Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/70d080-dc17-458c-8516-518d38df4050/1/TKoWbx44NmPTwd6jbByY5l8Qjs8.roa
File: TKoWbx44NmPTwd6jbByY5l8Qjs8.roa (raw, json)
Hash identifier: V3OmHCZxjMp8WOWUtVx7jLfmhGhNetXyvxyPfOjQcGk=
Subject key identifier: 4C:AA:16:6F:1E:38:36:63:D3:C1:DE:A3:6C:1C:98:E6:5F:10:8E:CF
Certificate issuer: /CN=e64eb6e9cc6f8897af504a663bcc979c164b7419
Certificate serial: 0422F1B1
Authority key identifier: E6:4E:B6:E9:CC:6F:88:97:AF:50:4A:66:3B:CC:97:9C:16:4B:74:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k626cxviJevUEpmO8yXnBZLdBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/70d080-dc17-458c-8516-518d38df4050/1/TKoWbx44NmPTwd6jbByY5l8Qjs8.roa
Signing time: Sat 01 Jan 2022 13:03:09 +0000
ROA not before: Sat 01 Jan 2022 13:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200424
IP address blocks: 185.107.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69398961 (0x422f1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64eb6e9cc6f8897af504a663bcc979c164b7419
Validity
Not Before: Jan 1 13:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4caa166f1e383663d3c1dea36c1c98e65f108ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:ae:2f:8b:0c:53:14:87:4a:15:19:ff:c2:
df:e9:e2:60:e9:37:bc:08:81:2e:49:07:b4:62:f6:
21:99:04:e3:18:a4:e1:28:59:9c:54:73:04:00:ba:
9e:eb:af:e8:56:2a:ba:6c:43:d2:13:a1:18:c0:8a:
22:5d:9e:1b:8a:75:12:54:26:d3:65:8c:d5:6e:51:
ed:3f:26:5b:a1:29:0b:30:d6:c4:f5:95:fb:2c:5e:
59:af:39:3c:6d:62:cd:5b:de:81:87:06:dd:c5:57:
df:f0:d0:26:81:a4:36:96:e2:f4:08:db:c9:05:d0:
cd:98:f8:45:a5:f4:15:aa:83:f2:15:b5:65:aa:55:
34:71:3c:0d:87:e0:c2:11:3e:04:c0:db:2f:96:19:
9f:5d:0c:cf:1c:11:2c:36:b7:0f:f3:35:cd:05:a9:
34:3d:57:07:de:8e:58:e6:70:d3:80:35:d1:94:8b:
ef:de:88:3b:8b:97:b2:5c:97:c5:a3:8b:5f:17:02:
ef:39:cf:6d:27:7c:df:66:b5:d7:24:c1:71:25:b2:
3f:c5:a5:fd:52:55:c8:9f:14:1f:ff:9e:af:7f:ee:
9b:a2:38:4f:3b:2a:ac:3b:bb:66:2a:23:ea:a1:d9:
26:9f:51:27:91:08:32:c8:4d:8e:01:5c:f3:4b:48:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:16:6F:1E:38:36:63:D3:C1:DE:A3:6C:1C:98:E6:5F:10:8E:CF
X509v3 Authority Key Identifier:
keyid:E6:4E:B6:E9:CC:6F:88:97:AF:50:4A:66:3B:CC:97:9C:16:4B:74:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k626cxviJevUEpmO8yXnBZLdBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/70d080-dc17-458c-8516-518d38df4050/1/TKoWbx44NmPTwd6jbByY5l8Qjs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/70d080-dc17-458c-8516-518d38df4050/1/5k626cxviJevUEpmO8yXnBZLdBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.144.0/22
