Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bnioYL5lDs-S9drpTknt8M0_tss.roa
File: bnioYL5lDs-S9drpTknt8M0_tss.roa (raw, json)
Hash identifier: tHkJZopt9RfBi8rXMwq/g3TUieTAxMOPYAemjuIsoNo=
Subject key identifier: 6E:78:A8:60:BE:65:0E:CF:92:F5:DA:E9:4E:49:ED:F0:CD:3F:B6:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7ADDC3FFA8BCB0F888B353DDB7B44
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bnioYL5lDs-S9drpTknt8M0_tss.roa
Signing time: Wed 01 Jan 2025 21:48:44 +0000
ROA not before: Wed 01 Jan 2025 21:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ad:dc:3f:fa:8b:cb:0f:88:8b:35:3d:db:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e78a860be650ecf92f5dae94e49edf0cd3fb6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:d4:d6:6e:65:c3:07:4b:2e:31:33:7b:87:
51:c5:df:8c:17:8a:51:50:b8:ed:5a:ca:a6:79:78:
5d:7e:31:6a:39:89:12:0c:43:28:ee:5e:6b:4d:d5:
d6:d2:49:f5:e7:20:d7:7b:01:69:eb:2d:5d:99:a5:
09:3d:68:a5:00:b7:a4:d8:57:7f:8a:29:da:e8:eb:
2e:1f:8b:b8:ce:5c:cc:28:b9:b9:34:36:8c:a3:2f:
84:45:e0:59:c2:04:f6:3c:bc:60:22:42:00:e1:24:
c2:8e:0e:ba:8f:94:77:b4:29:ad:08:e9:13:e4:12:
f0:e6:fb:c9:ce:e8:b5:56:be:d5:49:bd:e0:80:51:
2e:e2:af:31:a3:66:99:18:cb:2f:47:4d:b6:1e:94:
09:03:b5:95:3b:c7:94:30:87:5a:39:ff:0f:e1:3b:
42:36:ae:a3:f6:b2:b2:a6:6f:66:1c:f8:4b:e4:84:
c7:51:59:55:5c:ba:78:08:29:e9:c1:39:6c:c0:f5:
05:7d:70:c4:22:87:90:93:8f:3f:f1:71:16:66:3d:
ce:6a:cf:0c:35:72:fe:58:ed:17:e4:21:7c:d0:86:
03:8b:cc:a2:64:e0:f1:22:00:46:ed:8a:af:61:09:
a7:bb:84:b0:e6:67:37:1c:45:6e:7b:53:42:2a:65:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:A8:60:BE:65:0E:CF:92:F5:DA:E9:4E:49:ED:F0:CD:3F:B6:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bnioYL5lDs-S9drpTknt8M0_tss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0-37.202.210.255
Signature Algorithm: sha256WithRSAEncryption
19:6e:ac:19:e4:ab:15:5b:11:2f:2a:81:e0:85:d7:38:86:ee:
50:13:ba:9f:e4:06:27:c2:07:47:47:1b:eb:d3:14:11:31:c5:
2c:db:bf:dd:af:20:9d:5c:15:ec:07:bc:03:93:94:c1:6e:b1:
15:36:e0:54:2a:1b:c9:80:c3:92:aa:04:84:6a:ad:49:2d:33:
85:b5:43:3d:bb:3d:b2:58:cc:63:23:ee:a8:4f:f6:20:d3:8c:
98:b1:af:e6:d9:c0:59:21:ee:f8:9c:ef:9f:a9:f4:90:e8:30:
ac:72:87:ad:ce:bc:c6:6a:1c:1b:d8:4b:2d:80:58:61:e2:3f:
ed:0b:6c:a8:a3:ec:30:84:9a:d7:6c:33:91:34:79:7a:f4:fe:
d3:10:58:4a:8f:ee:7b:bf:95:46:15:0d:9f:a7:08:df:70:ee:
f0:72:f6:95:24:dd:a1:d5:76:15:07:5a:82:77:0e:1c:a0:fc:
b6:99:69:19:f7:33:5a:e6:9f:78:63:b1:4d:46:da:98:18:18:
86:66:1e:8f:ae:94:f5:34:c5:88:89:86:c7:89:0e:36:11:37:
9b:2b:11:29:42:42:7f:90:86:32:1c:25:a5:93:2f:26:cd:d1:
97:13:92:f6:0b:15:7c:95:6f:c5:30:e6:7e:ba:c1:f5:20:62:
2b:33:98:1a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj163cP/qLyw+IizU923tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTAxMjE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc4YTg2MGJlNjUwZWNmOTJmNWRhZTk0ZTQ5ZWRmMGNkM2ZiNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuozU1m5lwwdLLjEze4dRxd+MF4pR
ULjtWsqmeXhdfjFqOYkSDEMo7l5rTdXW0kn15yDXewFp6y1dmaUJPWilALek2Fd/
iina6OsuH4u4zlzMKLm5NDaMoy+EReBZwgT2PLxgIkIA4STCjg66j5R3tCmtCOkT
5BLw5vvJzui1Vr7VSb3ggFEu4q8xo2aZGMsvR022HpQJA7WVO8eUMIdaOf8P4TtC
Nq6j9rKypm9mHPhL5ITHUVlVXLp4CCnpwTlswPUFfXDEIoeQk48/8XEWZj3Oas8M
NXL+WO0X5CF80IYDi8yiZODxIgBG7YqvYQmnu4Sw5mc3HEVue1NCKmVo5QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG54qGC+ZQ7PkvXa6U5J7fDNP7bLMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYm5pb1lMNWxEcy1TOWRycFRrbnQ4TTBfdHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlytED
BAAlytIwDQYJKoZIhvcNAQELBQADggEBABlurBnkqxVbES8qgeCF1ziG7lATup/k
BifCB0dHG+vTFBExxSzbv92vIJ1cFewHvAOTlMFusRU24FQqG8mAw5KqBIRqrUkt
M4W1Qz27PbJYzGMj7qhP9iDTjJixr+bZwFkh7vic75+p9JDoMKxyh63OvMZqHBvY
Sy2AWGHiP+0LbKij7DCEmtdsM5E0eXr0/tMQWEqP7nu/lUYVDZ+nCN9w7vBy9pUk
3aHVdhUHWoJ3Dhyg/LaZaRn3M1rmn3hjsU1G2pgYGIZmHo+ulPU0xYiJhseJDjYR
N5srESlCQn+QhjIcJaWTLybN0ZcTkvYLFXyVb8Uw5n66wfUgYiszmBo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:40:04 2025 by rpki-client