Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa
File: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (raw, json)
Hash identifier: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=
Subject key identifier: 39:B4:FB:B5:8A:F0:05:71:51:CA:36:DD:98:D7:CC:26:A6:48:D8:07
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F9308945AC77A7967E8300C45C697
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39753
IP address blocks: 2a0d:2406:400::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:93:08:94:5a:c7:7a:79:67:e8:30:0c:45:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39b4fbb58af0057151ca36dd98d7cc26a648d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:36:21:4d:e2:28:b8:33:4f:bb:4c:92:ce:
62:4f:de:61:f9:fd:66:22:93:c0:f0:e5:00:2d:5d:
7a:61:4b:72:02:bb:8a:0d:f1:94:7f:94:01:c1:e7:
db:26:55:79:cd:68:e4:e5:e4:ab:b3:cf:22:e4:8f:
99:d5:6d:4d:03:72:6d:67:b4:ab:0b:0f:98:e3:0e:
ae:a4:90:31:55:95:3b:a6:15:e9:af:18:d5:4b:1b:
b9:16:25:b6:83:f3:9f:00:9e:d3:7e:73:56:f7:f2:
66:88:93:f9:eb:59:9e:cb:8d:a8:32:15:4e:c3:6f:
13:db:3c:c5:a2:38:d0:0a:d9:03:a8:96:e8:ca:a2:
6b:95:4b:12:ee:f1:87:49:46:dd:84:95:77:60:4e:
f9:ad:6f:78:6d:46:aa:89:86:a0:83:bf:2e:c7:78:
ba:4b:1a:0d:37:72:95:ba:78:34:79:3b:d6:dc:ab:
68:c2:26:ef:bb:9f:97:76:e5:86:1c:e3:2d:a7:b0:
bf:24:2f:45:fb:77:c2:55:76:1c:e1:89:bf:0c:d5:
b9:58:e3:98:6d:49:c8:09:f6:8f:0c:c8:a2:a1:d5:
fb:82:fd:9f:2c:5e:4d:8f:f8:f8:4b:f6:9c:70:d2:
56:47:84:8d:01:33:09:95:ae:38:48:88:65:85:67:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:FB:B5:8A:F0:05:71:51:CA:36:DD:98:D7:CC:26:A6:48:D8:07
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:400::/39
Signature Algorithm: sha256WithRSAEncryption
05:a9:c0:0c:2b:aa:1f:6e:e5:6c:34:34:06:64:97:18:ae:f1:
2d:08:08:23:9f:ff:da:82:86:25:12:d2:89:17:7f:3b:b5:54:
4e:59:6c:c4:dd:e9:35:ee:87:1e:e2:96:c5:ff:6b:cb:ea:ac:
a9:7d:1c:49:ed:37:f4:66:8b:05:5a:1f:c6:8c:03:7b:b4:36:
e4:e5:d3:07:3d:e5:03:e0:53:75:21:48:86:43:e5:f2:3d:64:
b8:8e:d9:81:46:75:09:a9:67:7e:de:7c:e1:83:ab:2d:f3:e8:
88:ea:1b:04:e4:4a:13:c3:6c:be:20:9a:0c:56:8c:ce:62:75:
78:61:44:5a:65:03:9b:af:ac:12:0c:27:fd:30:19:bb:ac:0f:
10:58:e3:e0:82:0e:a6:03:db:32:16:19:78:f6:25:6d:52:9f:
87:e6:08:c4:6a:18:28:be:1f:d7:76:60:a5:a2:6d:ac:27:b2:
b8:3b:cd:c6:83:cc:84:82:19:fb:bf:ec:01:1f:aa:0a:55:8c:
3b:e3:1b:45:cd:ac:32:a7:43:f4:82:c0:4d:f1:36:91:5b:0a:
e1:16:bb:c0:32:b8:cd:09:11:54:7a:0a:e0:ee:c5:6f:1c:3d:
f7:48:8c:bd:d2:f1:fe:1a:58:bf:6b:62:08:fc:c1:d5:46:ed:
56:2c:c0:93
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlj5MIlFrHenln6DAMRcaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWI0ZmJiNThhZjAwNTcxNTFjYTM2ZGQ5OGQ3Y2MyNmE2NDhkODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaQ2IU3iKLgzT7tMks5iT95h+f1m
IpPA8OUALV16YUtyAruKDfGUf5QBwefbJlV5zWjk5eSrs88i5I+Z1W1NA3JtZ7Sr
Cw+Y4w6upJAxVZU7phXprxjVSxu5FiW2g/OfAJ7TfnNW9/JmiJP561mey42oMhVO
w28T2zzFojjQCtkDqJboyqJrlUsS7vGHSUbdhJV3YE75rW94bUaqiYagg78ux3i6
SxoNN3KVung0eTvW3Ktowibvu5+XduWGHOMtp7C/JC9F+3fCVXYc4Ym/DNW5WOOY
bUnICfaPDMiiodX7gv2fLF5Nj/j4S/accNJWR4SNATMJla44SIhlhWfl7QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDm0+7WK8AVxUco23ZjXzCamSNgHMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvT2JUN3RZcndCWEZSeWpiZG1OZk1KcVpJMkFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg0kBgQw
DQYJKoZIhvcNAQELBQADggEBAAWpwAwrqh9u5Ww0NAZklxiu8S0ICCOf/9qChiUS
0okXfzu1VE5ZbMTd6TXuhx7ilsX/a8vqrKl9HEntN/RmiwVaH8aMA3u0NuTl0wc9
5QPgU3UhSIZD5fI9ZLiO2YFGdQmpZ37efOGDqy3z6IjqGwTkShPDbL4gmgxWjM5i
dXhhRFplA5uvrBIMJ/0wGbusDxBY4+CCDqYD2zIWGXj2JW1Sn4fmCMRqGCi+H9d2
YKWibawnsrg7zcaDzISCGfu/7AEfqgpVjDvjG0XNrDKnQ/SCwE3xNpFbCuEWu8Ay
uM0JEVR6CuDuxW8cPfdIjL3S8f4aWL9rYgj8wdVG7VYswJM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:57:28 2025 by rpki-client