Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/TEBgTQfk8TTugPkvZbXZbIl-DzU.roa
File: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (raw, json)
Hash identifier: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=
Subject key identifier: 4C:40:60:4D:07:E4:F1:34:EE:80:F9:2F:65:B5:D9:6C:89:7E:0F:35
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 0194236A5112D8A8B9CD444D8E13E24A927C
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/TEBgTQfk8TTugPkvZbXZbIl-DzU.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39360
IP address blocks: 213.226.80.0/22 maxlen: 22
213.226.80.0/24 maxlen: 24
2a09:4980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:51:12:d8:a8:b9:cd:44:4d:8e:13:e2:4a:92:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c40604d07e4f134ee80f92f65b5d96c897e0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:ac:9d:20:9e:df:e0:52:74:3d:68:36:4d:
1d:80:20:76:d7:60:33:87:0e:4c:c8:0d:d7:48:24:
55:65:ab:f3:0e:2c:ac:d6:2a:a6:6e:db:1d:15:f1:
1f:f2:c5:f2:c1:e0:77:25:2f:38:77:b6:df:ea:d8:
a9:a3:18:58:ca:16:1b:45:d3:0a:6d:a4:27:ce:04:
97:9e:15:d7:87:02:fa:57:5a:3b:36:e6:18:5b:dc:
71:cb:f6:d9:48:b5:b5:4c:c6:f7:ca:4a:ce:f0:a1:
e4:cd:06:56:68:2b:1b:df:ac:bb:80:27:25:6c:8e:
47:84:92:1f:69:f1:39:65:81:23:bf:c2:1d:f9:b9:
8c:9f:38:5a:41:f9:7d:47:71:2e:51:da:4a:25:fb:
4c:3d:1e:eb:00:2c:aa:7c:f6:30:1b:1c:e0:86:6c:
05:dd:1b:fe:32:8a:57:77:c8:8d:2e:e3:d7:a4:67:
e6:dc:3d:63:45:0a:27:db:56:4c:db:2e:a9:97:70:
0d:d6:00:fb:72:6e:04:2c:74:e9:a6:23:8a:49:df:
b7:12:62:6c:41:a5:33:43:a8:5c:42:50:fe:8b:04:
c4:5b:61:de:63:c0:85:71:84:27:3a:63:ca:ae:a4:
77:54:27:48:bb:de:20:86:85:33:ee:89:5d:ab:e6:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:60:4D:07:E4:F1:34:EE:80:F9:2F:65:B5:D9:6C:89:7E:0F:35
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/TEBgTQfk8TTugPkvZbXZbIl-DzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.80.0/22
IPv6:
2a09:4980::/32
Signature Algorithm: sha256WithRSAEncryption
c7:07:cf:72:18:b7:04:83:80:06:8e:56:4e:06:e0:b7:a2:47:
fc:48:ef:c2:e7:4d:84:66:50:37:71:c1:d7:7b:53:c3:92:6f:
bf:0f:8e:13:77:98:79:ce:bd:8b:51:e8:56:b2:2b:98:2e:81:
0b:db:7e:e7:56:c2:4d:2a:0c:62:4e:7a:d6:5c:04:17:57:e1:
b3:a5:0c:0e:12:32:c9:41:53:13:bc:1a:db:14:1f:e2:5c:53:
48:5a:29:3c:72:9d:36:9a:02:04:01:8a:04:3d:1d:9a:ec:7b:
d7:65:01:75:b9:cc:25:7b:9e:8f:fd:e5:30:6c:0a:ad:80:8b:
88:c4:dd:96:1d:f1:76:5b:59:2e:b4:b3:f4:be:03:59:2d:dd:
02:68:a1:ce:72:a0:49:b5:d9:1f:19:55:b9:16:37:0d:be:22:
2a:79:18:c6:46:2a:bf:9a:10:ec:3f:cf:8d:91:a8:29:07:8f:
95:82:4f:41:77:b1:be:d1:f0:b8:70:91:41:04:cf:6d:24:5b:
53:cd:16:46:c7:65:46:38:b6:29:29:97:2f:4c:af:d1:48:0a:
52:04:f9:1b:8f:a4:49:c0:cf:9a:f6:00:e7:7e:72:3f:e8:e1:
a3:3b:dd:43:fa:85:f0:2c:de:86:f5:b7:19:1f:46:18:19:2b:
73:85:b8:89
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjalES2Ki5zURNjhPiSpJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh
ZDIwMmEwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQwNjA0ZDA3ZTRmMTM0ZWU4MGY5MmY2NWI1ZDk2Yzg5N2UwZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQOsnSCe3+BSdD1oNk0dgCB212Az
hw5MyA3XSCRVZavzDiys1iqmbtsdFfEf8sXyweB3JS84d7bf6tipoxhYyhYbRdMK
baQnzgSXnhXXhwL6V1o7NuYYW9xxy/bZSLW1TMb3ykrO8KHkzQZWaCsb36y7gCcl
bI5HhJIfafE5ZYEjv8Id+bmMnzhaQfl9R3EuUdpKJftMPR7rACyqfPYwGxzghmwF
3Rv+MopXd8iNLuPXpGfm3D1jRQon21ZM2y6pl3AN1gD7cm4ELHTppiOKSd+3EmJs
QaUzQ6hcQlD+iwTEW2HeY8CFcYQnOmPKrqR3VCdIu94ghoUz7oldq+b2/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFExAYE0H5PE07oD5L2W12WyJfg81MB8GA1UdIwQY
MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt
N2Y3YmFiODNiZGEwLzEvVEVCZ1RRZms4VFR1Z1BrdlpiWFpiSWwtRHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw
LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1eJQMA0E
AgACMAcDBQAqCUmAMA0GCSqGSIb3DQEBCwUAA4IBAQDHB89yGLcEg4AGjlZOBuC3
okf8SO/C502EZlA3ccHXe1PDkm+/D44Td5h5zr2LUehWsiuYLoEL237nVsJNKgxi
TnrWXAQXV+GzpQwOEjLJQVMTvBrbFB/iXFNIWik8cp02mgIEAYoEPR2a7HvXZQF1
ucwle56P/eUwbAqtgIuIxN2WHfF2W1kutLP0vgNZLd0CaKHOcqBJtdkfGVW5FjcN
viIqeRjGRiq/mhDsP8+NkagpB4+Vgk9Bd7G+0fC4cJFBBM9tJFtTzRZGx2VGOLYp
KZcvTK/RSApSBPkbj6RJwM+a9gDnfnI/6OGjO91D+oXwLN6G9bcZH0YYGStzhbiJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:32 2025 by rpki-client