Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nCwgDurwC06Anta3aqc5wbxK3GY.roa
File: nCwgDurwC06Anta3aqc5wbxK3GY.roa (raw, json)
Hash identifier: 6I1/PwDUPqtalY+y7tNas0+iP9HsSsWLUFXwql/UFbs=
Subject key identifier: 9C:2C:20:0E:EA:F0:0B:4E:80:9E:D6:B7:6A:A7:39:C1:BC:4A:DC:66
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 01941F8C63C34709C79A54A4EF069BD3BD20
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nCwgDurwC06Anta3aqc5wbxK3GY.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 2a06:6540:1000::/36 maxlen: 36
2a06:6540:1001::/48 maxlen: 48
2a06:6540:104b::/48 maxlen: 48
2a06:6540:11c1::/48 maxlen: 48
2a06:6540:1201::/48 maxlen: 48
2a06:6540:1241::/48 maxlen: 48
2a06:6540:1281::/48 maxlen: 48
2a06:6540:12c1::/48 maxlen: 48
2a06:6540:1301::/48 maxlen: 48
2a06:6540:1341::/48 maxlen: 48
2a06:6540:1381::/48 maxlen: 48
2a06:6540:1382::/48 maxlen: 48
2a06:6540:13c1::/48 maxlen: 48
2a06:6540:1440::/48 maxlen: 48
2a06:6540:4101::/48 maxlen: 48
2a06:6540:4181::/48 maxlen: 48
2a06:6541:1000::/36 maxlen: 36
2a06:6541:1001::/48 maxlen: 48
2a06:6541:104b::/48 maxlen: 48
2a06:6541:11c1::/48 maxlen: 48
2a06:6541:1201::/48 maxlen: 48
2a06:6541:1241::/48 maxlen: 48
2a06:6541:1281::/48 maxlen: 48
2a06:6541:12c1::/48 maxlen: 48
2a06:6541:1301::/48 maxlen: 48
2a06:6541:1341::/48 maxlen: 48
2a06:6541:1381::/48 maxlen: 48
2a06:6541:1382::/48 maxlen: 48
2a06:6541:13c1::/48 maxlen: 48
2a06:6541:1440::/48 maxlen: 48
2a06:6541:4101::/48 maxlen: 48
2a06:6541:4181::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:c3:47:09:c7:9a:54:a4:ef:06:9b:d3:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c2c200eeaf00b4e809ed6b76aa739c1bc4adc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:d0:d2:74:b0:16:a9:c8:31:1e:52:be:12:
15:cb:e8:72:8a:ef:1f:ba:de:48:9e:4d:6f:3c:68:
7c:e4:d1:d4:e6:ab:6d:e6:5c:9c:8e:67:b7:81:8f:
be:4e:d2:97:f0:71:82:ae:d9:00:c7:eb:47:49:19:
4a:d9:18:5d:28:f8:70:62:35:16:3d:42:2b:18:d9:
ae:b3:78:55:c6:44:9a:ff:e5:d1:17:e7:6d:e7:cc:
e6:48:bf:73:ca:01:bd:f7:22:5f:c6:2f:47:da:a3:
e5:54:76:2d:f1:e5:54:e7:ce:9b:d0:f3:7e:db:eb:
88:8f:cd:2f:fa:55:23:aa:b1:cd:06:39:38:f0:b3:
95:56:02:86:af:ed:34:a1:86:4f:2c:e8:77:0b:17:
c9:1d:64:51:33:22:1e:ff:36:68:bb:0c:99:80:9f:
38:27:8c:32:74:4b:1a:6a:a2:ad:f4:1e:fc:3e:64:
d3:4a:df:37:73:42:5c:cc:02:d2:27:65:39:7b:df:
21:60:94:bb:38:6f:13:7a:5a:29:21:63:c1:4e:c8:
4c:d3:fa:d7:b4:40:12:a4:9e:1f:24:fe:41:5b:77:
32:be:72:4a:02:0b:c3:2f:8e:12:e7:39:4f:63:ca:
ec:50:5f:0e:65:a4:a9:59:af:b3:a4:54:98:56:70:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:20:0E:EA:F0:0B:4E:80:9E:D6:B7:6A:A7:39:C1:BC:4A:DC:66
