Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/TeK75aLhTFRdnDBSchLf1dz64Js.roa
File: TeK75aLhTFRdnDBSchLf1dz64Js.roa (raw, json)
Hash identifier: k2NRyqj+Y0eEqSGuSHXWAmBSlJ0pdzO5q18O0v2EFkc=
Subject key identifier: 4D:E2:BB:E5:A2:E1:4C:54:5D:9C:30:52:72:12:DF:D5:DC:FA:E0:9B
Certificate issuer: /CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Certificate serial: 019424B3A897C1575A0DF59224697F032070
Authority key identifier: ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/TeK75aLhTFRdnDBSchLf1dz64Js.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198984
IP address blocks: 91.237.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:97:c1:57:5a:0d:f5:92:24:69:7f:03:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de2bbe5a2e14c545d9c30527212dfd5dcfae09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:e3:0c:d1:d0:a6:98:e2:33:bc:7f:94:90:
ac:69:d4:4c:56:d9:df:74:af:82:6a:69:24:12:db:
07:77:12:60:86:26:53:5d:6c:6f:d3:4e:fc:9c:1a:
7c:0d:2c:61:4a:8b:9c:e2:a3:5b:01:a1:30:04:ae:
57:ca:c4:31:ec:11:30:cc:5b:6e:4c:f4:36:00:e5:
f0:48:50:17:a3:ef:a1:e6:c8:a4:34:e0:61:45:93:
84:0d:b6:5b:08:1a:65:30:e1:d2:26:bd:c5:a8:42:
96:b7:d0:88:08:46:b1:04:a1:ed:b6:d9:80:77:34:
42:ef:ef:bc:02:74:84:58:ec:21:fd:e3:af:93:5a:
e6:5f:bb:b4:8a:43:ea:5a:81:d6:60:06:59:7d:55:
89:06:00:71:b5:f1:a1:81:1d:43:06:ae:b3:d2:9d:
b9:27:9d:70:5c:e3:ff:1d:a8:b5:67:ef:c4:6c:23:
35:61:7c:d9:af:23:a5:31:a3:f3:4e:ee:a2:15:51:
ff:6d:af:92:58:95:3a:c7:48:c0:41:8e:f7:b7:2e:
be:e7:d7:aa:54:7f:c7:c8:1a:2d:d3:82:f1:42:1d:
a2:c7:b1:75:e1:b5:a7:a6:dc:f6:3d:46:a3:59:f6:
78:c1:8a:1f:c3:74:08:f6:dd:e8:02:79:9f:6d:30:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:BB:E5:A2:E1:4C:54:5D:9C:30:52:72:12:DF:D5:DC:FA:E0:9B
X509v3 Authority Key Identifier:
keyid:ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/TeK75aLhTFRdnDBSchLf1dz64Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.136.0/23
Signature Algorithm: sha256WithRSAEncryption
02:b5:e5:82:62:b1:cd:e4:00:da:9d:32:df:4e:f7:5d:5b:92:
4c:57:7a:8c:73:8e:d4:43:ce:6f:de:5c:35:85:a7:9d:54:3b:
8f:4b:25:5f:43:e0:00:b8:9e:b5:e0:39:51:1a:ac:16:e6:a1:
79:56:64:5e:ba:78:33:92:0d:74:ce:55:f7:25:51:89:13:50:
1b:d3:36:74:3a:40:89:15:bc:bc:e4:eb:68:4c:94:c2:90:6c:
b6:88:df:e9:e3:82:a8:81:fb:8e:ad:6d:17:72:76:59:0a:87:
fb:8f:0b:c7:40:50:11:48:2d:03:b0:10:63:fb:91:24:55:0f:
33:9b:18:af:67:54:ea:f2:70:ca:dd:e7:20:bc:43:1d:57:80:
49:00:81:d1:21:91:41:3b:c5:fd:d3:58:ea:4b:0c:0b:8e:45:
ae:d9:e8:81:77:cf:96:d4:2b:e9:9e:5f:a5:26:61:9e:b0:2d:
5c:21:12:17:44:25:6a:5a:5f:00:51:e7:1e:40:3e:c4:a9:e7:
13:55:d9:c4:23:ae:65:42:93:5b:5d:ce:82:ee:21:76:e3:11:
88:cb:76:e6:8e:e2:cb:aa:94:68:cf:94:7c:a5:92:4f:ff:a3:
13:3a:25:d8:01:3e:71:b9:dd:37:d4:df:bf:ab:58:32:1d:c8:
e1:b1:b2:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks6iXwVdaDfWSJGl/AyBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWQzNzUzMDE1ZmM3ZTE2ODJhNGIxZjc3ZmYyNGQ0YzBl
ODZiNTEwHhcNMjUwMTAyMDE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGUyYmJlNWEyZTE0YzU0NWQ5YzMwNTI3MjEyZGZkNWRjZmFlMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru7jDNHQppjiM7x/lJCsadRMVtnf
dK+CamkkEtsHdxJghiZTXWxv0078nBp8DSxhSouc4qNbAaEwBK5XysQx7BEwzFtu
TPQ2AOXwSFAXo++h5sikNOBhRZOEDbZbCBplMOHSJr3FqEKWt9CICEaxBKHtttmA
dzRC7++8AnSEWOwh/eOvk1rmX7u0ikPqWoHWYAZZfVWJBgBxtfGhgR1DBq6z0p25
J51wXOP/Hai1Z+/EbCM1YXzZryOlMaPzTu6iFVH/ba+SWJU6x0jAQY73ty6+59eq
VH/HyBot04LxQh2ix7F14bWnptz2PUajWfZ4wYofw3QI9t3oAnmfbTDOswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3iu+Wi4UxUXZwwUnIS39Xc+uCbMB8GA1UdIwQY
MBaAFO2tN1MBX8fhaCpLH3f/JNTA6GtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2EwM1V3RmZ4LUZvS2tzZmRfOGsxTURvYTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mZmQ3MDYtZjE5Yy00ZmM0LWJlMzEt
OTM2MmFkYzkxNjMwLzEvVGVLNzVhTGhURlJkbkRCU2NoTGYxZHo2NEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9mZmQ3MDYtZjE5Yy00ZmM0LWJlMzEtOTM2MmFkYzkxNjMw
LzEvN2EwM1V3RmZ4LUZvS2tzZmRfOGsxTURvYTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+2IMA0G
CSqGSIb3DQEBCwUAA4IBAQACteWCYrHN5ADanTLfTvddW5JMV3qMc47UQ85v3lw1
haedVDuPSyVfQ+AAuJ614DlRGqwW5qF5VmReungzkg10zlX3JVGJE1Ab0zZ0OkCJ
Fby85OtoTJTCkGy2iN/p44KogfuOrW0XcnZZCof7jwvHQFARSC0DsBBj+5EkVQ8z
mxivZ1Tq8nDK3ecgvEMdV4BJAIHRIZFBO8X901jqSwwLjkWu2eiBd8+W1Cvpnl+l
JmGesC1cIRIXRCVqWl8AUeceQD7EqecTVdnEI65lQpNbXc6C7iF24xGIy3bmjuLL
qpRoz5R8pZJP/6MTOiXYAT5xud031N+/q1gyHcjhsbKe
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:15 2025 by rpki-client