Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/dbdtXEoFKML0dgLhZpEobOK87zg.roa
File: dbdtXEoFKML0dgLhZpEobOK87zg.roa (raw, json)
Hash identifier: yCE5nlxywhzR1KavXb+2RY9pAnMMkFVouBIKKVOpGSA=
Subject key identifier: 75:B7:6D:5C:4A:05:28:C2:F4:76:02:E1:66:91:28:6C:E2:BC:EF:38
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 0193F44E306C7046B9B7284B2E84BF84B87E
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/dbdtXEoFKML0dgLhZpEobOK87zg.roa
Signing time: Mon 23 Dec 2024 16:16:25 +0000
ROA not before: Mon 23 Dec 2024 16:16:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:2083::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:4e:30:6c:70:46:b9:b7:28:4b:2e:84:bf:84:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Dec 23 16:16:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75b76d5c4a0528c2f47602e16691286ce2bcef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:90:ea:aa:f9:b0:e6:20:13:8e:b7:35:10:
1a:f5:c7:03:31:b1:e4:e0:60:40:2e:cd:c0:42:09:
d2:3c:57:f2:2b:d0:21:45:d4:ca:25:64:cb:eb:2e:
a7:8f:18:be:43:5b:0c:41:dd:11:c2:03:cb:30:0a:
ac:e0:72:1e:dd:c0:8b:b5:4b:b0:b0:23:cb:0a:64:
f1:ca:f1:b0:2e:d0:12:46:e4:ae:f3:2a:47:e3:ac:
31:bc:a6:c8:79:34:f0:b0:8e:1f:c8:8a:b0:c5:82:
fa:f6:ce:88:ff:2d:e1:24:b0:a9:e4:31:66:60:bd:
e8:21:ba:91:63:02:41:7f:e0:f0:b4:f0:76:43:87:
79:52:dc:dd:5f:23:17:01:da:b7:4f:a5:3b:bc:36:
3e:3f:97:a5:ab:a0:6c:28:0a:15:dc:d4:2e:d2:22:
3f:0e:bf:a0:a6:17:ab:8f:5e:bc:3a:c4:43:c8:37:
fc:a3:bc:d1:2e:73:0e:3b:42:55:a8:30:80:8b:67:
f8:18:26:d0:c8:e6:a6:af:20:20:21:94:30:50:1a:
c3:4c:a7:ab:d8:e2:02:97:42:ef:e4:15:43:2a:7c:
5e:06:87:9e:a5:d1:0a:ef:4b:cb:25:fe:7d:5b:6e:
48:6d:5b:9d:2f:39:00:8f:4a:2d:46:b2:7b:16:1a:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:6D:5C:4A:05:28:C2:F4:76:02:E1:66:91:28:6C:E2:BC:EF:38
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/dbdtXEoFKML0dgLhZpEobOK87zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2083::/32
Signature Algorithm: sha256WithRSAEncryption
2a:5e:76:9e:19:60:67:6d:e1:ba:ed:bd:4e:bf:b4:d4:0f:8e:
cd:f9:36:07:4a:2f:26:18:84:4e:3d:80:14:6c:48:29:b1:ff:
d4:3c:be:8a:7f:30:82:6d:8f:d7:ea:8b:4d:f2:d3:05:2b:ca:
13:4b:af:74:36:4d:6a:ab:3e:2a:7d:45:7f:3d:3f:79:3c:80:
0e:b2:12:9c:a0:a9:19:06:77:c8:b5:0b:5f:59:ef:bb:06:96:
4d:7a:b7:12:f9:ff:e2:d3:66:33:54:55:09:ef:fa:d4:89:c7:
f5:33:e3:5b:33:64:fe:18:6e:61:59:eb:2c:93:6a:82:05:ff:
c1:cb:f0:b5:d2:d8:5e:2d:ee:70:f3:7a:c0:d2:df:69:4f:ad:
9f:da:e9:c8:98:82:87:c8:53:a8:ea:ea:f8:52:ec:62:82:02:
ab:4a:67:50:96:e0:bb:5b:d5:2a:5f:10:23:2e:51:d0:36:6d:
bf:68:64:0f:a4:67:c9:e6:47:1f:c5:bb:54:4d:5b:82:25:f8:
2b:c1:ff:01:a7:2c:46:bd:c1:17:5c:48:42:fd:ae:e7:2a:be:
ed:d8:65:d4:e1:2c:40:f4:61:eb:c8:9f:3a:d0:e5:8a:03:b6:
61:3b:ea:55:20:06:b8:dd:d3:48:22:5c:bf:8e:13:f9:9a:56:
d4:5b:0e:17
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZP0TjBscEa5tyhLLoS/hLh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWNjZDgzMGI3ZTAzMzA4YmY1Y2YyNWU2N2E3ZmMyYmRl
MDk1N2MwHhcNMjQxMjIzMTYxNjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWI3NmQ1YzRhMDUyOGMyZjQ3NjAyZTE2NjkxMjg2Y2UyYmNlZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTGQ6qr5sOYgE463NRAa9ccDMbHk
4GBALs3AQgnSPFfyK9AhRdTKJWTL6y6njxi+Q1sMQd0RwgPLMAqs4HIe3cCLtUuw
sCPLCmTxyvGwLtASRuSu8ypH46wxvKbIeTTwsI4fyIqwxYL69s6I/y3hJLCp5DFm
YL3oIbqRYwJBf+DwtPB2Q4d5UtzdXyMXAdq3T6U7vDY+P5elq6BsKAoV3NQu0iI/
Dr+gpherj168OsRDyDf8o7zRLnMOO0JVqDCAi2f4GCbQyOamryAgIZQwUBrDTKer
2OICl0Lv5BVDKnxeBoeepdEK70vLJf59W25IbVudLzkAj0otRrJ7FhodTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHW3bVxKBSjC9HYC4WaRKGzivO84MB8GA1UdIwQY
MBaAFMqczYMLfgMwi/XPJeZ6f8K94JV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQt
ZDFjZGUyNDY1Zjg5LzEvZGJkdFhFb0ZLTUwwZGdMaFpwRW9iT0s4N3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQtZDFjZGUyNDY1Zjg5
LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEggzAN
BgkqhkiG9w0BAQsFAAOCAQEAKl52nhlgZ23huu29Tr+01A+Ozfk2B0ovJhiETj2A
FGxIKbH/1Dy+in8wgm2P1+qLTfLTBSvKE0uvdDZNaqs+Kn1Ffz0/eTyADrISnKCp
GQZ3yLULX1nvuwaWTXq3Evn/4tNmM1RVCe/61InH9TPjWzNk/hhuYVnrLJNqggX/
wcvwtdLYXi3ucPN6wNLfaU+tn9rpyJiCh8hTqOrq+FLsYoICq0pnUJbgu1vVKl8Q
Iy5R0DZtv2hkD6RnyeZHH8W7VE1bgiX4K8H/AacsRr3BF1xIQv2u5yq+7dhl1OEs
QPRh68ifOtDligO2YTvqVSAGuN3TSCJcv44T+ZpW1FsOFw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:09 2025 by rpki-client