Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RIwSwMwwKOJDUBaW1UsZ2DewcpY.roa
File: RIwSwMwwKOJDUBaW1UsZ2DewcpY.roa (raw, json)
Hash identifier: zaxAIL+MoosE8IIQKji63Kw7b+bAHahkYCdz/3Lo+ow=
Subject key identifier: 44:8C:12:C0:CC:30:28:E2:43:50:16:96:D5:4B:19:D8:37:B0:72:96
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0193ACDE80287375857C439C98D318E1AB54
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RIwSwMwwKOJDUBaW1UsZ2DewcpY.roa
Signing time: Mon 09 Dec 2024 19:21:22 +0000
ROA not before: Mon 09 Dec 2024 19:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:5a40::/32 maxlen: 32
2a11:5a42::/32 maxlen: 32
2a12:7304::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:de:80:28:73:75:85:7c:43:9c:98:d3:18:e1:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Dec 9 19:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448c12c0cc3028e243501696d54b19d837b07296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:a2:3f:eb:bf:32:29:e9:f4:65:fe:60:ac:
e3:a9:5c:93:4b:6a:2e:bb:71:d2:d3:4d:21:a5:ce:
bc:de:bb:91:48:bc:68:08:06:4c:44:bc:97:5f:fb:
b0:4d:d8:7f:26:6f:1a:08:e5:67:a3:c6:13:7e:55:
4d:34:7b:55:65:65:a3:11:66:0f:d1:f9:b5:df:3d:
1c:4b:1e:49:af:f8:82:45:6f:1d:dc:09:4e:ba:cc:
cf:8d:a1:12:fe:17:84:4f:e2:b9:3b:5a:69:88:81:
f4:be:f6:5c:e3:75:1d:c6:2e:5e:a6:d3:67:58:41:
cf:c4:28:41:b1:ed:cf:90:ce:30:d9:72:1f:a9:7c:
3e:76:7a:d1:af:3d:ee:50:3e:f6:43:ec:55:96:0a:
4a:b5:c0:2e:2d:8f:92:56:5c:29:86:1a:6d:75:ce:
73:d1:88:1a:d5:e9:5d:72:b0:81:e6:33:51:69:8a:
e0:54:85:33:84:2f:8a:51:fd:b1:ef:5a:05:32:c7:
db:cb:73:e4:38:46:8a:33:12:36:3f:39:d2:73:c4:
99:5c:6b:73:62:e4:90:44:ee:0e:42:b4:91:70:12:
a4:6e:dd:c5:03:80:b0:0b:30:2e:fd:85:de:14:81:
4a:07:5b:0e:39:94:77:37:03:ee:bc:c7:25:e4:08:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:12:C0:CC:30:28:E2:43:50:16:96:D5:4B:19:D8:37:B0:72:96
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RIwSwMwwKOJDUBaW1UsZ2DewcpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a40::/32
2a11:5a42::/32
2a12:7304::/32
Signature Algorithm: sha256WithRSAEncryption
66:6b:aa:7f:1f:46:a1:8a:20:ec:df:38:1b:4e:83:25:68:63:
3e:82:90:7c:ab:9e:01:d0:08:aa:7a:5a:1e:5c:56:8f:98:0b:
61:21:92:de:14:c8:bb:fe:a0:a0:16:ad:50:70:15:9e:1f:d3:
cf:c5:d5:ca:56:70:c2:61:41:74:39:3d:8b:6c:9a:8d:95:f2:
94:6c:97:35:6d:da:36:38:14:80:44:40:bb:6c:ea:0b:f6:09:
94:60:d2:3b:fa:cc:a3:a0:b6:c3:7b:36:3f:06:8c:f1:6e:59:
cf:aa:79:f0:3c:d2:45:c8:a5:c2:e3:99:b7:93:a4:af:22:48:
89:13:76:0a:1b:fe:0d:4b:44:99:26:09:49:a1:d2:27:f1:c8:
e4:3a:86:59:4b:ed:06:84:08:32:7c:2d:20:a4:c2:20:83:56:
35:17:76:a1:1f:c8:4c:84:b2:33:63:3c:ab:c3:9d:cc:71:15:
d7:c1:31:96:d0:c2:d5:6a:dd:e4:8d:97:9a:8e:e5:09:f7:de:
50:fe:3c:82:c9:41:fd:9a:39:29:69:05:2f:58:47:63:a2:cc:
3d:ea:86:e1:ef:06:24:c8:00:55:c7:bd:d5:3f:de:67:25:d6:
32:35:21:95:c7:c8:bd:d8:9c:e6:cf:12:65:fd:8e:dc:71:cb:
39:00:59:65
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZOs3oAoc3WFfEOcmNMY4atUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjQxMjA5MTkyMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDhjMTJjMGNjMzAyOGUyNDM1MDE2OTZkNTRiMTlkODM3YjA3Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyViiP+u/Minp9GX+YKzjqVyTS2ou
u3HS000hpc683ruRSLxoCAZMRLyXX/uwTdh/Jm8aCOVno8YTflVNNHtVZWWjEWYP
0fm13z0cSx5Jr/iCRW8d3AlOuszPjaES/heET+K5O1ppiIH0vvZc43Udxi5eptNn
WEHPxChBse3PkM4w2XIfqXw+dnrRrz3uUD72Q+xVlgpKtcAuLY+SVlwphhptdc5z
0Yga1eldcrCB5jNRaYrgVIUzhC+KUf2x71oFMsfby3PkOEaKMxI2PznSc8SZXGtz
YuSQRO4OQrSRcBKkbt3FA4CwCzAu/YXeFIFKB1sOOZR3NwPuvMcl5AiUbQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFESMEsDMMCjiQ1AWltVLGdg3sHKWMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvUkl3U3dNd3dLT0pEVUJhVzFVc1oyRGV3Y3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKhFaQAMF
ACoRWkIDBQAqEnMEMA0GCSqGSIb3DQEBCwUAA4IBAQBma6p/H0ahiiDs3zgbToMl
aGM+gpB8q54B0AiqeloeXFaPmAthIZLeFMi7/qCgFq1QcBWeH9PPxdXKVnDCYUF0
OT2LbJqNlfKUbJc1bdo2OBSAREC7bOoL9gmUYNI7+syjoLbDezY/BozxblnPqnnw
PNJFyKXC45m3k6SvIkiJE3YKG/4NS0SZJglJodIn8cjkOoZZS+0GhAgyfC0gpMIg
g1Y1F3ahH8hMhLIzYzyrw53McRXXwTGW0MLVat3kjZeajuUJ995Q/jyCyUH9mjkp
aQUvWEdjosw96obh7wYkyABVx73VP95nJdYyNSGVx8i92JzmzxJl/Y7cccs5AFll
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:36 2025 by rpki-client