Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pteX_F18pKfY_J9Cs8K_KhX8xe8.roa
File: pteX_F18pKfY_J9Cs8K_KhX8xe8.roa (raw, json)
Hash identifier: m/yi1TVeKvstEX7vhie8NfbFmnVlI4Htbwkazoc2nMQ=
Subject key identifier: A6:D7:97:FC:5D:7C:A4:A7:D8:FC:9F:42:B3:C2:BF:2A:15:FC:C5:EF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194F11F30E9500FC67DD5BB451C486B425B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pteX_F18pKfY_J9Cs8K_KhX8xe8.roa
Signing time: Mon 10 Feb 2025 18:29:00 +0000
ROA not before: Mon 10 Feb 2025 18:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 64.188.72.0/22 maxlen: 24
64.188.84.0/22 maxlen: 24
64.188.104.0/22 maxlen: 24
64.188.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:1f:30:e9:50:0f:c6:7d:d5:bb:45:1c:48:6b:42:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 10 18:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d797fc5d7ca4a7d8fc9f42b3c2bf2a15fcc5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:8c:51:07:2e:a2:ed:be:43:cd:46:31:ac:
f2:47:80:22:1b:18:2e:59:92:a3:42:2c:c5:a2:eb:
13:7a:70:08:5a:5e:ff:fd:0a:2d:e5:45:52:2a:b8:
d2:0d:6d:cb:b6:aa:bf:a6:08:10:2a:a6:76:e1:db:
f6:f4:38:7d:46:e5:70:9d:f1:c0:f6:dd:3d:c1:c3:
85:fc:79:dd:ca:0a:bb:18:85:52:23:75:97:09:fd:
5c:2a:3a:ad:aa:27:4e:c8:08:5a:1c:e7:a2:ca:19:
16:01:26:29:55:a4:3a:f6:92:7b:ae:f7:c6:03:a1:
21:70:4a:bf:4c:6b:a0:bd:00:93:53:bb:bd:0f:85:
28:05:8b:bf:be:72:82:70:ac:14:da:8f:1d:3a:49:
e9:a8:f0:8d:a6:92:e9:17:67:b8:2a:5b:fa:38:fe:
10:12:5a:c7:7e:b1:60:ab:f7:73:15:b9:72:d6:63:
87:8f:5a:88:96:1b:60:80:8a:09:6e:e3:be:32:43:
35:dc:27:a2:74:5c:41:e4:72:98:cb:54:49:b7:10:
c3:43:89:72:2b:e5:3e:ba:d6:00:5f:09:31:ea:0b:
bc:fe:61:27:5b:90:af:67:8e:50:e6:08:e8:8c:9f:
97:03:db:e1:3c:28:56:f9:92:10:8f:7f:3b:bb:88:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:97:FC:5D:7C:A4:A7:D8:FC:9F:42:B3:C2:BF:2A:15:FC:C5:EF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pteX_F18pKfY_J9Cs8K_KhX8xe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.72.0/22
64.188.84.0/22
64.188.104.0/22
64.188.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:6e:86:d1:16:f0:5d:2f:1d:d6:d9:08:e5:4f:46:a9:de:a4:
4e:8e:48:31:93:52:ff:f2:a4:6b:cb:e9:b6:8a:c8:39:bf:68:
35:b8:4c:a7:10:cc:e4:e7:ee:de:6e:bd:c7:9e:fb:dd:af:42:
87:45:aa:51:7f:1f:58:4e:e9:7d:ac:01:7b:ef:f4:02:0e:e0:
86:a0:a6:16:47:41:e8:70:20:76:b2:9d:e6:63:55:ea:9b:57:
2e:d3:7d:67:86:c7:cb:cc:c9:21:4b:84:f5:fd:cc:21:e1:6a:
5c:66:dc:20:19:08:9a:85:cd:c3:2d:11:13:a4:16:d4:2f:24:
0c:7a:82:cf:66:b0:f0:64:5a:6b:44:a1:49:50:b4:04:c2:0c:
c4:18:f2:4f:d2:09:34:f1:9f:7e:f2:a7:1e:7e:d2:bf:39:88:
59:f1:ec:99:a4:7e:82:b6:73:f0:9b:9c:27:45:83:04:9a:c4:
fa:d5:26:92:4f:94:2b:64:7c:a9:40:1e:c9:42:be:35:ab:d9:
8d:cb:04:48:a2:15:55:c8:37:c5:82:53:85:9e:b5:27:2a:f8:
5d:2b:51:8b:1e:db:ea:e1:fa:d7:df:d8:59:43:35:f6:ea:f6:
fc:59:99:ea:82:b9:fd:98:83:1f:f1:c7:03:63:25:7a:23:38:
82:ae:da:55
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZTxHzDpUA/GfdW7RRxIa0JbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMjEwMTgyOTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ3OTdmYzVkN2NhNGE3ZDhmYzlmNDJiM2MyYmYyYTE1ZmNjNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxSMUQcuou2+Q81GMazyR4AiGxgu
WZKjQizFousTenAIWl7//Qot5UVSKrjSDW3Ltqq/pggQKqZ24dv29Dh9RuVwnfHA
9t09wcOF/Hndygq7GIVSI3WXCf1cKjqtqidOyAhaHOeiyhkWASYpVaQ69pJ7rvfG
A6EhcEq/TGugvQCTU7u9D4UoBYu/vnKCcKwU2o8dOknpqPCNppLpF2e4Klv6OP4Q
ElrHfrFgq/dzFbly1mOHj1qIlhtggIoJbuO+MkM13CeidFxB5HKYy1RJtxDDQ4ly
K+U+utYAXwkx6gu8/mEnW5CvZ45Q5gjojJ+XA9vhPChW+ZIQj387u4hKLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKbXl/xdfKSn2PyfQrPCvyoV/MXvMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvcHRlWF9GMThwS2ZZX0o5Q3M4S19LaFg4eGU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQLxIAwQC
QLxUAwQCQLxoAwQCQLxwMA0GCSqGSIb3DQEBCwUAA4IBAQCybobRFvBdLx3W2Qjl
T0ap3qROjkgxk1L/8qRry+m2isg5v2g1uEynEMzk5+7ebr3Hnvvdr0KHRapRfx9Y
Tul9rAF77/QCDuCGoKYWR0HocCB2sp3mY1Xqm1cu031nhsfLzMkhS4T1/cwh4Wpc
ZtwgGQiahc3DLRETpBbULyQMeoLPZrDwZFprRKFJULQEwgzEGPJP0gk08Z9+8qce
ftK/OYhZ8eyZpH6CtnPwm5wnRYMEmsT61SaST5QrZHypQB7JQr41q9mNywRIohVV
yDfFglOFnrUnKvhdK1GLHtvq4frX39hZQzX26vb8WZnqgrn9mIMf8ccDYyV6IziC
rtpV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:08 2025 by rpki-client