Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa
File: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (raw, json)
Hash identifier: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=
Subject key identifier: 48:A5:2F:39:FA:DB:B2:AA:F7:12:74:8E:A7:77:0F:6C:8F:D3:FB:7B
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B685AB90B4369D9A74476A82939E22
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63949
IP address blocks: 2a02:26f0:1280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:85:ab:90:b4:36:9d:9a:74:47:6a:82:93:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a52f39fadbb2aaf712748ea7770f6c8fd3fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:d1:4b:17:5c:62:d6:0c:8a:fa:83:63:87:
d9:2d:32:ba:bf:ad:83:93:d2:fb:04:51:09:bc:da:
89:fc:b9:1a:72:fe:13:75:8c:6c:8a:e0:65:4e:33:
3d:0f:61:e0:9d:4f:83:25:f6:3c:95:2b:35:25:7c:
97:a6:3d:20:55:dd:23:a8:51:85:ab:11:7e:71:77:
3f:5e:da:16:34:63:f5:c5:ff:c7:64:47:da:d4:44:
4c:06:f9:8e:07:ec:b3:2d:d6:57:93:f0:4a:ad:42:
a1:11:cf:4e:55:b5:f0:e0:1d:43:39:67:39:fd:e1:
65:8b:e3:4f:46:85:10:65:6c:7b:9b:bd:39:43:15:
7f:76:13:02:8a:7f:65:99:73:5d:1f:f2:3c:76:21:
08:d7:70:a5:77:09:1c:10:81:e5:9c:ab:85:87:aa:
c8:82:52:e6:d7:79:c5:51:27:df:58:de:d3:d0:ac:
a1:4e:20:69:20:c5:ca:77:6d:31:52:57:24:c5:d0:
dc:b8:df:d0:00:1b:18:3a:a4:f6:92:82:3d:35:74:
06:d2:a8:a3:3e:c1:f6:64:39:06:74:94:c6:4d:68:
40:09:da:7f:aa:65:a1:f1:b9:21:16:69:95:e4:38:
df:13:15:8f:16:83:da:91:fe:f7:a1:2c:96:1e:1b:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:2F:39:FA:DB:B2:AA:F7:12:74:8E:A7:77:0F:6C:8F:D3:FB:7B
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:1280::/48
Signature Algorithm: sha256WithRSAEncryption
91:19:60:2b:2a:00:58:e7:d0:8c:37:8f:29:58:f2:57:8b:e4:
ff:bf:0f:4d:ea:a8:9c:8f:e2:d7:ee:e8:54:75:97:b3:f8:ea:
f5:c1:ee:b0:ae:2c:c3:6d:07:10:9a:ac:db:f1:7f:b8:7c:bf:
9e:d9:a3:73:50:32:09:a1:8f:64:38:81:a3:1a:85:e4:e1:94:
8c:cd:07:04:18:6b:7e:fb:94:be:d2:66:d4:19:d8:64:5e:d2:
5d:24:ec:c6:18:19:1b:3b:74:32:df:cb:e5:7f:51:c3:2a:44:
d6:ac:fe:cb:c3:f7:06:68:e9:3c:ed:db:d4:69:91:a4:a5:13:
b0:ac:7b:23:2b:9c:cb:a4:f7:1b:eb:8f:5e:b1:90:0a:63:74:
69:07:91:e2:b5:a6:b8:99:05:f7:4a:fc:78:a1:77:88:61:2f:
7c:a7:72:36:c1:c6:72:07:ea:5c:06:06:e4:bf:1b:a8:d7:52:
ec:ef:82:0e:c7:35:d5:12:96:10:30:3e:11:2f:5f:9f:6e:86:
41:90:d5:ea:f6:04:07:3e:19:3b:e4:1b:ef:f1:a7:84:51:24:
e0:0c:ff:89:86:90:ed:b9:37:a7:70:23:8c:e7:ad:8f:19:39:
5d:3c:1a:23:d7:8f:e3:6f:ae:71:9b:50:6b:64:5e:66:3e:e3:
5d:c8:4f:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntoWrkLQ2nZp0R2qCk54iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGE1MmYzOWZhZGJiMmFhZjcxMjc0OGVhNzc3MGY2YzhmZDNmYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvRSxdcYtYMivqDY4fZLTK6v62D
k9L7BFEJvNqJ/Lkacv4TdYxsiuBlTjM9D2HgnU+DJfY8lSs1JXyXpj0gVd0jqFGF
qxF+cXc/XtoWNGP1xf/HZEfa1ERMBvmOB+yzLdZXk/BKrUKhEc9OVbXw4B1DOWc5
/eFli+NPRoUQZWx7m705QxV/dhMCin9lmXNdH/I8diEI13CldwkcEIHlnKuFh6rI
glLm13nFUSffWN7T0KyhTiBpIMXKd20xUlckxdDcuN/QABsYOqT2koI9NXQG0qij
PsH2ZDkGdJTGTWhACdp/qmWh8bkhFmmV5DjfExWPFoPakf73oSyWHhsalwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEilLzn627Kq9xJ0jqd3D2yP0/t7MB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvU0tVdk9mcmJzcXIzRW5TT3AzY1BiSV9ULTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIm8BKA
MA0GCSqGSIb3DQEBCwUAA4IBAQCRGWArKgBY59CMN48pWPJXi+T/vw9N6qicj+LX
7uhUdZez+Or1we6wrizDbQcQmqzb8X+4fL+e2aNzUDIJoY9kOIGjGoXk4ZSMzQcE
GGt++5S+0mbUGdhkXtJdJOzGGBkbO3Qy38vlf1HDKkTWrP7Lw/cGaOk87dvUaZGk
pROwrHsjK5zLpPcb649esZAKY3RpB5Hitaa4mQX3Svx4oXeIYS98p3I2wcZyB+pc
Bgbkvxuo11Ls74IOxzXVEpYQMD4RL1+fboZBkNXq9gQHPhk75Bvv8aeEUSTgDP+J
hpDtuTencCOM562PGTldPBoj14/jb65xm1BrZF5mPuNdyE+l
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:55 2025 by rpki-client