Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TUOO784AU1mNn88ltQs_ZHY0OZg.roa
File: TUOO784AU1mNn88ltQs_ZHY0OZg.roa (raw, json)
Hash identifier: Naw9AFATy/0VcRYbqTub5i3Kl2QnpE227tUYlB/sNys=
Subject key identifier: 4D:43:8E:EF:CE:00:53:59:8D:9F:CF:25:B5:0B:3F:64:76:34:39:98
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483BA7C627E60D9209E43276CD3EE3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TUOO784AU1mNn88ltQs_ZHY0OZg.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.33.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3b:a7:c6:27:e6:0d:92:09:e4:32:76:cd:3e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d438eefce0053598d9fcf25b50b3f6476343998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:9e:48:75:2d:60:62:06:45:78:c7:7c:37:
33:fc:2c:af:36:70:cb:4f:a3:90:90:7a:89:a2:86:
6a:29:cb:95:2b:f1:68:d9:21:e8:86:e0:a3:d8:09:
8a:68:5f:8e:03:d4:0b:d1:63:d9:68:ab:ff:59:2c:
5d:e6:0f:71:7c:a2:85:9c:56:10:80:e0:1b:7d:bb:
db:c9:4d:6c:b1:87:98:31:e1:68:c3:fb:9c:85:f7:
cf:bb:50:9d:15:57:b3:0b:8a:21:c3:f5:ed:26:c9:
e7:b0:45:9d:7d:d8:c5:0f:9a:6b:ff:58:9c:87:13:
41:42:d9:10:66:91:7d:7d:ca:c5:82:aa:60:c4:0b:
21:df:2b:06:45:3e:ea:10:b1:18:a1:3c:01:28:98:
be:18:8e:17:a5:19:65:b6:2e:21:9c:23:01:6f:59:
1e:f2:b7:38:bb:76:b2:74:72:c7:25:60:53:0d:c3:
da:eb:8c:6b:7f:4e:bd:38:98:d6:40:a9:4d:cb:67:
10:ac:11:e8:fc:28:d8:23:5e:f1:df:27:bd:c7:f6:
fd:e0:5b:fd:22:fb:66:01:70:83:c9:2a:0e:41:fc:
b3:71:44:52:9d:1b:5c:8f:bd:16:98:e5:25:1e:4b:
92:0d:48:06:ea:33:c0:6b:dc:0e:5d:75:25:eb:78:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:8E:EF:CE:00:53:59:8D:9F:CF:25:B5:0B:3F:64:76:34:39:98
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TUOO784AU1mNn88ltQs_ZHY0OZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.33.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a7:7f:f9:5b:38:5a:5f:de:a1:d0:f3:9a:02:60:3b:0f:db:
5c:02:33:40:86:db:fb:2a:1c:44:10:9a:d8:69:41:35:a4:9a:
b6:47:fc:61:67:69:f0:38:a3:ec:95:e5:a4:46:8b:e5:fd:81:
c6:1b:8d:1e:17:eb:b7:b5:8a:72:af:ed:6f:2a:82:44:dc:0f:
4b:e9:fc:29:db:35:3e:8e:94:8c:ad:42:d2:14:43:5c:0a:bc:
e9:70:ce:c2:29:2d:25:0e:6f:6a:ad:1c:ad:c0:10:f7:9d:c8:
92:7f:93:00:e8:21:80:b6:1d:d9:d6:98:7c:18:e1:00:79:52:
81:98:4d:27:bd:62:bb:6d:06:37:fc:20:c7:f7:7d:4e:53:4e:
df:46:8a:1e:73:b1:d9:81:32:0c:df:66:79:a3:bc:b3:15:79:
42:d1:5b:99:51:97:70:26:3c:ed:97:b3:c8:39:d2:40:1a:7b:
90:16:7e:55:02:5e:71:53:10:1c:07:fd:c2:e4:20:06:d0:94:
bc:d1:71:fd:9c:ff:b5:ec:09:49:fc:a6:11:4f:b7:e5:da:1d:
cd:e4:ec:ff:28:63:24:20:8c:1b:ac:1a:0e:a7:af:e3:c1:d4:
46:91:a7:71:96:7a:78:64:86:e6:9b:5d:80:41:9e:c8:ba:94:
71:2e:7e:fe
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZQnSDunxifmDZIJ5DJ2zT7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDQzOGVlZmNlMDA1MzU5OGQ5ZmNmMjViNTBiM2Y2NDc2MzQzOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI2eSHUtYGIGRXjHfDcz/CyvNnDL
T6OQkHqJooZqKcuVK/Fo2SHohuCj2AmKaF+OA9QL0WPZaKv/WSxd5g9xfKKFnFYQ
gOAbfbvbyU1ssYeYMeFow/uchffPu1CdFVezC4ohw/XtJsnnsEWdfdjFD5pr/1ic
hxNBQtkQZpF9fcrFgqpgxAsh3ysGRT7qELEYoTwBKJi+GI4XpRllti4hnCMBb1ke
8rc4u3aydHLHJWBTDcPa64xrf069OJjWQKlNy2cQrBHo/CjYI17x3ye9x/b94Fv9
IvtmAXCDySoOQfyzcURSnRtcj70WmOUlHkuSDUgG6jPAa9wOXXUl63g2sQIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFE1Dju/OAFNZjZ/PJbULP2R2NDmYMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvVFVPTzc4NEFVMW1Objg4bHRRc19aSFkwT1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA
wCRgAwQAwHkoMAwDBAHAeTIDBADAeTQDBADAeXMDBADAeeUDBADApQgDBADApQwD
BADApR8DBADApV8DBADApa0DBADApbQDBADApeUDBADAsCEDBADAsHwDBADBtAcw
DAMEAMG0rwMEAMG0sDAMAwQDwbVIAwQAwbVKAwQAwbZrAwQAwbZ+AwQBwbaYAwQA
wba+AwQCwbfkAwQBwbfsAwQBweq4AwQAweswMAwDBAHCDpoDBADCDpwDBADCDvUw
DAMEA8JESAMEAcJETAMEAMJETwMEAMJEfwMEBMJn8AMEAMKEXwMEAsKEvDANBgkq
hkiG9w0BAQsFAAOCAQEAMqd/+Vs4Wl/eodDzmgJgOw/bXAIzQIbb+yocRBCa2GlB
NaSatkf8YWdp8Dij7JXlpEaL5f2BxhuNHhfrt7WKcq/tbyqCRNwPS+n8Kds1Po6U
jK1C0hRDXAq86XDOwiktJQ5vaq0crcAQ953Ikn+TAOghgLYd2daYfBjhAHlSgZhN
J71iu20GN/wgx/d9TlNO30aKHnOx2YEyDN9meaO8sxV5QtFbmVGXcCY87ZezyDnS
QBp7kBZ+VQJecVMQHAf9wuQgBtCUvNFx/Zz/tewJSfymEU+35dodzeTs/yhjJCCM
G6waDqev48HURpGncZZ6eGSG5ptdgEGeyLqUcS5+/g==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:31 2025 by rpki-client