Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/pTK-AOE9ZomRkYS2t8erD1XRJHg.roa
File: pTK-AOE9ZomRkYS2t8erD1XRJHg.roa (raw, json)
Hash identifier: 7SdkP85yC2Ncd5gd0ZSTBt2qs1PlO+jDAKmhPuX65r0=
Subject key identifier: A5:32:BE:00:E1:3D:66:89:91:91:84:B6:B7:C7:AB:0F:55:D1:24:78
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 0185AF19E694A0073E51E58CDA27431D0369
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/pTK-AOE9ZomRkYS2t8erD1XRJHg.roa
Signing time: Sat 14 Jan 2023 07:06:28 +0000
ROA not before: Sat 14 Jan 2023 07:06:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212416
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:19:e6:94:a0:07:3e:51:e5:8c:da:27:43:1d:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Jan 14 07:06:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a532be00e13d6689919184b6b7c7ab0f55d12478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:9e:08:bc:4b:ee:cb:fa:0f:bf:b8:c5:77:
ed:b8:62:2f:c9:70:98:81:72:21:52:b8:c0:fd:df:
5c:c7:4d:b8:40:0c:3b:01:06:9f:62:40:92:92:0d:
e1:d2:19:e7:f7:84:6e:1d:8d:d7:d5:f6:92:83:9f:
ad:a8:44:8d:2d:1d:cc:85:14:0b:6a:92:34:a1:8b:
4b:5c:9c:ac:e2:54:50:09:77:58:cc:46:36:4c:e8:
04:c7:83:2f:4c:b3:65:59:15:84:58:a0:d3:7a:47:
72:83:47:aa:a8:8d:25:70:b1:dc:69:e7:a7:be:bb:
cc:45:76:bb:e7:c9:ec:d0:43:e6:ff:c1:8c:b3:93:
28:6a:22:ef:85:7d:58:46:61:b1:e6:fa:09:b9:a3:
3f:4e:78:4e:01:27:9c:60:49:c5:90:47:5a:43:c1:
da:5b:ae:4e:95:33:fd:6b:37:c9:ea:53:3d:ba:cd:
f3:4f:de:e1:00:46:9a:38:e4:14:17:86:b5:a3:8c:
a9:52:4a:cc:69:7e:65:ed:f3:0b:3c:da:64:bc:b2:
70:de:9b:6c:18:0b:d3:09:76:a5:46:03:ef:3a:30:
fa:c8:74:02:2f:92:95:83:3e:6d:0b:a3:16:c5:69:
db:12:de:fd:65:3c:60:40:0b:22:57:ec:86:a7:6b:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:BE:00:E1:3D:66:89:91:91:84:B6:B7:C7:AB:0F:55:D1:24:78
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/pTK-AOE9ZomRkYS2t8erD1XRJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:73:73:c7:28:09:e1:a0:ca:99:1c:a8:5c:42:fc:4c:3c:66:
8c:31:56:43:e3:e6:b0:2a:34:22:a0:fb:a0:e8:7d:a1:0d:d1:
c2:42:86:59:26:4a:b6:90:20:0b:41:ab:1e:d2:4d:49:31:de:
7a:4e:d5:47:5e:85:f6:6e:c1:a0:29:66:c7:54:1b:b4:33:dc:
bf:22:fe:bb:36:a8:99:71:89:35:41:97:87:70:c6:e2:20:95:
84:c0:ba:82:e0:02:7e:2c:cd:d6:6a:3b:ae:ba:03:a1:8d:b2:
7c:34:4d:b7:ca:8d:06:95:80:5e:f4:a7:b5:18:fb:f0:80:9b:
08:f1:55:f9:1b:33:a8:24:e9:3d:7a:92:db:19:12:bb:51:58:
50:25:40:f5:59:31:b3:61:48:0b:bb:cf:c4:e1:04:84:8c:54:
06:a6:36:d6:38:98:b3:91:6e:1c:5f:fc:a9:d1:ab:57:9b:46:
cc:7f:51:ef:38:81:37:7c:32:d1:a8:0c:8e:9c:30:31:a1:97:
94:cb:c4:a0:c2:b0:49:a0:df:08:0f:ec:82:d8:e7:df:bd:a6:
df:f9:8c:fe:eb:92:5e:76:68:af:36:81:0f:42:30:76:dd:2b:
bc:2f:1e:f3:69:ee:ff:a1:02:ba:61:94:d3:28:be:09:68:1f:
60:a0:18:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWvGeaUoAc+UeWM2idDHQNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWZiZDMwNDM0NmExNDQyM2U1Y2U1Y2FmYzY5NTNhM2Uy
NDViMjMwHhcNMjMwMTE0MDcwNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTMyYmUwMGUxM2Q2Njg5OTE5MTg0YjZiN2M3YWIwZjU1ZDEyNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS+eCLxL7sv6D7+4xXftuGIvyXCY
gXIhUrjA/d9cx024QAw7AQafYkCSkg3h0hnn94RuHY3X1faSg5+tqESNLR3MhRQL
apI0oYtLXJys4lRQCXdYzEY2TOgEx4MvTLNlWRWEWKDTekdyg0eqqI0lcLHcaeen
vrvMRXa758ns0EPm/8GMs5MoaiLvhX1YRmGx5voJuaM/TnhOASecYEnFkEdaQ8Ha
W65OlTP9azfJ6lM9us3zT97hAEaaOOQUF4a1o4ypUkrMaX5l7fMLPNpkvLJw3pts
GAvTCXalRgPvOjD6yHQCL5KVgz5tC6MWxWnbEt79ZTxgQAsiV+yGp2talwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUyvgDhPWaJkZGEtrfHqw9V0SR4MB8GA1UdIwQY
MBaAFEQfvTBDRqFEI+XOXK/GlTo+JFsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkItOU1FTkdvVVFqNWM1Y3I4YVZPajRrV3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZTI2ZWEtYTBmMi00Mzg3LWFjOWUt
YjRkMTE3Nzk4ZDQxLzEvcFRLLUFPRTlab21Sa1lTMnQ4ZXJEMVhSSkhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZTI2ZWEtYTBmMi00Mzg3LWFjOWUtYjRkMTE3Nzk4ZDQx
LzEvUkItOU1FTkdvVVFqNWM1Y3I4YVZPajRrV3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiDMA0G
CSqGSIb3DQEBCwUAA4IBAQAFc3PHKAnhoMqZHKhcQvxMPGaMMVZD4+awKjQioPug
6H2hDdHCQoZZJkq2kCALQase0k1JMd56TtVHXoX2bsGgKWbHVBu0M9y/Iv67NqiZ
cYk1QZeHcMbiIJWEwLqC4AJ+LM3WajuuugOhjbJ8NE23yo0GlYBe9Ke1GPvwgJsI
8VX5GzOoJOk9epLbGRK7UVhQJUD1WTGzYUgLu8/E4QSEjFQGpjbWOJizkW4cX/yp
0atXm0bMf1HvOIE3fDLRqAyOnDAxoZeUy8SgwrBJoN8ID+yC2Offvabf+Yz+65Je
dmivNoEPQjB23Su8Lx7zae7/oQK6YZTTKL4JaB9goBj5
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:45 2025 by rpki-client