Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3FyB17UpSoiSP7O-MuOlxyYqdLs.roa
File: 3FyB17UpSoiSP7O-MuOlxyYqdLs.roa (raw, json)
Hash identifier: Q0YYRpcBdUIJWvxfWLX1Wtoxyl9g7RapqSiEVjd8K9s=
Subject key identifier: DC:5C:81:D7:B5:29:4A:88:92:3F:B3:BE:32:E3:A5:C7:26:2A:74:BB
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF0060A5A69B158305A5BD149F089
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3FyB17UpSoiSP7O-MuOlxyYqdLs.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214921
IP address blocks: 2a0e:aa06:500::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:06:0a:5a:69:b1:58:30:5a:5b:d1:49:f0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc5c81d7b5294a88923fb3be32e3a5c7262a74bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:21:8e:e5:ca:1c:ab:fe:68:10:b2:2f:62:
a8:48:6f:f8:1b:53:16:42:df:ec:8d:08:ce:4c:d5:
df:ee:f1:8a:c0:4f:fc:3a:0d:07:cb:fd:ef:07:b7:
61:2a:25:51:19:fe:40:e4:80:4a:18:1b:65:ec:db:
8b:a9:99:ae:52:09:ea:1f:17:96:b5:db:7e:4e:5f:
94:6b:bf:5b:99:22:a6:ee:3c:c8:60:21:e8:74:31:
7b:bc:ba:2d:0c:a0:14:57:de:d8:b4:d1:53:06:7d:
f8:46:61:8c:7e:c1:41:b4:75:e7:a7:5e:aa:c8:e1:
61:a3:c7:64:20:51:fb:3d:74:09:38:99:6e:21:c3:
4b:7d:64:e5:dc:bc:84:76:7f:d6:60:8e:6d:0c:0e:
c5:97:c3:93:81:a1:ef:d4:c2:80:80:09:19:66:55:
c9:29:76:42:28:d7:83:55:fb:2f:6b:a9:c2:8c:92:
b9:92:70:af:f2:38:66:6a:e0:82:f3:80:8a:61:b6:
63:63:33:2e:78:b8:03:0d:b1:3b:58:e1:27:dc:2a:
8f:2d:e1:ef:c6:8e:59:9d:13:74:c6:e9:e8:f8:f3:
3b:f3:f4:ca:74:ff:e8:a8:32:01:92:0e:e6:ce:e5:
2c:2d:e3:52:fe:e9:a1:7c:19:2c:fb:6a:1c:f3:09:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:81:D7:B5:29:4A:88:92:3F:B3:BE:32:E3:A5:C7:26:2A:74:BB
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3FyB17UpSoiSP7O-MuOlxyYqdLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:500::/44
Signature Algorithm: sha256WithRSAEncryption
13:ba:6a:4c:30:d9:f5:a1:e8:30:d3:c5:d2:2b:92:42:64:ce:
86:d2:fe:11:3c:7c:f3:3a:ae:29:fe:8d:e7:9e:82:ff:66:2d:
72:45:00:3c:0c:7f:aa:bc:13:57:d3:fe:25:a8:df:90:4e:95:
5c:cd:5c:d4:5d:ea:8a:cc:8b:ab:85:73:8e:71:d1:3d:fc:a0:
12:6d:61:64:7c:66:a6:f5:df:24:51:e8:ce:82:f1:4b:a6:d8:
9c:0e:9f:49:a2:78:88:8b:1f:55:97:8f:ad:ad:37:ac:e1:a2:
f8:3d:b7:0c:b9:ad:68:54:7f:c0:97:c0:60:2e:da:2e:58:6d:
87:70:14:84:e6:61:52:84:05:df:b0:09:22:52:28:e0:53:3f:
ab:41:7a:fa:69:a7:1d:e7:94:17:e8:d1:a0:bf:4b:30:08:01:
b7:68:c7:e3:d4:a6:6f:0e:aa:74:be:ef:c9:2d:dd:10:b9:21:
12:a0:3a:be:b6:6e:1d:21:74:1e:d3:9a:10:0d:ba:7f:82:ba:
27:48:01:eb:aa:53:ec:c8:ef:75:e6:c5:1d:ad:30:e6:8c:d8:
12:87:c1:74:dd:58:8c:9a:13:6a:23:46:9c:2c:c9:fe:63:cd:
4e:cb:30:db:03:77:fd:37:f2:2d:51:18:67:d6:7a:83:86:76:
06:a1:82:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljvAGClppsVgwWlvRSfCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzVjODFkN2I1Mjk0YTg4OTIzZmIzYmUzMmUzYTVjNzI2MmE3NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUhjuXKHKv+aBCyL2KoSG/4G1MW
Qt/sjQjOTNXf7vGKwE/8Og0Hy/3vB7dhKiVRGf5A5IBKGBtl7NuLqZmuUgnqHxeW
tdt+Tl+Ua79bmSKm7jzIYCHodDF7vLotDKAUV97YtNFTBn34RmGMfsFBtHXnp16q
yOFho8dkIFH7PXQJOJluIcNLfWTl3LyEdn/WYI5tDA7Fl8OTgaHv1MKAgAkZZlXJ
KXZCKNeDVfsva6nCjJK5knCv8jhmauCC84CKYbZjYzMueLgDDbE7WOEn3CqPLeHv
xo5ZnRN0xuno+PM78/TKdP/oqDIBkg7mzuUsLeNS/umhfBks+2oc8wkxnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNxcgde1KUqIkj+zvjLjpccmKnS7MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvM0Z5QjE3VXBTb2lTUDdPLU11T2x4eVlxZExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQATumpMMNn1oegw08XSK5JCZM6G0v4RPHzzOq4p
/o3nnoL/Zi1yRQA8DH+qvBNX0/4lqN+QTpVczVzUXeqKzIurhXOOcdE9/KASbWFk
fGam9d8kUejOgvFLpticDp9JoniIix9Vl4+trTes4aL4PbcMua1oVH/Al8BgLtou
WG2HcBSE5mFShAXfsAkiUijgUz+rQXr6aacd55QX6NGgv0swCAG3aMfj1KZvDqp0
vu/JLd0QuSESoDq+tm4dIXQe05oQDbp/gronSAHrqlPsyO915sUdrTDmjNgSh8F0
3ViMmhNqI0acLMn+Y81OyzDbA3f9N/ItURhn1nqDhnYGoYJD
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:40 2025 by rpki-client