Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/qTmvIzkZReeSg9CGp3KQVdjeTgU.roa
File: qTmvIzkZReeSg9CGp3KQVdjeTgU.roa (raw, json)
Hash identifier: 6oBv4vd6Rhz/rqKFH1Q6IZ/0eNbFEGydSBQuDFIrUhQ=
Subject key identifier: A9:39:AF:23:39:19:45:E7:92:83:D0:86:A7:72:90:55:D8:DE:4E:05
Certificate issuer: /CN=44801eeb9b28e73ff58f0dd4a788f05ba67b67aa
Certificate serial: 01856FCB8A2CA1FA7403005B83FAA6C17B1F
Authority key identifier: 44:80:1E:EB:9B:28:E7:3F:F5:8F:0D:D4:A7:88:F0:5B:A6:7B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIAe65so5z_1jw3Up4jwW6Z7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/qTmvIzkZReeSg9CGp3KQVdjeTgU.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58054
IP address blocks: 176.113.160.0/22 maxlen: 22
176.113.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8a:2c:a1:fa:74:03:00:5b:83:fa:a6:c1:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44801eeb9b28e73ff58f0dd4a788f05ba67b67aa
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a939af23391945e79283d086a7729055d8de4e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:4f:95:bc:fe:a8:7e:fe:7c:94:8e:97:f3:
aa:aa:d0:d6:22:9d:9b:83:09:20:4f:f7:d8:e7:72:
52:a2:67:5f:db:1b:46:a8:e2:a4:a8:60:7d:c8:a8:
93:40:c6:c3:1c:c3:0b:44:8f:63:4d:13:b5:ae:50:
15:dc:d8:3a:30:58:9b:fb:06:37:06:d6:92:45:04:
c6:7d:dc:5a:48:9c:59:36:11:c7:32:c5:75:49:be:
51:4d:4e:e2:c8:c1:38:3d:3f:24:47:8e:ec:03:40:
15:f5:c1:f9:99:7b:ed:85:9b:c4:b7:19:51:80:0e:
07:cc:5d:2e:e0:03:dc:72:74:49:2c:99:d4:01:68:
79:d8:b0:93:86:6c:f7:56:bd:b4:14:6f:2c:b6:de:
49:f3:a9:fe:28:06:97:ee:4a:d0:50:49:39:cb:24:
45:00:11:de:4a:f3:8b:fe:ef:2b:ee:82:8a:1c:f5:
04:09:50:b6:3c:b9:64:b7:93:21:ff:86:0c:a9:2c:
b9:51:53:17:d4:3b:e4:a5:69:43:67:02:4f:92:02:
d3:d7:54:7e:6a:f7:60:a9:69:7d:73:9f:8e:53:69:
1f:76:9e:df:67:45:0b:7f:ff:84:08:65:5c:90:cb:
81:58:f7:f8:b2:78:5f:f8:e8:ff:8f:66:da:51:12:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:AF:23:39:19:45:E7:92:83:D0:86:A7:72:90:55:D8:DE:4E:05
X509v3 Authority Key Identifier:
keyid:44:80:1E:EB:9B:28:E7:3F:F5:8F:0D:D4:A7:88:F0:5B:A6:7B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIAe65so5z_1jw3Up4jwW6Z7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/qTmvIzkZReeSg9CGp3KQVdjeTgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/RIAe65so5z_1jw3Up4jwW6Z7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.160.0/22
176.113.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:7e:a9:3e:cb:fe:79:9a:e1:33:6f:c9:e0:3a:c7:c0:df:c9:
