1c:ad:09:1f:b3:bf:b8:5e:5a:7c:a5:6a:7e:
a9:af:54:46:62:7d:ca:32:54:59:01:dc:4b:87:3b:
cb:fa:ff:87:bd:82:53:e2:34:54:fc:dc:b6:6b:95:
1c:29:f2:be:5f:0a:e2:d4:c1:0c:36:db:a1:1a:ca:
24:19:15:aa:e8:58:b4:fc:2c:89:41:19:c6:c1:41:
d4:46:4e:a9:fc:45:56:a9:99:65:e9:7c:fb:0f:9b:
cb:66:f2:39:f3:52:82:9c:f5:41:be:9b:54:e2:e7:
43:e9:0d:0a:91:c7:40:b6:56:69:a2:a7:bc:63:38:
3a:27:e3:49:bb:51:b2:7f:ac:a0:a7:93:d9:9e:12:
73:90:a8:f2:1b:be:6b:7d:5b:d9:f1:c9:7f:da:71:
81:32:34:0e:05:8e:ad:23:24:fc:1a:bd:d6:f2:73:
97:b3:10:20:7c:d9:96:5b:5b:4a:7f:9a:cb:7c:71:
32:d9:da:96:78:ca:20:38:7a:d6:66:e3:72:6d:58:
6f:02:63:47:6c:60:56:17:b1:9f:2d:c3:d3:7c:9a:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:12:28:81:C1:65:DA:96:B1:0D:BC:B1:CC:19:1B:FF:98:A3:DC
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.247.128/28
Signature Algorithm: sha256WithRSAEncryption
90:b5:3e:bc:e9:5b:14:b6:1e:d3:75:c5:ae:e6:a9:1d:69:26:
7d:98:f1:3b:76:24:91:9f:e4:9c:9f:fe:8d:a3:51:e3:63:c2:
c8:38:e3:e7:d9:63:da:a1:a9:f0:fb:ea:2a:a2:5b:ad:03:f3:
81:03:49:ec:6e:60:52:23:50:9d:50:1e:87:97:d9:e8:64:8a:
f7:1e:57:2f:03:9b:3d:52:a7:85:ed:13:7c:3e:cc:66:da:11:
d6:c9:d9:07:4c:55:20:f2:ca:09:08:5a:b7:d8:ec:46:1e:b2:
d0:aa:80:bd:02:32:38:15:7b:aa:8f:cc:d4:b2:3f:b1:bb:54:
33:aa:f9:89:cc:92:71:6e:d9:6c:86:5b:ce:3e:fc:30:65:b8:
a4:41:c6:98:30:48:b1:b9:18:29:89:6f:13:0e:22:a8:61:fd:
4e:70:5d:62:29:19:22:8f:b9:e0:90:8a:d6:2d:9f:04:eb:aa:
dc:93:c5:2a:26:f7:cc:5a:4a:67:7c:4f:1b:9f:1f:2f:39:6d:
69:4a:14:27:e6:9b:04:1a:67:98:d2:4e:53:40:70:fe:1a:b7:
3a:ed:20:67:f1:11:f6:f7:b7:df:e3:f5:ba:8c:27:3a:7a:fb:
95:24:69:93:89:5c:40:cb:3a:16:94:d6:45:90:f6:d9:e6:aa:
57:f7:b1:67
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoJcusVvYWyUYuP3+UGraQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjUwMTAyMTc1MjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTM2MTIyODgxYzE2NWRhOTZiMTBkYmNiMWNjMTkxYmZmOThhM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXOcrRgdsPO+b5W49fp7XD9rLl3
bZJ0Agv3jw4NZlSIOI8VJvmoKG8FqhxgOhytCR+zv7heWnylan6pr1RGYn3KMlRZ
AdxLhzvL+v+HvYJT4jRU/Ny2a5UcKfK+Xwri1MEMNtuhGsokGRWq6Fi0/CyJQRnG
wUHURk6p/EVWqZll6Xz7D5vLZvI581KCnPVBvptU4udD6Q0KkcdAtlZpoqe8Yzg6
J+NJu1Gyf6ygp5PZnhJzkKjyG75rfVvZ8cl/2nGBMjQOBY6tIyT8Gr3W8nOXsxAg
fNmWW1tKf5rLfHEy2dqWeMogOHrWZuNybVhvAmNHbGBWF7GfLcPTfJpWCwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNU2EiiBwWXalrENvLHMGRv/mKPcMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvMVRZU0tJSEJaZHFXc1EyOHNjd1pHXy1Zbzl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEvF33gDAN
BgkqhkiG9w0BAQsFAAOCAQEAkLU+vOlbFLYe03XFruapHWkmfZjxO3YkkZ/knJ/+
jaNR42PCyDjj59lj2qGp8PvqKqJbrQPzgQNJ7G5gUiNQnVAeh5fZ6GSK9x5XLwOb
PVKnhe0TfD7MZtoR1snZB0xVIPLKCQhat9jsRh6y0KqAvQIyOBV7qo/M1LI/sbtU
M6r5icyScW7ZbIZbzj78MGW4pEHGmDBIsbkYKYlvEw4iqGH9TnBdYikZIo+54JCK
1i2fBOuq3JPFKib3zFpKZ3xPG58fLzltaUoUJ+abBBpnmNJOU0Bw/hq3Ou0gZ/ER
9ve33+P1uownOnr7lSRpk4lcQMs6FpTWRZD22eaqV/exZw==
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:51 2025 by rpki-client