Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4MI2jY1H4-ZasoiqZXtnUllrrtI.roa
File: 4MI2jY1H4-ZasoiqZXtnUllrrtI.roa (raw, json)
Hash identifier: pHQ7zVzPM8TxEXSr/+xnZK5oOT/GQyhxtw8Ccb7qumY=
Subject key identifier: E0:C2:36:8D:8D:47:E3:E6:5A:B2:88:AA:65:7B:67:52:59:6B:AE:D2
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F8322A7F0D8D3F3C8246603CC85D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4MI2jY1H4-ZasoiqZXtnUllrrtI.roa
Signing time: Thu 02 Jan 2025 01:48:16 +0000
ROA not before: Thu 02 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200709
IP address blocks: 2a02:610:fffa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f8:32:2a:7f:0d:8d:3f:3c:82:46:60:3c:c8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c2368d8d47e3e65ab288aa657b6752596baed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:ec:ef:07:02:f4:a1:f7:c4:af:e9:a1:bb:
90:8e:73:bc:c0:0a:8a:93:00:96:fd:c2:4b:e1:82:
36:91:fe:09:ac:de:01:70:58:cc:36:dd:52:80:a7:
68:cc:b1:7b:a9:22:91:bf:4d:ea:9e:bc:07:5b:5e:
08:8f:7e:1b:e8:fc:b7:f5:13:16:98:e9:1a:84:7f:
8e:af:9b:81:8b:80:e7:c7:07:3b:d7:ef:c5:e5:12:
aa:4d:51:cb:c2:2f:c2:34:27:17:fb:5a:b0:3d:bb:
12:22:bb:9d:76:57:5d:3b:32:b5:9c:d2:47:a4:a9:
18:af:6d:ac:f7:1b:1c:48:da:58:1b:6d:57:21:8a:
77:4c:13:02:b4:f4:19:ce:a8:8a:2b:ef:28:17:4d:
9f:fa:93:4b:a4:cc:6b:78:6d:63:fa:19:90:38:b8:
43:06:0f:51:01:9c:d5:9c:9b:ae:3b:e5:7b:11:57:
33:e8:bb:c4:32:4c:c8:fb:e5:71:9c:c5:27:a0:a7:
9a:dc:38:98:91:c1:b0:b0:42:98:60:f9:71:e5:47:
a5:66:c4:79:ed:f5:85:98:51:ad:03:44:48:66:aa:
65:a4:bb:bc:ae:c5:b3:d1:74:70:c9:65:5b:7b:40:
28:01:b4:8b:ce:cc:cc:5a:67:19:a0:63:28:50:c0:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:36:8D:8D:47:E3:E6:5A:B2:88:AA:65:7B:67:52:59:6B:AE:D2
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/4MI2jY1H4-ZasoiqZXtnUllrrtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:610:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
90:87:f9:d5:29:3d:89:77:4a:4b:f0:db:a5:7b:8e:69:c3:49:
f8:ef:e9:7a:62:60:ef:67:5e:5a:19:d9:51:6b:b2:a5:1c:d8:
16:f7:c6:9f:df:46:f9:24:ca:57:04:ad:4d:98:04:22:bf:cd:
be:03:fd:b3:3d:c1:90:78:bb:01:27:dd:26:ef:93:f8:fd:4f:
5e:07:42:2a:87:46:6b:9e:66:54:73:bc:5e:bb:ca:51:d2:0f:
26:4e:89:de:d2:f9:f0:9f:97:50:a2:35:11:0d:28:1e:5c:6c:
b0:c2:a6:87:a7:1f:5d:0c:7e:ce:c9:aa:2c:c3:d4:85:b0:28:
7e:4f:1a:e1:3b:80:30:9a:f1:2c:a8:75:35:13:bf:9f:cc:ec:
9d:d3:91:32:7d:a9:64:7d:fe:3b:4a:ca:63:ad:76:be:ce:a5:
cb:3c:8c:64:01:cf:9d:14:71:cd:f0:56:e8:10:d4:73:23:d3:
a2:b9:d0:96:1f:76:a0:fa:37:b2:ca:e2:74:a1:82:f5:30:7e:
bd:d6:38:b2:ad:25:f4:af:6f:a5:84:ed:e8:d7:79:5b:3c:15:
a4:c4:40:3a:af:95:1e:9b:5e:84:1d:d6:e0:90:d9:f9:a1:45:
fb:22:bc:b9:2b:71:b7:89:6c:be:f3:20:f9:ac:52:6f:50:ee:
9b:14:1c:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQksvgyKn8NjT88gkZgPMhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGMyMzY4ZDhkNDdlM2U2NWFiMjg4YWE2NTdiNjc1MjU5NmJhZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wzs7wcC9KH3xK/pobuQjnO8wAqK
kwCW/cJL4YI2kf4JrN4BcFjMNt1SgKdozLF7qSKRv03qnrwHW14Ij34b6Py39RMW
mOkahH+Or5uBi4Dnxwc71+/F5RKqTVHLwi/CNCcX+1qwPbsSIruddlddOzK1nNJH
pKkYr22s9xscSNpYG21XIYp3TBMCtPQZzqiKK+8oF02f+pNLpMxreG1j+hmQOLhD
Bg9RAZzVnJuuO+V7EVcz6LvEMkzI++VxnMUnoKea3DiYkcGwsEKYYPlx5UelZsR5
7fWFmFGtA0RIZqplpLu8rsWz0XRwyWVbe0AoAbSLzszMWmcZoGMoUMAUrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFODCNo2NR+PmWrKIqmV7Z1JZa67SMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvNE1JMmpZMUg0LVphc29pcVpYdG5VbGxycnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIGEP/6
MA0GCSqGSIb3DQEBCwUAA4IBAQCQh/nVKT2Jd0pL8Nule45pw0n47+l6YmDvZ15a
GdlRa7KlHNgW98af30b5JMpXBK1NmAQiv82+A/2zPcGQeLsBJ90m75P4/U9eB0Iq
h0ZrnmZUc7xeu8pR0g8mTone0vnwn5dQojURDSgeXGywwqaHpx9dDH7Oyaosw9SF
sCh+TxrhO4AwmvEsqHU1E7+fzOyd05Eyfalkff47SspjrXa+zqXLPIxkAc+dFHHN
8FboENRzI9OiudCWH3ag+jeyyuJ0oYL1MH691jiyrSX0r2+lhO3o13lbPBWkxEA6
r5Uem16EHdbgkNn5oUX7Iry5K3G3iWy+8yD5rFJvUO6bFBwh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:03 2025 by rpki-client