Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/tTS-9M6r9A4Y_cYEdwHu93cJO5w.roa
File: tTS-9M6r9A4Y_cYEdwHu93cJO5w.roa (raw, json)
Hash identifier: zes53s2b1CuLEYu6h5O/tgK+oGbAN6GYBHojKng+SRY=
Subject key identifier: B5:34:BE:F4:CE:AB:F4:0E:18:FD:C6:04:77:01:EE:F7:77:09:3B:9C
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 01856DC1B41F915C756A21992F00224757D9
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/tTS-9M6r9A4Y_cYEdwHu93cJO5w.roa
Signing time: Sun 01 Jan 2023 14:34:49 +0000
ROA not before: Sun 01 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207537
IP address blocks: 2001:67c:2bb4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b4:1f:91:5c:75:6a:21:99:2f:00:22:47:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jan 1 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b534bef4ceabf40e18fdc6047701eef777093b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:d8:55:c2:ca:b5:80:ff:d4:7c:1d:f9:ad:
0e:79:ca:f0:39:16:4e:c1:6e:b2:0d:74:8d:1c:b2:
d6:ac:db:4a:c3:78:eb:e2:e9:57:23:56:c8:53:7a:
fa:e7:ba:f2:66:96:87:39:64:ff:c3:f1:ee:39:ae:
02:aa:e5:aa:22:b0:98:cf:a4:11:f4:26:68:0c:2b:
f8:51:01:ab:55:b1:46:a6:1c:95:47:ff:75:2a:6f:
31:4b:96:55:90:f4:78:d9:de:6f:89:99:79:8b:bf:
57:66:1b:38:f4:62:0c:4a:08:da:d3:a7:7c:49:b2:
ba:44:da:c1:72:fd:78:bb:28:05:a0:87:34:5f:91:
6b:13:8b:06:8c:9c:49:53:f4:c7:a0:e8:b1:3e:e6:
46:82:0d:4f:46:33:6f:c0:7c:3a:14:74:ff:87:45:
1a:9e:39:f3:96:da:6a:7a:07:f5:91:dd:72:ec:07:
b3:4d:35:e5:62:d9:42:9e:37:ba:72:35:f8:b3:11:
41:33:bc:c7:e6:01:3e:c2:f6:59:bb:70:d7:3e:1f:
11:ba:10:62:0d:4b:e6:cc:99:04:36:9f:e6:6a:5a:
0e:21:a7:eb:ce:94:4f:b1:b2:f4:da:9d:51:30:b4:
28:39:6f:75:87:12:cd:26:3f:7c:0d:74:2e:5b:09:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:BE:F4:CE:AB:F4:0E:18:FD:C6:04:77:01:EE:F7:77:09:3B:9C
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/tTS-9M6r9A4Y_cYEdwHu93cJO5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2bb4::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ab:9a:c7:c9:ec:bb:7e:7c:ca:9b:8a:de:67:c0:d8:ec:ab:
ff:54:49:0c:be:56:0f:9d:3c:a2:d5:f0:f3:69:1f:b1:e0:b0:
b6:31:ae:e6:5b:4e:3a:93:68:ce:de:b2:18:58:81:3e:1e:65:
60:ab:81:f3:9f:8b:4a:6d:3d:51:93:6e:fa:11:f0:76:6f:6c:
e1:c5:ff:87:a5:c1:71:68:8b:18:b2:71:5e:14:57:85:92:94:
fe:19:63:90:16:ce:ed:7f:d7:81:c1:f7:98:8b:b1:58:47:6b:
87:80:d1:6b:1b:dd:e4:3a:b4:2f:0c:6f:2f:16:60:52:0e:c2:
fb:7f:ea:82:16:01:f1:22:af:4e:a3:e6:b0:02:9b:6c:b2:22:
7b:81:9c:45:a3:54:a8:24:1d:d0:a7:98:ad:54:e3:21:29:44:
54:6c:4d:1e:15:1b:e6:bc:d9:80:73:71:44:e5:26:d7:e3:ab:
cc:0b:94:61:c1:81:91:74:46:dd:44:b7:3d:23:b9:7e:e6:bd:
d4:f7:b7:a8:31:c3:34:3c:af:62:af:79:5d:ce:ca:9c:be:5a:
3d:ff:34:cd:61:73:f1:ab:53:70:b9:56:21:cf:c4:29:ff:c1:
76:97:9c:d4:5b:53:2a:5a:73:51:35:0a:19:33:43:20:9e:3a:
cb:ff:37:9b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtwbQfkVx1aiGZLwAiR1fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDE5NGY4MjQ5NzczZDNjZDZmYjY1NGIyMzlkZTc2OWM0
MmU4NjQwHhcNMjMwMTAxMTQzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTM0YmVmNGNlYWJmNDBlMThmZGM2MDQ3NzAxZWVmNzc3MDkzYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntHYVcLKtYD/1Hwd+a0OecrwORZO
wW6yDXSNHLLWrNtKw3jr4ulXI1bIU3r657ryZpaHOWT/w/HuOa4CquWqIrCYz6QR
9CZoDCv4UQGrVbFGphyVR/91Km8xS5ZVkPR42d5viZl5i79XZhs49GIMSgja06d8
SbK6RNrBcv14uygFoIc0X5FrE4sGjJxJU/THoOixPuZGgg1PRjNvwHw6FHT/h0Ua
njnzltpqegf1kd1y7AezTTXlYtlCnje6cjX4sxFBM7zH5gE+wvZZu3DXPh8RuhBi
DUvmzJkENp/maloOIafrzpRPsbL02p1RMLQoOW91hxLNJj98DXQuWwmJmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLU0vvTOq/QOGP3GBHcB7vd3CTucMB8GA1UdIwQY
MBaAFFRBlPgkl3PTzW+2VLI53nacQuhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYt
ZDYxZGYzM2M0MzFiLzEvdFRTLTlNNnI5QTRZX2NZRWR3SHU5M2NKTzV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYtZDYxZGYzM2M0MzFi
LzEvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCu0
MA0GCSqGSIb3DQEBCwUAA4IBAQAvq5rHyey7fnzKm4reZ8DY7Kv/VEkMvlYPnTyi
1fDzaR+x4LC2Ma7mW046k2jO3rIYWIE+HmVgq4Hzn4tKbT1Rk276EfB2b2zhxf+H
pcFxaIsYsnFeFFeFkpT+GWOQFs7tf9eBwfeYi7FYR2uHgNFrG93kOrQvDG8vFmBS
DsL7f+qCFgHxIq9Oo+awAptssiJ7gZxFo1SoJB3Qp5itVOMhKURUbE0eFRvmvNmA
c3FE5SbX46vMC5RhwYGRdEbdRLc9I7l+5r3U97eoMcM0PK9ir3ldzsqcvlo9/zTN
YXPxq1NwuVYhz8Qp/8F2l5zUW1MqWnNRNQoZM0MgnjrL/zeb
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client