Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5quiinTU3AGfgxw05247H7HkD4.roa
File: T5quiinTU3AGfgxw05247H7HkD4.roa (raw, json)
Hash identifier: U2mr1l32J29k/kmAg8Y68AOi6gVoLUN/WEjbSx49lJQ=
Subject key identifier: 4F:9A:AE:8A:29:D3:53:70:06:7E:0C:70:D3:9D:B8:EC:7E:C7:90:3E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4ED047A2D0EA1F9717AEFE142AA1A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5quiinTU3AGfgxw05247H7HkD4.roa
Signing time: Sun 01 Jan 2023 19:35:26 +0000
ROA not before: Sun 01 Jan 2023 19:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50040
IP address blocks: 109.73.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ed:04:7a:2d:0e:a1:f9:71:7a:ef:e1:42:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9aae8a29d35370067e0c70d39db8ec7ec7903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:5e:2b:90:f1:ee:42:32:f4:28:cd:60:08:
5a:83:3e:9f:2e:b2:a6:81:7f:3a:1d:25:c2:fd:27:
ec:b9:a0:82:24:37:77:55:9e:37:b4:78:38:09:5d:
68:b5:da:c8:90:93:a4:31:aa:25:b7:de:3d:1a:7c:
60:9c:43:42:bf:ae:cd:ee:2d:dc:a0:7e:af:2e:b5:
f9:58:9c:a0:0e:fd:97:69:1d:ea:98:0b:c5:04:fb:
41:f2:3e:c6:57:f3:83:4c:8a:80:53:0b:ac:02:2c:
6c:4a:46:60:78:90:8b:93:bd:e6:93:73:e7:37:c3:
12:10:30:77:18:2f:c8:b5:c6:0d:6d:6c:6a:67:f8:
7b:3a:a0:c9:f2:7e:af:29:4f:d9:9b:cf:a0:e6:12:
8d:ee:d2:07:38:14:83:bf:b9:7a:a3:18:b4:9f:ac:
de:08:ea:82:b7:2f:49:0d:a8:3c:3d:b8:f4:59:6c:
5f:5d:4e:9d:96:e1:df:76:de:1a:e1:8c:36:2c:23:
36:d7:67:ec:6a:83:c3:79:71:2b:2a:48:d3:63:65:
c4:95:d7:50:d5:ec:97:38:cb:a0:5a:cf:be:34:9e:
da:7b:e7:6a:00:1d:db:9c:68:f8:63:f4:c9:f4:ff:
6c:0b:bd:f5:d1:a3:40:b3:61:ff:6d:2d:4b:06:77:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9A:AE:8A:29:D3:53:70:06:7E:0C:70:D3:9D:B8:EC:7E:C7:90:3E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5quiinTU3AGfgxw05247H7HkD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.15.0/24
Signature Algorithm: sha256WithRSAEncryption
71:04:ab:74:f2:df:b2:7b:da:b4:86:3d:f1:c7:dd:24:4c:04:
96:75:98:f8:73:ce:a0:74:8f:08:67:c5:52:50:e5:76:36:88:
f5:5b:1c:ab:71:b3:69:66:68:ae:2e:eb:51:fa:5b:c2:90:4b:
a0:57:70:34:6f:c0:af:b2:20:1b:98:24:49:e9:1c:cc:64:2c:
a1:2f:a4:c0:8e:dc:2b:46:01:33:18:0a:18:2e:8f:e0:43:2c:
80:74:fe:6c:f2:45:21:31:ba:d4:27:39:56:c1:e1:ee:16:c0:
19:9c:46:86:59:35:f3:41:10:04:d0:ba:91:d9:61:10:0d:97:
1d:ee:d1:e0:e2:75:0f:b6:65:d3:00:67:ec:de:d7:1c:f6:c6:
1b:07:66:f6:83:20:8f:07:bd:3f:96:d3:65:52:12:5d:3c:59:
5e:9e:6a:08:80:2a:1e:a4:07:76:73:64:92:07:06:f1:4f:ee:
d3:cb:6c:25:72:7a:81:a0:fe:6d:3a:7c:d9:11:34:25:cb:d4:
ac:43:88:c5:f6:a3:42:e0:66:6f:d1:c6:f5:54:76:4e:6c:29:
9f:23:6b:4e:4a:69:01:e9:6d:7e:06:8a:87:bc:7b:77:14:ae:
c1:a1:33:84:0b:24:27:bb:79:3a:7d:6a:1b:03:1c:84:33:6a:
c9:f5:75:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1O0Eei0Ooflxeu/hQqoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjlhYWU4YTI5ZDM1MzcwMDY3ZTBjNzBkMzlkYjhlYzdlYzc5MDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcJeK5Dx7kIy9CjNYAhagz6fLrKm
gX86HSXC/SfsuaCCJDd3VZ43tHg4CV1otdrIkJOkMaolt949GnxgnENCv67N7i3c
oH6vLrX5WJygDv2XaR3qmAvFBPtB8j7GV/ODTIqAUwusAixsSkZgeJCLk73mk3Pn
N8MSEDB3GC/ItcYNbWxqZ/h7OqDJ8n6vKU/Zm8+g5hKN7tIHOBSDv7l6oxi0n6ze
COqCty9JDag8Pbj0WWxfXU6dluHfdt4a4Yw2LCM212fsaoPDeXErKkjTY2XElddQ
1eyXOMugWs++NJ7ae+dqAB3bnGj4Y/TJ9P9sC7310aNAs2H/bS1LBncWoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE+aroop01NwBn4McNOduOx+x5A+MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvVDVxdWlpblRVM0FHZmd4dzA1MjQ3SDdIa0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUkPMA0G
CSqGSIb3DQEBCwUAA4IBAQBxBKt08t+ye9q0hj3xx90kTASWdZj4c86gdI8IZ8VS
UOV2Noj1WxyrcbNpZmiuLutR+lvCkEugV3A0b8CvsiAbmCRJ6RzMZCyhL6TAjtwr
RgEzGAoYLo/gQyyAdP5s8kUhMbrUJzlWweHuFsAZnEaGWTXzQRAE0LqR2WEQDZcd
7tHg4nUPtmXTAGfs3tcc9sYbB2b2gyCPB70/ltNlUhJdPFlenmoIgCoepAd2c2SS
BwbxT+7Ty2wlcnqBoP5tOnzZETQly9SsQ4jF9qNC4GZv0cb1VHZObCmfI2tOSmkB
6W1+BoqHvHt3FK7BoTOECyQnu3k6fWobAxyEM2rJ9XWY
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:03 2025 by rpki-client