Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tPEBrTV-UWVqTMVGWgoGrm0E-Hw.roa
File: tPEBrTV-UWVqTMVGWgoGrm0E-Hw.roa (raw, json)
Hash identifier: XyfXWBFdnXJTAKYolW7aR3YITxkvYgnhXD8JBz1JZKU=
Subject key identifier: B4:F1:01:AD:35:7E:51:65:6A:4C:C5:46:5A:0A:06:AE:6D:04:F8:7C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE736A07E98BE834B9C0EC01A3ABC0B63
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tPEBrTV-UWVqTMVGWgoGrm0E-Hw.roa
Signing time: Wed 05 Jun 2024 07:04:27 +0000
ROA not before: Wed 05 Jun 2024 07:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:e736:6804/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:36:a0:7e:98:be:83:4b:9c:0e:c0:1a:3a:bc:0b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 07:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f101ad357e51656a4cc5465a0a06ae6d04f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:49:60:8d:4e:1e:5b:46:5e:70:5a:73:6b:
4a:ff:2a:ad:c0:35:45:a1:7b:14:1c:5a:50:c4:78:
cf:6d:d9:b7:12:7b:a0:c1:58:aa:14:73:c0:b8:d2:
c6:82:24:c0:22:22:79:78:fb:4c:03:ed:c2:8f:50:
70:aa:b5:07:7a:6d:3c:39:7c:46:bc:55:f7:2b:c2:
d5:15:64:e1:77:06:46:d6:9b:76:3c:bf:47:ab:4d:
95:d3:bf:b2:ea:38:01:36:fa:b5:6e:b2:9c:8a:af:
a5:76:b5:cf:a3:c1:42:43:20:11:16:bc:5c:d0:9c:
69:9f:7d:a7:35:7c:bf:4b:30:54:0b:9a:08:9f:9d:
bb:6f:59:4a:e3:bf:b8:cc:b3:77:6c:35:8f:a0:01:
0c:d2:f9:9a:fe:b8:37:0e:9d:55:8b:21:9a:71:c0:
f6:24:68:79:1b:2d:59:cd:dc:4e:91:45:ba:5b:0f:
b9:89:f8:90:22:5d:4a:51:07:45:d9:bb:57:d1:c5:
8d:f2:87:e2:ce:b3:30:9a:aa:10:e5:df:d0:21:c9:
9f:b3:94:c2:51:3b:38:27:85:95:97:72:41:a4:50:
f6:8d:aa:ce:41:98:47:c1:86:85:7e:53:fd:52:86:
15:38:45:e5:b9:cc:f5:14:7d:85:d9:fa:6c:8a:c8:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:01:AD:35:7E:51:65:6A:4C:C5:46:5A:0A:06:AE:6D:04:F8:7C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tPEBrTV-UWVqTMVGWgoGrm0E-Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:97:26:72:24:5f:ec:d8:b5:80:93:3a:8d:a9:ba:3c:ac:6c:
11:ba:55:5b:90:5e:c5:70:6b:55:5f:f2:20:16:c0:fb:32:39:
96:3a:f5:3f:89:48:b8:4f:f7:08:c9:0b:54:d0:c4:80:51:f0:
30:cb:03:b3:6b:aa:c2:7f:57:3d:a9:c9:94:86:ab:c8:39:a3:
d3:34:56:5d:3f:ab:8b:01:12:03:7b:f5:fb:d2:95:a4:02:5a:
b3:dc:f5:88:27:d2:15:30:ae:f5:1c:1f:ef:74:e0:ea:04:46:
7e:57:f4:e1:21:a9:0b:50:54:72:80:33:b7:78:fc:e8:a3:de:
69:96:00:a0:e3:e0:56:96:3d:13:4a:a9:e8:14:47:83:74:bf:
80:a9:27:9a:5c:8a:4f:86:6b:d0:c6:a6:99:a4:c3:8c:49:73:
ad:5c:94:e4:23:2c:67:89:10:5b:d4:da:af:e8:ab:51:f0:32:
ee:aa:ed:b7:08:4e:aa:cb:80:ab:cf:35:fa:bb:6e:30:e4:15:
a5:f1:2e:e8:ba:82:76:95:5d:ce:07:37:c1:fc:a5:9c:5e:82:
42:ad:df:38:1f:6c:42:39:38:c8:03:bf:9e:f7:8c:9a:42:8f:
1d:23:de:af:58:49:46:8d:8c:82:6f:76:c7:7b:0b:eb:55:26:
48:d6:9c:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/nNqB+mL6DS5wOwBo6vAtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA1MDcwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGYxMDFhZDM1N2U1MTY1NmE0Y2M1NDY1YTBhMDZhZTZkMDRmODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrNJYI1OHltGXnBac2tK/yqtwDVF
oXsUHFpQxHjPbdm3EnugwViqFHPAuNLGgiTAIiJ5ePtMA+3Cj1BwqrUHem08OXxG
vFX3K8LVFWThdwZG1pt2PL9Hq02V07+y6jgBNvq1brKciq+ldrXPo8FCQyARFrxc
0Jxpn32nNXy/SzBUC5oIn527b1lK47+4zLN3bDWPoAEM0vma/rg3Dp1ViyGaccD2
JGh5Gy1ZzdxOkUW6Ww+5ifiQIl1KUQdF2btX0cWN8ofizrMwmqoQ5d/QIcmfs5TC
UTs4J4WVl3JBpFD2jarOQZhHwYaFflP9UoYVOEXlucz1FH2F2fpsisi62QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLTxAa01flFlakzFRloKBq5tBPh8MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvdFBFQnJUVi1VV1ZxVE1WR1dnb0dybTBFLUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIGXJnIkX+zYtYCTOo2p
ujysbBG6VVuQXsVwa1Vf8iAWwPsyOZY69T+JSLhP9wjJC1TQxIBR8DDLA7NrqsJ/
Vz2pyZSGq8g5o9M0Vl0/q4sBEgN79fvSlaQCWrPc9Ygn0hUwrvUcH+904OoERn5X
9OEhqQtQVHKAM7d4/Oij3mmWAKDj4FaWPRNKqegUR4N0v4CpJ5pcik+Ga9DGppmk
w4xJc61clOQjLGeJEFvU2q/oq1HwMu6q7bcITqrLgKvPNfq7bjDkFaXxLui6gnaV
Xc4HN8H8pZxegkKt3zgfbEI5OMgDv573jJpCjx0j3q9YSUaNjIJvdsd7C+tVJkjW
nDA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:49:58 2025 by rpki-client