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nCwgDurwC06Anta3aqc5wbxK3GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:1000::/36
2a06:6540:4101::/48
2a06:6540:4181::/48
2a06:6541:1000::/36
2a06:6541:4101::/48
2a06:6541:4181::/48
Signature Algorithm: sha256WithRSAEncryption
ae:77:57:34:b2:0e:b4:a4:a0:cb:1c:de:5f:5c:bd:39:ad:e5:
98:46:2e:00:3a:e8:d8:90:25:dc:c6:92:48:ff:73:c8:a2:36:
c4:62:30:80:9a:e4:b4:59:3e:ab:e9:b4:5e:92:c2:03:79:8f:
2c:af:e3:8b:3b:2c:fd:e5:23:c0:64:f8:3d:4e:b8:0a:82:d5:
5d:89:84:aa:87:d1:17:c4:0c:0c:f8:f8:7e:fc:07:79:34:94:
6e:ed:16:24:3b:2f:71:3e:3c:77:15:94:ef:56:90:7b:f1:74:
ae:d5:7a:c7:18:9b:01:e8:cf:2e:01:c0:17:1e:1c:07:1a:07:
cd:53:4f:5d:b1:08:fe:73:9c:75:ea:45:83:e6:bc:57:03:d0:
60:a3:d0:af:d3:91:a3:4f:db:b0:8d:5a:a7:71:8f:6a:75:75:
1b:1c:9a:6f:3c:89:48:c7:27:08:b8:3a:31:f7:77:e9:25:d2:
fe:5a:fd:21:0d:9c:9b:5b:4d:0f:42:65:dc:1c:cd:46:2a:b4:
29:a8:ac:89:78:8b:cb:8a:0e:4b:0b:fa:82:90:4f:46:41:81:
8d:ca:90:33:7d:3d:91:b5:83:77:b3:0b:eb:e3:20:96:91:57:
ca:2f:2b:d7:3b:a8:c5:31:0d:8f:0c:43:77:d6:a6:cc:91:48:
e2:00:3a:4b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZQfjGPDRwnHmlSk7wab070gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjUwMTAxMDE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzJjMjAwZWVhZjAwYjRlODA5ZWQ2Yjc2YWE3MzljMWJjNGFkYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMDQ0nSwFqnIMR5SvhIVy+hyiu8f
ut5Ink1vPGh85NHU5qtt5lycjme3gY++TtKX8HGCrtkAx+tHSRlK2RhdKPhwYjUW
PUIrGNmus3hVxkSa/+XRF+dt58zmSL9zygG99yJfxi9H2qPlVHYt8eVU586b0PN+
2+uIj80v+lUjqrHNBjk48LOVVgKGr+00oYZPLOh3CxfJHWRRMyIe/zZouwyZgJ84
J4wydEsaaqKt9B78PmTTSt83c0JczALSJ2U5e98hYJS7OG8TelopIWPBTshM0/rX
tEASpJ4fJP5BW3cyvnJKAgvDL44S5zlPY8rsUF8OZaSpWa+zpFSYVnCbxQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJwsIA7q8AtOgJ7Wt2qnOcG8StxmMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvbkN3Z0R1cndDMDZBbnRhM2FxYzV3YnhLM0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAAjA0AwYEKgZlQBAD
BwAqBmVAQQEDBwAqBmVAQYEDBgQqBmVBEAMHACoGZUFBAQMHACoGZUFBgTANBgkq
hkiG9w0BAQsFAAOCAQEArndXNLIOtKSgyxzeX1y9Oa3lmEYuADro2JAl3MaSSP9z
yKI2xGIwgJrktFk+q+m0XpLCA3mPLK/jizss/eUjwGT4PU64CoLVXYmEqofRF8QM
DPj4fvwHeTSUbu0WJDsvcT48dxWU71aQe/F0rtV6xxibAejPLgHAFx4cBxoHzVNP
XbEI/nOcdepFg+a8VwPQYKPQr9ORo0/bsI1ap3GPanV1GxyabzyJSMcnCLg6Mfd3
6SXS/lr9IQ2cm1tND0Jl3BzNRiq0KaisiXiLy4oOSwv6gpBPRkGBjcqQM309kbWD
d7ML6+MglpFXyi8r1zuoxTENjwxDd9amzJFI4gA6Sw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:04 2025 by rpki-client