Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ajtg2jta3vGshSyNUGIss7wIHyQ.roa
File: Ajtg2jta3vGshSyNUGIss7wIHyQ.roa (raw, json)
Hash identifier: CbXiDWc2MP/hbs6pY1meg+NjmSr0S2FE1+NTL4uUjYo=
Subject key identifier: 02:3B:60:DA:3B:5A:DE:F1:AC:85:2C:8D:50:62:2C:B3:BC:08:1F:24
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC3777E996603A8B205E8247B8879
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ajtg2jta3vGshSyNUGIss7wIHyQ.roa
Signing time: Thu 02 Jan 2025 05:48:20 +0000
ROA not before: Thu 02 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38136
IP address blocks: 2a0e:aa07:e011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c3:77:7e:99:66:03:a8:b2:05:e8:24:7b:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=023b60da3b5adef1ac852c8d50622cb3bc081f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:09:10:90:9f:7f:3a:b3:59:a0:9d:f8:ae:
f0:26:8a:15:b0:ee:97:bd:52:68:87:23:7f:d3:f3:
33:e6:61:f0:55:49:a1:8f:c2:93:ad:16:df:c9:39:
d3:50:23:e6:9a:24:84:46:e0:2f:f4:ff:df:a5:aa:
91:ce:c2:c5:05:43:79:df:22:d1:cd:0f:d1:0e:e1:
f4:a0:6a:8e:5d:5d:9e:e7:d3:d4:f2:ac:a8:df:87:
e2:ef:1f:f4:25:10:78:d6:17:79:ea:f8:81:3f:86:
2d:62:68:f8:31:f2:7c:2d:bd:7e:43:12:ba:d2:b9:
47:19:5b:83:da:87:49:62:f5:94:9b:7a:d5:f5:df:
c8:c4:fc:ac:cf:9f:8a:d7:3a:cd:4c:de:fa:64:54:
c8:9a:5e:74:9a:fe:9a:dc:01:87:11:7a:9f:0b:80:
2b:8e:da:f4:22:56:20:34:07:27:a6:c5:cb:56:7f:
bb:b6:73:ad:5f:e8:9d:19:d2:5f:b0:31:c5:e3:4b:
08:82:ff:de:de:ab:ed:4d:c2:a2:38:22:29:0c:a4:
72:db:39:45:d7:f7:27:a8:e4:5a:bb:1a:5d:9b:9e:
0d:52:64:d8:b3:e1:ed:7c:f8:de:bd:fb:63:d9:da:
a9:eb:88:37:d4:a2:7e:fd:96:a4:56:94:32:6e:96:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:60:DA:3B:5A:DE:F1:AC:85:2C:8D:50:62:2C:B3:BC:08:1F:24
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ajtg2jta3vGshSyNUGIss7wIHyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e011::/48
Signature Algorithm: sha256WithRSAEncryption
55:46:c5:1d:cc:08:d8:3a:1f:76:5b:0e:97:07:4d:07:28:f4:
76:db:bd:e7:15:21:42:55:a2:ec:15:e8:cc:ed:81:90:5f:f4:
30:62:57:c5:45:2a:3f:d1:17:3b:df:ff:0c:b1:64:50:3a:1d:
9f:07:4d:28:2a:35:8c:cf:60:9b:00:d1:f0:d8:e7:41:b1:d6:
cc:45:70:68:dd:8d:5d:98:3d:f9:3f:41:d5:8a:17:5d:94:d5:
33:ff:a9:4b:ca:c4:e8:90:9a:da:8b:3e:f6:89:c1:c4:bb:f5:
b3:75:8c:30:47:c9:cd:df:cc:ae:69:8f:c5:09:ef:be:ed:29:
e7:0d:d8:3d:ec:d1:6d:84:bd:bf:bc:a1:7d:03:89:00:c7:1f:
b4:c2:54:78:fc:12:bb:e7:64:16:90:72:8f:dd:82:6f:b6:e9:
cc:79:8a:d2:48:fb:a4:c2:5a:70:a7:ac:b3:0d:63:4b:5f:7c:
d3:d3:ce:c4:fb:a2:a6:d6:8f:77:d4:69:62:d7:11:8e:3e:b0:
6e:a5:9b:8b:ff:fc:10:ba:bc:92:88:89:ae:df:5e:31:bc:7a:
81:a7:3c:a9:e4:ce:97:34:d2:22:b4:e1:d8:36:ad:53:79:60:
51:84:ed:d4:28:1f:89:5a:e4:62:46:a7:d4:de:9f:48:db:ba:
0b:be:99:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljsN3fplmA6iyBegke4h5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjNiNjBkYTNiNWFkZWYxYWM4NTJjOGQ1MDYyMmNiM2JjMDgxZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRIJEJCffzqzWaCd+K7wJooVsO6X
vVJohyN/0/Mz5mHwVUmhj8KTrRbfyTnTUCPmmiSERuAv9P/fpaqRzsLFBUN53yLR
zQ/RDuH0oGqOXV2e59PU8qyo34fi7x/0JRB41hd56viBP4YtYmj4MfJ8Lb1+QxK6
0rlHGVuD2odJYvWUm3rV9d/IxPysz5+K1zrNTN76ZFTIml50mv6a3AGHEXqfC4Ar
jtr0IlYgNAcnpsXLVn+7tnOtX+idGdJfsDHF40sIgv/e3qvtTcKiOCIpDKRy2zlF
1/cnqORauxpdm54NUmTYs+HtfPjevftj2dqp64g31KJ+/ZakVpQybpah8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAI7YNo7Wt7xrIUsjVBiLLO8CB8kMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvQWp0ZzJqdGEzdkdzaFN5TlVHSXNzN3dJSHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+AR
MA0GCSqGSIb3DQEBCwUAA4IBAQBVRsUdzAjYOh92Ww6XB00HKPR2273nFSFCVaLs
FejM7YGQX/QwYlfFRSo/0Rc73/8MsWRQOh2fB00oKjWMz2CbANHw2OdBsdbMRXBo
3Y1dmD35P0HVihddlNUz/6lLysTokJraiz72icHEu/WzdYwwR8nN38yuaY/FCe++
7SnnDdg97NFthL2/vKF9A4kAxx+0wlR4/BK752QWkHKP3YJvtunMeYrSSPukwlpw
p6yzDWNLX3zT087E+6Km1o931Gli1xGOPrBupZuL//wQurySiImu314xvHqBpzyp
5M6XNNIitOHYNq1TeWBRhO3UKB+JWuRiRqfU3p9I27oLvplf
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:45:06 2025 by rpki-client