Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/ETBdwKzdyyJs6sUxCsaWkdh6MIk.roa
File: ETBdwKzdyyJs6sUxCsaWkdh6MIk.roa (raw, json)
Hash identifier: TjHejLxKL/6e+SYyOFf2jzAAoav0Q9K5GclceLIaOdQ=
Subject key identifier: 11:30:5D:C0:AC:DD:CB:22:6C:EA:C5:31:0A:C6:96:91:D8:7A:30:89
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018C4D36B7A4DB23722246E8641D7622B707
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/ETBdwKzdyyJs6sUxCsaWkdh6MIk.roa
Signing time: Sat 09 Dec 2023 06:14:40 +0000
ROA not before: Sat 09 Dec 2023 06:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 32
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:36:b7:a4:db:23:72:22:46:e8:64:1d:76:22:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Dec 9 06:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11305dc0acddcb226ceac5310ac69691d87a3089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:71:3d:d5:1b:b0:02:19:50:b7:c0:0f:55:
bf:9e:5e:5d:a8:0e:60:9c:cb:e6:72:27:c7:de:33:
87:30:50:55:70:02:5b:15:bb:0d:ee:b9:58:34:42:
1a:dd:95:2e:01:67:fd:52:92:d0:5b:1d:5c:88:89:
f8:20:42:2c:23:ea:40:bc:eb:43:0d:f8:92:60:07:
f6:05:f4:7f:37:9d:08:c0:1e:c7:1b:bc:9d:81:c8:
90:41:67:77:26:12:3e:a4:84:a3:c8:83:d1:c0:5a:
2c:e2:12:01:c0:21:af:ad:d3:b2:d6:e4:f7:71:42:
01:8b:f3:7b:5e:46:1f:65:e5:5e:45:54:c2:0d:62:
c7:82:03:46:72:38:78:41:16:bb:3e:45:53:32:2f:
6f:03:99:83:62:73:20:48:26:85:14:83:c8:06:35:
cc:17:22:2b:f8:82:01:22:e6:55:f9:4a:6c:03:6a:
e4:b2:e3:33:6d:d5:8a:17:94:a3:f3:9b:40:50:cb:
56:13:b5:1d:db:f9:d2:e6:4a:99:25:90:1d:36:b6:
09:36:49:8a:f1:aa:53:6a:59:9f:e7:47:8b:8e:eb:
fb:4c:03:b0:d2:6f:ba:14:7b:6d:a1:ab:f3:bb:26:
2e:31:59:23:f3:79:74:46:5d:3c:0b:2b:1b:9e:02:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:5D:C0:AC:DD:CB:22:6C:EA:C5:31:0A:C6:96:91:D8:7A:30:89
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/ETBdwKzdyyJs6sUxCsaWkdh6MIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
4d:04:0a:5e:cf:fb:9c:2c:89:a2:0d:d8:29:e1:88:ad:92:32:
04:32:b7:b0:ca:c0:c4:67:87:e4:64:fd:62:fd:f6:e0:6d:db:
3e:ac:63:74:f6:e8:6f:65:c2:0b:ae:fc:69:ee:1d:60:63:6e:
1d:91:4f:28:65:61:e3:11:89:9d:b4:55:8e:84:36:51:3b:72:
b6:51:71:bb:f4:e8:9b:16:9e:8f:a1:9c:15:9f:86:d0:d4:b7:
6e:42:52:9c:f9:2b:3a:d6:01:18:49:d0:dc:df:e1:cf:61:74:
2b:f9:ea:ea:6a:98:19:eb:27:64:77:63:cc:b9:f1:78:f6:ce:
2a:87:13:fd:95:49:42:38:23:49:11:b0:dc:91:48:88:af:98:
3d:50:9c:71:fa:bd:56:44:eb:32:0f:9f:32:33:39:b4:46:b9:
86:6c:0b:d3:84:75:ea:d1:67:f7:ed:40:e0:0d:bf:81:cb:6e:
44:60:c9:0b:e4:94:12:ee:51:e7:05:43:4a:5f:d9:d3:34:04:
b3:2f:ed:76:d6:f7:25:e2:68:a5:21:7a:60:9b:47:74:ee:d3:
9e:00:86:3c:fb:65:9c:93:d2:36:f1:4d:ba:3d:af:75:c1:df:
92:49:be:47:77:f6:7e:f4:56:40:64:7b:83:9c:46:5e:e9:63:
72:04:b1:02
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYxNNrek2yNyIkboZB12IrcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTk2ZDNmNjkzMjNkMDhiNGNjYjk5NTI5NGFkNTBiNDIx
ZTZiMGQwHhcNMjMxMjA5MDYxNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTMwNWRjMGFjZGRjYjIyNmNlYWM1MzEwYWM2OTY5MWQ4N2EzMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1pxPdUbsAIZULfAD1W/nl5dqA5g
nMvmcifH3jOHMFBVcAJbFbsN7rlYNEIa3ZUuAWf9UpLQWx1ciIn4IEIsI+pAvOtD
DfiSYAf2BfR/N50IwB7HG7ydgciQQWd3JhI+pISjyIPRwFos4hIBwCGvrdOy1uT3
cUIBi/N7XkYfZeVeRVTCDWLHggNGcjh4QRa7PkVTMi9vA5mDYnMgSCaFFIPIBjXM
FyIr+IIBIuZV+UpsA2rksuMzbdWKF5Sj85tAUMtWE7Ud2/nS5kqZJZAdNrYJNkmK
8apTalmf50eLjuv7TAOw0m+6FHttoavzuyYuMVkj83l0Rl08CysbngIOqwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBEwXcCs3csibOrFMQrGlpHYejCJMB8GA1UdIwQY
MBaAFCKpbT9pMj0ItMy5lSlK1QtCHmsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFsdFAya3lQUWkwekxtVktVclZDMEllYXcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZmMyNmQtYTgzNS00NjljLThhMTQt
YmM0M2IzMDllMmM2LzEvRVRCZHdLemR5eUpzNnNVeENzYVdrZGg2TUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZmMyNmQtYTgzNS00NjljLThhMTQtYmM0M2IzMDllMmM2
LzEvSXFsdFAya3lQUWkwekxtVktVclZDMEllYXcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBQLvQAwQA
W8FyMA0EAgACMAcDBQMqBqNAMA0GCSqGSIb3DQEBCwUAA4IBAQBNBApez/ucLImi
Ddgp4YitkjIEMrewysDEZ4fkZP1i/fbgbds+rGN09uhvZcILrvxp7h1gY24dkU8o
ZWHjEYmdtFWOhDZRO3K2UXG79OibFp6PoZwVn4bQ1LduQlKc+Ss61gEYSdDc3+HP
YXQr+erqapgZ6ydkd2PMufF49s4qhxP9lUlCOCNJEbDckUiIr5g9UJxx+r1WROsy
D58yMzm0RrmGbAvThHXq0Wf37UDgDb+By25EYMkL5JQS7lHnBUNKX9nTNASzL+12
1vcl4milIXpgm0d07tOeAIY8+2Wck9I28U26Pa91wd+SSb5Hd/Z+9FZAZHuDnEZe
6WNyBLEC
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:55 2025 by rpki-client