Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TRf8Wdp4bruvBK8gf6QBTiq_vRA.roa
File: TRf8Wdp4bruvBK8gf6QBTiq_vRA.roa (raw, json)
Hash identifier: YgSy9x4Wa4i2A7ogR+2sjTwzcV20yuT5uniSjKfloQ8=
Subject key identifier: 4D:17:FC:59:DA:78:6E:BB:AF:04:AF:20:7F:A4:01:4E:2A:BF:BD:10
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5329B657CA7B2EDAFEB1C73A2D2A4
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TRf8Wdp4bruvBK8gf6QBTiq_vRA.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56885
IP address blocks: 188.241.158.0/24 maxlen: 24
46.102.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:32:9b:65:7c:a7:b2:ed:af:eb:1c:73:a2:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d17fc59da786ebbaf04af207fa4014e2abfbd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:7e:aa:53:6d:65:14:9d:55:5e:f7:b1:e8:
dc:5a:f8:41:44:b7:e2:f4:16:c9:cd:ec:3c:ab:14:
e9:ed:61:ab:ff:e2:a8:e3:02:70:62:7c:71:d9:7d:
28:8a:8c:b7:7d:d7:6c:21:04:b1:1f:99:fe:f5:85:
c6:3b:b9:13:1b:45:e2:c3:5b:e4:ad:f1:e5:9d:7b:
bd:b8:8d:05:d9:94:ea:78:96:f7:91:00:9d:77:be:
1d:b3:65:22:ad:31:b4:67:71:37:14:c5:ea:d8:29:
71:8a:77:51:6d:95:86:d1:fd:91:e6:3f:82:71:99:
b7:8a:cc:cb:0a:03:f4:7b:f7:76:7e:29:c4:76:ec:
7f:30:64:02:35:6e:87:84:b9:85:a3:89:ff:6b:be:
f0:f9:49:43:bb:c5:10:40:33:c9:cc:3c:08:58:00:
17:c1:15:68:57:9a:b0:72:a7:58:fb:10:0a:93:93:
cf:59:3e:22:be:71:5e:ea:d2:06:2d:76:2d:d5:ea:
e1:06:7d:7d:ec:ce:9c:f0:d2:44:88:4e:48:1e:b6:
88:c7:98:fa:4b:4c:46:e1:87:94:89:fb:98:6e:e8:
51:61:56:c0:06:3e:f7:1b:c6:c3:20:7e:56:c9:31:
aa:7d:5e:34:5e:0a:6e:b0:48:a9:d9:4a:f1:fc:05:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:FC:59:DA:78:6E:BB:AF:04:AF:20:7F:A4:01:4E:2A:BF:BD:10
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TRf8Wdp4bruvBK8gf6QBTiq_vRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.109.0/24
188.241.158.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d3:ff:90:25:68:3f:12:c5:80:25:4d:c9:90:2c:1a:e9:7e:
63:d6:59:ad:e3:74:de:f8:3f:ef:f7:73:ed:bf:3f:2f:7d:01:
7c:ea:3d:10:4e:ea:6f:73:06:96:ba:c4:7b:d4:c4:cc:a9:95:
8b:5b:f4:76:c5:70:e3:1f:4b:2b:db:9c:90:df:f2:75:71:55:
4e:b9:28:a1:ae:ef:71:94:a6:47:47:e3:ca:17:2a:57:5a:19:
c4:58:cf:ea:d1:39:4c:b0:0d:57:4a:bb:46:9e:1e:46:83:c1:
e6:98:32:d7:3f:5e:78:53:b1:34:08:62:86:ee:00:ce:07:d9:
1d:c6:34:b5:b1:10:79:af:a4:47:8a:e2:06:a3:e4:62:56:5e:
f2:58:d8:df:ed:86:cd:40:ac:76:fa:ab:f6:05:fc:0d:1d:06:
0c:d2:a6:bf:db:d4:25:09:7a:ef:5a:5f:82:80:e5:6e:c8:57:
aa:83:de:95:3f:e3:8b:83:1a:ad:9f:e7:6e:98:43:ae:d5:fe:
79:15:30:c3:73:f9:da:df:c1:9e:a3:ad:bf:f9:9f:bf:0c:dd:
d7:50:08:7c:49:55:a7:b1:e7:1e:e1:33:b8:02:e2:5c:2f:a1:
d9:c3:3e:8a:bf:4b:21:2e:e0:4b:ff:06:d1:95:06:ba:15:d8:
df:be:9e:8b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1TKbZXynsu2v6xxzotKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDE3ZmM1OWRhNzg2ZWJiYWYwNGFmMjA3ZmE0MDE0ZTJhYmZiZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdd+qlNtZRSdVV73sejcWvhBRLfi
9BbJzew8qxTp7WGr/+Ko4wJwYnxx2X0oioy3fddsIQSxH5n+9YXGO7kTG0Xiw1vk
rfHlnXu9uI0F2ZTqeJb3kQCdd74ds2UirTG0Z3E3FMXq2ClxindRbZWG0f2R5j+C
cZm3iszLCgP0e/d2finEdux/MGQCNW6HhLmFo4n/a77w+UlDu8UQQDPJzDwIWAAX
wRVoV5qwcqdY+xAKk5PPWT4ivnFe6tIGLXYt1erhBn197M6c8NJEiE5IHraIx5j6
S0xG4YeUifuYbuhRYVbABj73G8bDIH5WyTGqfV40XgpusEip2Urx/AXr2QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE0X/FnaeG67rwSvIH+kAU4qv70QMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1RSZjhXZHA0YnJ1dkJLOGdmNlFCVGlxX3ZSQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuZm0D
BAC88Z4wDQYJKoZIhvcNAQELBQADggEBABXT/5AlaD8SxYAlTcmQLBrpfmPWWa3j
dN74P+/3c+2/Py99AXzqPRBO6m9zBpa6xHvUxMyplYtb9HbFcOMfSyvbnJDf8nVx
VU65KKGu73GUpkdH48oXKldaGcRYz+rROUywDVdKu0aeHkaDweaYMtc/XnhTsTQI
YobuAM4H2R3GNLWxEHmvpEeK4gaj5GJWXvJY2N/ths1ArHb6q/YF/A0dBgzSpr/b
1CUJeu9aX4KA5W7IV6qD3pU/44uDGq2f526YQ67V/nkVMMNz+drfwZ6jrb/5n78M
3ddQCHxJVaex5x7hM7gC4lwvodnDPoq/SyEu4Ev/BtGVBroV2N++nos=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:15 2025 by rpki-client