Signature Algorithm: sha256WithRSAEncryption
33:8c:1d:70:85:52:e2:16:3b:89:a1:22:1a:88:9a:04:ca:28:
3d:2b:93:c8:48:07:6e:70:5b:11:45:fe:89:be:28:b6:9e:c3:
22:ad:8d:8a:88:f1:56:99:1d:a8:91:25:f7:ba:3b:5f:83:ea:
00:82:96:de:f7:a7:49:09:7e:b4:93:e6:df:d2:5b:27:57:cc:
90:fd:1a:23:e3:4d:09:33:a0:d5:10:ab:32:70:27:39:d4:70:
cd:ce:36:23:e9:ba:80:ce:c8:d2:36:ce:59:97:89:af:66:ad:
19:1c:2d:0d:11:a9:92:bf:d1:96:07:9f:2b:c8:9e:f7:a4:cf:
24:8c:6f:04:e0:48:fb:07:0a:19:b4:19:ed:4d:ef:e8:14:cc:
03:24:94:f4:54:38:f7:f3:ea:25:03:bd:14:84:9a:aa:ab:8f:
56:4e:c0:78:f8:dd:bb:e1:d7:ff:ea:e2:1d:42:a0:86:b7:87:
a6:f6:8c:18:32:51:d6:87:0d:76:3b:2f:82:0c:35:00:f4:ed:
5c:ea:a1:7f:8d:99:40:cf:de:db:5e:f7:e4:d4:90:cc:5d:b7:
49:c6:c9:a1:5b:e1:8f:b4:71:1e:24:db:7f:e5:85:0f:5c:3a:
e9:79:dc:dd:3e:4e:73:ac:b8:36:01:75:58:1f:66:df:f3:b1:
a6:26:b4:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCLxsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NjRlYjZlOWNjNmY4ODk3YWY1MDRhNjYzYmNjOTc5YzE2NGI3NDE5MB4XDTIyMDEw
MTEzMDMwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGNhYTE2NmYxZTM4
MzY2M2QzYzFkZWEzNmMxYzk4ZTY1ZjEwOGVjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTiri+LDFMUh0oVGf/C3+niYOk3vAiBLkkHtGL2IZkE4xik
4ShZnFRzBAC6nuuv6FYqumxD0hOhGMCKIl2eG4p1ElQm02WM1W5R7T8mW6EpCzDW
xPWV+yxeWa85PG1izVvegYcG3cVX3/DQJoGkNpbi9AjbyQXQzZj4RaX0FaqD8hW1
ZapVNHE8DYfgwhE+BMDbL5YZn10MzxwRLDa3D/M1zQWpND1XB96OWOZw04A10ZSL
796IO4uXslyXxaOLXxcC7znPbSd832a11yTBcSWyP8Wl/VJVyJ8UH/+er3/um6I4
TzsqrDu7Zioj6qHZJp9RJ5EIMshNjgFc80tIfI8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMqhZvHjg2Y9PB3qNsHJjmXxCOzzAfBgNVHSMEGDAWgBTmTrbpzG+Il69Q
SmY7zJecFkt0GTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVrNjI2Y3h2aUpldlVFcG1POHlYbkJaTGRCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNzBkMDgwLWRjMTctNDU4Yy04NTE2LTUxOGQzOGRmNDA1MC8x
L1RLb1dieDQ0Tm1QVHdkNmpiQnlZNWw4UWpzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NzBkMDgwLWRjMTctNDU4Yy04NTE2LTUxOGQzOGRmNDA1MC8xLzVrNjI2Y3h2aUpl
dlVFcG1POHlYbkJaTGRCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlrkDANBgkqhkiG9w0BAQsFAAOC
AQEAM4wdcIVS4hY7iaEiGoiaBMooPSuTyEgHbnBbEUX+ib4otp7DIq2NiojxVpkd
qJEl97o7X4PqAIKW3venSQl+tJPm39JbJ1fMkP0aI+NNCTOg1RCrMnAnOdRwzc42
I+m6gM7I0jbOWZeJr2atGRwtDRGpkr/RlgefK8ie96TPJIxvBOBI+wcKGbQZ7U3v
6BTMAySU9FQ49/PqJQO9FISaqquPVk7AePjdu+HX/+riHUKghreHpvaMGDJR1ocN
djsvggw1APTtXOqhf42ZQM/e21735NSQzF23ScbJoVvhj7RxHiTbf+WFD1w66Xnc
3T5Oc6y4NgF1WB9m3/Oxpia0Gw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 06:09:48 2025 by rpki-client