Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tYPVw8LB8i24cvigRIjHBmA1vkA.roa
File: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (raw, json)
Hash identifier: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=
Subject key identifier: B5:83:D5:C3:C2:C1:F2:2D:B8:72:F8:A0:44:88:C7:06:60:35:BE:40
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0194221FCF81E156B9761EF3BDCF7B4599DB
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tYPVw8LB8i24cvigRIjHBmA1vkA.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8511
IP address blocks: 195.38.160.0/19 maxlen: 19
195.38.179.0/24 maxlen: 24
2a11:a380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cf:81:e1:56:b9:76:1e:f3:bd:cf:7b:45:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b583d5c3c2c1f22db872f8a04488c7066035be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:1c:79:26:09:9a:7a:89:8b:d6:dc:65:0c:
97:e8:9f:a0:7c:d6:06:34:06:d4:f2:06:42:9d:a6:
e3:7f:f7:89:b0:df:e1:f3:a8:bf:2c:60:0c:85:fc:
71:ab:0c:7a:4c:12:5e:fc:3d:bc:4c:08:49:5d:37:
c2:eb:8d:2d:4b:7f:91:42:56:70:62:cd:8a:7f:22:
55:be:80:fe:36:24:26:fe:dc:08:dc:0f:11:09:79:
6d:fa:51:d7:5e:66:8c:c6:38:00:ce:72:15:9b:d8:
9a:da:50:7e:52:35:38:70:c4:09:d7:d3:15:7a:45:
8a:13:f5:71:a9:7c:50:50:aa:b8:2a:84:d9:e8:de:
d7:2a:9e:64:9c:24:3a:27:80:18:45:d9:88:01:b4:
34:b8:2b:8f:ca:2e:4c:88:f6:70:d9:72:24:4c:32:
2a:bb:f8:62:b8:63:0f:65:15:71:d3:19:ea:ae:d6:
9a:6d:a3:9c:68:5a:3e:6a:ec:45:a1:16:f8:3e:74:
a8:7b:b5:0e:2b:0a:75:57:1f:46:12:e2:0a:e8:ce:
fd:79:3f:f5:5c:f2:7f:f6:cc:bb:73:a4:57:d1:6d:
48:a0:64:cc:5c:a2:e6:8e:fe:75:80:31:97:17:5c:
ce:77:49:05:ff:6e:a1:f2:a6:4a:de:11:d3:25:e4:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:D5:C3:C2:C1:F2:2D:B8:72:F8:A0:44:88:C7:06:60:35:BE:40
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tYPVw8LB8i24cvigRIjHBmA1vkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.160.0/19
IPv6:
2a11:a380::/29
Signature Algorithm: sha256WithRSAEncryption
9a:39:94:59:a2:68:55:45:19:33:ed:0f:c0:12:6d:dc:74:c4:
d5:a4:0d:78:61:e9:be:c8:ca:01:75:03:1e:36:e4:a5:fe:62:
fa:b9:9a:c7:ef:21:ef:68:74:54:3b:92:93:3d:b4:95:d0:4c:
0d:9d:37:8a:cc:3c:60:b1:cf:e7:06:68:e4:d9:9c:2d:51:e6:
3e:dc:ef:cb:2c:09:0c:f0:e8:a4:f3:b2:10:70:04:6d:94:93:
15:9a:03:a1:77:ab:9f:bd:06:e1:7b:1f:31:ce:b2:75:03:2b:
34:7d:46:23:09:dc:6c:9d:76:b1:ec:ee:23:81:91:dc:de:86:
4e:1d:1f:0f:c0:5d:03:70:e5:fe:b7:d9:7f:7d:61:c6:a9:9a:
3d:ee:eb:9e:15:a8:9c:83:34:e9:af:c6:61:cb:f4:e2:ec:98:
b7:c4:c0:fd:34:4b:db:f9:61:59:9b:c1:f4:cb:9a:12:51:72:
81:47:aa:af:ef:c0:a9:12:17:1c:2f:34:e8:a4:bf:c2:3c:c9:
88:5a:a6:dc:1f:41:91:b7:f1:7a:31:6f:7c:7d:7f:51:35:ca:
db:a2:ca:f2:d8:84:e0:42:1e:f2:48:35:48:ce:18:2d:6d:14:
0d:ef:bb:a0:a9:bd:81:19:a7:f8:af:3b:da:0d:0e:15:ce:b3:
2f:77:3c:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH8+B4Va5dh7zvc97RZnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi
MDA5OWYwHhcNMjUwMTAxMTM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTgzZDVjM2MyYzFmMjJkYjg3MmY4YTA0NDg4YzcwNjYwMzViZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZwceSYJmnqJi9bcZQyX6J+gfNYG
NAbU8gZCnabjf/eJsN/h86i/LGAMhfxxqwx6TBJe/D28TAhJXTfC640tS3+RQlZw
Ys2KfyJVvoD+NiQm/twI3A8RCXlt+lHXXmaMxjgAznIVm9ia2lB+UjU4cMQJ19MV
ekWKE/VxqXxQUKq4KoTZ6N7XKp5knCQ6J4AYRdmIAbQ0uCuPyi5MiPZw2XIkTDIq
u/hiuGMPZRVx0xnqrtaabaOcaFo+auxFoRb4PnSoe7UOKwp1Vx9GEuIK6M79eT/1
XPJ/9sy7c6RX0W1IoGTMXKLmjv51gDGXF1zOd0kF/26h8qZK3hHTJeTg1QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLWD1cPCwfItuHL4oESIxwZgNb5AMB8GA1UdIwQY
MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt
NmE0OWI1YTMxMjk0LzEvdFlQVnc4TEI4aTI0Y3ZpZ1JJakhCbUExdmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0
LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwyagMA0E
AgACMAcDBQMqEaOAMA0GCSqGSIb3DQEBCwUAA4IBAQCaOZRZomhVRRkz7Q/AEm3c
dMTVpA14Yem+yMoBdQMeNuSl/mL6uZrH7yHvaHRUO5KTPbSV0EwNnTeKzDxgsc/n
Bmjk2ZwtUeY+3O/LLAkM8Oik87IQcARtlJMVmgOhd6ufvQbhex8xzrJ1Ays0fUYj
CdxsnXax7O4jgZHc3oZOHR8PwF0DcOX+t9l/fWHGqZo97uueFaicgzTpr8Zhy/Ti
7Ji3xMD9NEvb+WFZm8H0y5oSUXKBR6qv78CpEhccLzTopL/CPMmIWqbcH0GRt/F6
MW98fX9RNcrbosry2ITgQh7ySDVIzhgtbRQN77ugqb2BGaf4rzvaDQ4VzrMvdzwd
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net