Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa
File: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (raw, json)
Hash identifier: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=
Subject key identifier: B6:06:06:B0:60:0F:27:79:DA:C5:12:7E:26:34:01:28:BD:55:8F:B7
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019427478EBD06E9252BBC9B69F26A000023
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.192.12.0/26 maxlen: 26
2001:7f8:130::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8e:bd:06:e9:25:2b:bc:9b:69:f2:6a:00:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b60606b0600f2779dac5127e26340128bd558fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:2d:5f:16:f9:4c:17:8c:63:19:e2:5b:dc:
bb:a8:e1:0f:24:3b:ca:13:e6:66:06:5a:34:94:7e:
6f:ed:a0:8b:58:ff:b4:1e:98:db:31:bc:cd:81:a3:
c5:89:61:57:2e:14:ba:aa:82:25:6b:93:1a:56:5d:
c9:83:70:5a:7e:a4:d5:5c:dc:b1:79:de:98:5d:43:
86:96:36:d3:6c:30:75:ed:2c:73:e3:d5:0c:61:6c:
0e:66:4e:95:81:0c:9c:0f:58:b9:ab:43:c3:53:39:
e8:b1:42:63:fb:fd:e2:9b:6a:0b:ce:4f:d5:d6:e9:
a9:92:0d:51:dd:0d:f0:3d:10:96:09:68:63:44:0d:
5f:7e:fb:f6:89:f1:f7:6e:2a:9b:bb:b5:e0:91:c7:
a7:e9:d7:03:43:d8:a0:4f:48:11:05:91:06:9b:72:
bf:c5:8e:59:c1:f8:d6:23:cf:53:0b:53:5a:e0:10:
c8:cf:51:6c:8c:a2:d1:03:0e:fc:4c:26:6a:de:b4:
37:04:ec:ba:6d:1a:d7:70:82:3e:bf:5c:ca:25:1c:
56:74:ee:4a:d9:c2:b2:e4:fb:8c:36:93:9c:fb:7a:
ed:c0:b1:4f:54:21:3a:63:01:9c:09:c6:2a:68:5a:
35:89:20:f1:80:c4:ba:eb:3e:a9:a1:59:a4:61:17:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:06:B0:60:0F:27:79:DA:C5:12:7E:26:34:01:28:BD:55:8F:B7
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.12.0/26
IPv6:
2001:7f8:130::/48
Signature Algorithm: sha256WithRSAEncryption
20:fd:73:77:23:b3:dc:08:e3:f4:62:a3:79:f3:b4:30:29:86:
f7:c8:88:8c:c5:d7:f0:35:52:90:c8:37:5c:97:ec:9e:1d:6a:
23:45:45:da:86:9f:e6:df:af:21:bf:aa:84:a5:d3:af:92:7d:
f4:83:3a:c7:fb:a3:db:49:39:28:ca:b6:46:97:91:1c:c0:49:
a2:46:7d:a4:d8:fb:cb:ed:aa:17:f9:a2:4a:a5:8b:a5:8f:23:
1d:b6:da:56:d8:6a:b7:bd:55:85:d8:2b:90:a3:7f:70:39:7a:
f8:41:ef:71:46:aa:8d:d2:7a:c8:af:30:ee:0f:17:8a:7d:c9:
19:9f:d6:b1:49:a7:22:95:72:48:7b:18:e5:17:b9:c2:3a:59:
14:6c:13:a0:87:21:08:bf:90:af:bf:98:2e:bb:c0:81:42:5d:
86:e7:ef:43:b2:9c:17:12:ce:6f:ec:e7:e4:e2:60:02:16:d7:
fd:2e:75:a0:45:5c:8b:05:50:ef:92:1c:61:21:7d:be:b8:5f:
fa:5b:84:5a:4a:4b:49:bb:35:41:de:ba:2e:8b:dc:6d:04:0f:
1f:9c:bc:31:f6:1d:ba:92:c5:3a:8f:d4:45:f2:11:01:1c:54:
a9:9c:63:bc:7a:cd:47:13:05:63:96:a4:d0:2c:f6:7b:2b:ca:
a9:8a:2b:5f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQnR469BuklK7ybafJqAAAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj
NTJjYTgwHhcNMjUwMTAyMTM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA2MDZiMDYwMGYyNzc5ZGFjNTEyN2UyNjM0MDEyOGJkNTU4ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0tXxb5TBeMYxniW9y7qOEPJDvK
E+ZmBlo0lH5v7aCLWP+0HpjbMbzNgaPFiWFXLhS6qoIla5MaVl3Jg3BafqTVXNyx
ed6YXUOGljbTbDB17Sxz49UMYWwOZk6VgQycD1i5q0PDUznosUJj+/3im2oLzk/V
1umpkg1R3Q3wPRCWCWhjRA1ffvv2ifH3biqbu7Xgkcen6dcDQ9igT0gRBZEGm3K/
xY5ZwfjWI89TC1Na4BDIz1FsjKLRAw78TCZq3rQ3BOy6bRrXcII+v1zKJRxWdO5K
2cKy5PuMNpOc+3rtwLFPVCE6YwGcCcYqaFo1iSDxgMS66z6poVmkYRd/4QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLYGBrBgDyd52sUSfiY0ASi9VY+3MB8GA1UdIwQY
MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt
ODFkMTMwNGZhZjc2LzEvdGdZR3NHQVBKM25heFJKLUpqUUJLTDFWajdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2
LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDANBAIAATAHAwUGwcAMADAP
BAIAAjAJAwcAIAEH+AEwMA0GCSqGSIb3DQEBCwUAA4IBAQAg/XN3I7PcCOP0YqN5
87QwKYb3yIiMxdfwNVKQyDdcl+yeHWojRUXahp/m368hv6qEpdOvkn30gzrH+6Pb
STkoyrZGl5EcwEmiRn2k2PvL7aoX+aJKpYuljyMdttpW2Gq3vVWF2CuQo39wOXr4
Qe9xRqqN0nrIrzDuDxeKfckZn9axSacilXJIexjlF7nCOlkUbBOghyEIv5Cvv5gu
u8CBQl2G5+9DspwXEs5v7Ofk4mACFtf9LnWgRVyLBVDvkhxhIX2+uF/6W4RaSktJ
uzVB3roui9xtBA8fnLwx9h26ksU6j9RF8hEBHFSpnGO8es1HEwVjlqTQLPZ7K8qp
iitf
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:59 2025 by rpki-client