Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa
File: ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa (raw, json)
Hash identifier: 7/HLb9yrgfenir+DMxSIjZmUv+UwMCuizDLWvP+aaNw=
Subject key identifier: 12:59:A6:52:2D:81:03:9C:5F:97:74:46:C0:A4:E7:68:BC:A1:6E:25
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01958B190E435140662EA151737B312136B3
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa
Signing time: Wed 12 Mar 2025 16:03:49 +0000
ROA not before: Wed 12 Mar 2025 16:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48347
IP address blocks: 2a06:1301:4300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:19:0e:43:51:40:66:2e:a1:51:73:7b:31:21:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Mar 12 16:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1259a6522d81039c5f977446c0a4e768bca16e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:b4:d4:47:77:48:1d:4a:d1:11:ba:20:3b:
4b:d1:2e:11:5a:56:25:ca:3a:16:21:2d:56:04:81:
1c:7b:5c:d6:b7:2f:58:3d:e0:f9:f3:6e:1b:16:45:
a0:3e:8c:95:51:0d:44:4f:83:c6:e1:06:ec:26:33:
41:2a:09:b0:d5:54:78:fb:30:d9:9b:95:ab:3d:eb:
ff:4e:86:6e:ae:94:fe:72:da:03:62:2f:04:1f:bd:
6c:91:93:eb:f7:67:6e:7e:5a:a4:eb:28:20:ad:d7:
9d:bb:f7:98:45:d6:77:b3:d8:9f:54:f6:99:61:1e:
09:ad:82:67:c2:c6:6b:cd:24:95:56:8f:37:f0:01:
a7:36:9e:51:b9:7a:17:71:89:7a:10:bd:6f:7a:c1:
bc:82:62:b0:c5:8d:61:84:43:ae:0e:a6:ed:fb:7e:
b0:a8:8f:c8:62:7c:70:db:f6:8c:9c:a4:d8:a8:1d:
b8:aa:c7:56:75:70:9a:0a:c7:61:92:bd:e6:b4:02:
56:02:5b:73:8a:18:36:6a:86:01:da:2d:b7:07:11:
3a:8b:6e:ba:11:d9:70:b5:f9:a9:e3:aa:d6:ca:bc:
64:77:73:83:d3:10:d4:01:3b:cf:b8:52:26:6a:4b:
e4:b1:83:c3:97:2f:dd:c0:ad:cf:02:a3:95:6a:37:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:A6:52:2D:81:03:9C:5F:97:74:46:C0:A4:E7:68:BC:A1:6E:25
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4300::/48
Signature Algorithm: sha256WithRSAEncryption
40:53:ba:64:12:06:4d:94:51:ed:e5:bf:9b:d8:5b:89:6e:e4:
ec:f9:1a:63:cd:84:ab:d9:07:8a:a8:9c:7e:e3:c7:91:77:87:
fc:37:51:c9:1d:58:ed:8c:e7:13:5c:8c:87:1a:ae:93:d0:8b:
56:21:af:45:e1:0a:23:5b:fe:87:ed:d5:64:db:40:db:d7:00:
93:e0:53:7b:77:59:a8:1f:84:51:2b:63:e2:a4:0f:9e:34:5f:
25:a1:61:2d:e1:6b:da:7e:73:e4:c0:77:13:88:2f:59:dd:f6:
ac:e8:e6:fc:26:24:48:a9:06:af:42:f2:ec:bb:b2:f5:7b:39:
48:45:e7:e6:10:45:8d:9b:18:a4:38:16:25:a7:14:5d:fe:bf:
90:83:9e:1c:f7:82:2d:7c:0d:32:a4:af:d1:d6:c8:fb:a4:71:
40:5b:3e:95:dc:7f:0c:ec:4b:e4:54:7a:87:94:40:69:78:26:
06:a0:ab:1f:ff:d9:06:ab:ae:b0:eb:ee:f5:9e:ad:75:58:28:
dc:d4:e5:23:ac:57:38:87:44:cd:b0:d0:32:34:17:91:80:d4:
81:56:c6:70:79:ac:f7:ed:81:22:a5:c3:9e:67:d2:a5:69:e9:
a4:28:b2:06:95:6b:31:2a:d2:6d:15:d2:d5:68:fa:b3:00:61:
85:d2:2b:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZWLGQ5DUUBmLqFRc3sxITazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwMzEyMTYwMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU5YTY1MjJkODEwMzljNWY5Nzc0NDZjMGE0ZTc2OGJjYTE2ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5y01Ed3SB1K0RG6IDtL0S4RWlYl
yjoWIS1WBIEce1zWty9YPeD5824bFkWgPoyVUQ1ET4PG4QbsJjNBKgmw1VR4+zDZ
m5WrPev/ToZurpT+ctoDYi8EH71skZPr92duflqk6yggrdedu/eYRdZ3s9ifVPaZ
YR4JrYJnwsZrzSSVVo838AGnNp5RuXoXcYl6EL1vesG8gmKwxY1hhEOuDqbt+36w
qI/IYnxw2/aMnKTYqB24qsdWdXCaCsdhkr3mtAJWAltzihg2aoYB2i23BxE6i266
Edlwtfmp46rWyrxkd3OD0xDUATvPuFImakvksYPDly/dwK3PAqOVajfgnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBJZplItgQOcX5d0RsCk52i8oW4lMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvRWxtbVVpMkJBNXhmbDNSR3dLVG5hTHloYmlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYTAUMA
MA0GCSqGSIb3DQEBCwUAA4IBAQBAU7pkEgZNlFHt5b+b2FuJbuTs+RpjzYSr2QeK
qJx+48eRd4f8N1HJHVjtjOcTXIyHGq6T0ItWIa9F4QojW/6H7dVk20Db1wCT4FN7
d1moH4RRK2PipA+eNF8loWEt4WvafnPkwHcTiC9Z3fas6Ob8JiRIqQavQvLsu7L1
ezlIRefmEEWNmxikOBYlpxRd/r+Qg54c94ItfA0ypK/R1sj7pHFAWz6V3H8M7Evk
VHqHlEBpeCYGoKsf/9kGq66w6+71nq11WCjc1OUjrFc4h0TNsNAyNBeRgNSBVsZw
eaz37YEipcOeZ9KlaemkKLIGlWsxKtJtFdLVaPqzAGGF0ivu
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:11 2025 by rpki-client