a5:c0:67:f9:2d:72:ad:c1:6c:7a:c2:3f:d2:91:b9:38:c5:9e:
b0:94:50:60:83:41:e1:f3:9c:b5:72:49:04:67:72:50:81:3d:
7c:a9:f7:7c:07:c8:07:78:3a:17:dd:03:57:e0:e6:33:93:16:
33:6c:32:40:c6:fe:28:98:71:f3:d1:8d:2d:a6:c9:7e:e2:dc:
60:cb:8d:68:69:c5:bb:92:12:3c:c0:7b:ea:09:da:0e:ff:df:
d0:e7:70:be:51:3b:d1:51:db:52:49:f0:85:72:28:28:c9:08:
d8:61:83:16:1e:a1:b8:7c:17:fb:35:a7:8e:3b:67:96:3f:23:
04:9b:a8:fd:41:c6:21:3b:01:cc:12:e7:af:3f:f4:bf:eb:70:
0d:8a:1e:9d:1c:ff:b7:5a:6c:a0:30:ee:03:df:96:02:2c:69:
15:35:03:04:a1:b7:33:da:15:76:ee:0a:6d:f9:08:99:05:fb:
4e:f9:7b:58:ea:ef:0c:3e:98:01:8c:7d:f1:5c:33:b0:e6:32:
89:ed:83:fe:90:dc:02:0e:d0:34:f9:28:7f:bf:a7:fc:ff:74:
32:dc:1e:32:31:5e:76:99:cc:ea:58:ec:10:70:f9:60:82:ea:
1b:6b:cf:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvy4osofp0AwBbg/qmwXsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODAxZWViOWIyOGU3M2ZmNThmMGRkNGE3ODhmMDViYTY3
YjY3YWEwHhcNMjMwMTAyMDAwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM5YWYyMzM5MTk0NWU3OTI4M2QwODZhNzcyOTA1NWQ4ZGU0ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qhPlbz+qH7+fJSOl/OqqtDWIp2b
gwkgT/fY53JSomdf2xtGqOKkqGB9yKiTQMbDHMMLRI9jTRO1rlAV3Ng6MFib+wY3
BtaSRQTGfdxaSJxZNhHHMsV1Sb5RTU7iyME4PT8kR47sA0AV9cH5mXvthZvEtxlR
gA4HzF0u4APccnRJLJnUAWh52LCThmz3Vr20FG8stt5J86n+KAaX7krQUEk5yyRF
ABHeSvOL/u8r7oKKHPUECVC2PLlkt5Mh/4YMqSy5UVMX1DvkpWlDZwJPkgLT11R+
avdgqWl9c5+OU2kfdp7fZ0ULf/+ECGVckMuBWPf4snhf+Oj/j2baURIZlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKk5ryM5GUXnkoPQhqdykFXY3k4FMB8GA1UdIwQY
MBaAFESAHuubKOc/9Y8N1KeI8Fume2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklBZTY1c281el8xanczVXA0andXNlo3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMTJmYjYtOTFkZi00YzAzLTlhNGMt
YjM4MzVkZTdmMWU5LzEvcVRtdkl6a1pSZWVTZzlDR3AzS1FWZGplVGdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wMTJmYjYtOTFkZi00YzAzLTlhNGMtYjM4MzVkZTdmMWU5
LzEvUklBZTY1c281el8xanczVXA0andXNlo3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHGgAwQD
sHGoMA0GCSqGSIb3DQEBCwUAA4IBAQBMfqk+y/55muEzb8ngOsfA38mlwGf5LXKt
wWx6wj/Skbk4xZ6wlFBgg0Hh85y1ckkEZ3JQgT18qfd8B8gHeDoX3QNX4OYzkxYz
bDJAxv4omHHz0Y0tpsl+4txgy41oacW7khI8wHvqCdoO/9/Q53C+UTvRUdtSSfCF
cigoyQjYYYMWHqG4fBf7NaeOO2eWPyMEm6j9QcYhOwHMEuevP/S/63ANih6dHP+3
WmygMO4D35YCLGkVNQMEobcz2hV27gpt+QiZBftO+XtY6u8MPpgBjH3xXDOw5jKJ
7YP+kNwCDtA0+Sh/v6f8/3Qy3B4yMV52mczqWOwQcPlgguoba8/c
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:27 2025 by rpki-client