Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/R3NkK5Kb_cK6QtE_FTUXSg8mvI4.roa
File: R3NkK5Kb_cK6QtE_FTUXSg8mvI4.roa (raw, json)
Hash identifier: tMot0wTx9v6I0to5+e5sXvRiFNFf3bqpg+BhXWI8eJ0=
Subject key identifier: 47:73:64:2B:92:9B:FD:C2:BA:42:D1:3F:15:35:17:4A:0F:26:BC:8E
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019513C21AA6533EB9F98741F0D7E86F9C96
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/R3NkK5Kb_cK6QtE_FTUXSg8mvI4.roa
Signing time: Mon 17 Feb 2025 11:54:02 +0000
ROA not before: Mon 17 Feb 2025 11:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a09:9447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:c2:1a:a6:53:3e:b9:f9:87:41:f0:d7:e8:6f:9c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 17 11:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4773642b929bfdc2ba42d13f1535174a0f26bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:53:15:91:ad:c5:49:26:4f:1c:d9:1e:41:
f1:3c:65:7a:ef:ec:9a:3e:dd:ea:d2:f7:8a:a2:f4:
f3:56:bd:dc:46:76:21:16:e7:b8:65:03:96:1f:e8:
40:31:b5:39:95:a7:ba:01:a2:71:f5:2c:8c:c1:ab:
d7:e5:f3:7b:a6:34:71:16:51:9a:9e:26:8e:31:16:
9c:80:59:a4:e4:8f:b8:67:33:be:5a:ea:bd:43:b6:
72:69:6b:de:fa:16:f7:55:65:e8:18:00:18:3b:ba:
6a:9b:0d:0c:8e:f0:e7:40:eb:87:bb:96:aa:ea:e5:
56:e7:3a:3d:0a:be:af:64:b1:8b:36:7f:62:54:2c:
cb:31:e3:be:21:54:13:10:75:8e:76:47:d6:d1:cc:
62:6d:3c:72:89:ab:7a:06:e0:72:e5:8c:98:55:65:
98:35:a1:e8:07:3a:a8:ea:b6:0f:87:54:7d:33:51:
54:cc:cd:ca:87:2a:1d:de:00:ce:4d:21:85:c8:9c:
32:8a:6a:49:15:e1:11:9b:da:62:7a:ba:58:fa:5f:
dd:cb:92:da:8f:86:46:75:11:f8:8d:37:3b:39:0b:
90:f1:1d:4e:ae:55:25:26:d5:2b:a2:cf:55:80:2f:
d4:26:2b:f4:f1:2f:80:0d:b0:13:76:6d:6d:44:7c:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:64:2B:92:9B:FD:C2:BA:42:D1:3F:15:35:17:4A:0F:26:BC:8E
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/R3NkK5Kb_cK6QtE_FTUXSg8mvI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9447::/32
Signature Algorithm: sha256WithRSAEncryption
7e:96:55:22:1e:0e:99:82:91:a7:72:63:cf:8e:fc:09:49:69:
e1:96:61:79:e0:97:db:21:c1:c2:c4:9f:9e:dd:64:9c:44:79:
d6:3a:ac:2c:a4:80:40:3b:76:a3:da:a0:c6:ee:3b:bf:9c:da:
8a:fc:a3:06:99:6c:9e:8f:12:2f:24:7e:07:86:76:34:22:14:
30:27:32:56:ab:46:89:63:e7:d1:18:9f:0d:f0:e3:0e:a1:d6:
5b:34:6a:aa:24:b8:61:7d:ab:78:2d:c9:96:06:be:48:22:bc:
7c:04:31:a6:69:ca:ce:56:d4:d2:d6:c7:76:dc:f9:88:94:bb:
48:18:44:23:fd:9b:72:e1:53:28:d6:a2:e3:ed:a0:cc:be:9d:
ea:c0:04:fa:cb:7d:0c:f1:4b:84:9d:2e:65:16:28:fa:4b:f4:
b6:25:dc:8a:c9:36:67:97:c8:52:3c:ff:d8:56:a6:63:37:ba:
5f:06:9a:82:e1:fd:75:b1:08:d8:7e:10:0e:fe:50:26:5f:78:
e1:d7:e3:8d:07:6b:0c:e7:49:68:86:fa:6b:eb:f9:44:10:6f:
4e:3c:f6:7b:5f:37:2b:54:4f:cf:8e:82:9d:5f:ea:29:88:a6:
b5:3e:dc:a3:6e:59:c7:76:88:9d:36:e9:7a:92:45:58:3e:11:
82:a8:49:0d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZUTwhqmUz65+YdB8Nfob5yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwMjE3MTE1NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzczNjQyYjkyOWJmZGMyYmE0MmQxM2YxNTM1MTc0YTBmMjZiYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AlTFZGtxUkmTxzZHkHxPGV67+ya
Pt3q0veKovTzVr3cRnYhFue4ZQOWH+hAMbU5lae6AaJx9SyMwavX5fN7pjRxFlGa
niaOMRacgFmk5I+4ZzO+Wuq9Q7ZyaWve+hb3VWXoGAAYO7pqmw0MjvDnQOuHu5aq
6uVW5zo9Cr6vZLGLNn9iVCzLMeO+IVQTEHWOdkfW0cxibTxyiat6BuBy5YyYVWWY
NaHoBzqo6rYPh1R9M1FUzM3Khyod3gDOTSGFyJwyimpJFeERm9pierpY+l/dy5La
j4ZGdRH4jTc7OQuQ8R1OrlUlJtUros9VgC/UJiv08S+ADbATdm1tRHyiDwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEdzZCuSm/3CukLRPxU1F0oPJryOMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvUjNOa0s1S2JfY0s2UXRFX0ZUVVhTZzhtdkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgmURzAN
BgkqhkiG9w0BAQsFAAOCAQEAfpZVIh4OmYKRp3Jjz478CUlp4ZZheeCX2yHBwsSf
nt1knER51jqsLKSAQDt2o9qgxu47v5zaivyjBplsno8SLyR+B4Z2NCIUMCcyVqtG
iWPn0RifDfDjDqHWWzRqqiS4YX2reC3Jlga+SCK8fAQxpmnKzlbU0tbHdtz5iJS7
SBhEI/2bcuFTKNai4+2gzL6d6sAE+st9DPFLhJ0uZRYo+kv0tiXcisk2Z5fIUjz/
2FamYze6XwaaguH9dbEI2H4QDv5QJl944dfjjQdrDOdJaIb6a+v5RBBvTjz2e183
K1RPz46CnV/qKYimtT7co25Zx3aInTbpepJFWD4RgqhJDQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:41 2025 by rpki-client