Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ST0R6ZB-BssYaNsrEYJUDf0G5go.roa
File: ST0R6ZB-BssYaNsrEYJUDf0G5go.roa (raw, json)
Hash identifier: 1Z8FMCGhHdQiuAmyrh9A4HehDpXo3thzwuSR0kQtLKE=
Subject key identifier: 49:3D:11:E9:90:7E:06:CB:18:68:DB:2B:11:82:54:0D:FD:06:E6:0A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC6EAF43C5744B85A8FEAA8A8211B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ST0R6ZB-BssYaNsrEYJUDf0G5go.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60326
IP address blocks: 2a0e:aa07:f080::/44 maxlen: 48
2a0e:aa07:f090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c6:ea:f4:3c:57:44:b8:5a:8f:ea:a8:a8:21:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=493d11e9907e06cb1868db2b1182540dfd06e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:71:ba:84:62:2d:76:fc:90:0f:6e:2a:09:
0d:1f:c0:dd:f9:f5:c7:6b:f2:fb:31:61:84:28:d5:
fa:c3:19:19:d5:e6:81:62:6c:f8:bb:6d:a4:f2:d2:
e3:e4:bf:db:64:92:05:d0:41:3e:15:cc:15:1f:57:
6e:ea:8d:fe:b3:cf:55:6c:de:b4:86:49:98:17:94:
83:2d:ec:3a:0f:5a:3c:56:6a:9e:84:84:fc:c1:c7:
ef:53:f7:62:35:80:83:87:11:1b:af:24:73:74:7f:
88:c1:01:ca:56:f4:ae:28:71:68:69:83:17:ea:0e:
e5:8a:0b:72:7d:6f:a5:19:e7:09:20:b9:75:c1:30:
16:e8:a7:b5:14:75:06:13:3d:ac:92:89:eb:07:6b:
ec:07:a0:39:21:39:18:99:b7:4b:58:c5:86:2c:19:
6c:53:33:74:f5:6c:57:a5:63:ad:63:f9:23:0f:98:
d4:d0:88:fa:d1:57:25:01:6e:9e:80:1b:d7:e0:ea:
c1:f3:f5:12:6e:0a:81:9a:5e:32:e2:fc:8d:08:1f:
63:ba:4a:0a:72:02:42:da:4c:71:89:c7:76:4e:62:
66:70:68:e6:90:ff:be:95:4a:17:eb:40:6a:79:e0:
90:e9:07:6f:19:c0:ff:bf:67:64:43:70:6e:ab:5d:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:11:E9:90:7E:06:CB:18:68:DB:2B:11:82:54:0D:FD:06:E6:0A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ST0R6ZB-BssYaNsrEYJUDf0G5go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f080::/43
Signature Algorithm: sha256WithRSAEncryption
36:ba:7f:62:83:08:ec:f0:5b:cd:56:e6:1d:92:03:3d:ec:74:
fd:90:e5:fd:64:5c:cf:e2:92:31:d0:e6:cc:49:e5:f5:a3:ae:
9b:76:91:1b:22:ff:cb:91:d4:ab:7b:8a:3b:c4:06:5b:89:c9:
23:8c:cd:42:cf:a6:70:f3:03:04:45:f9:39:b7:3f:1d:38:97:
86:bc:6d:8b:4b:39:4d:cc:7a:f5:1f:e6:59:ee:01:b4:6e:a6:
bc:0d:56:98:0b:e9:81:3f:c8:e3:b5:35:4c:29:70:db:46:eb:
38:ea:d7:40:a7:fb:a7:44:ed:73:6e:f8:cf:25:86:fb:73:f7:
d3:60:54:c9:3d:47:26:bd:a2:c6:8a:fa:00:6e:5e:67:ee:73:
2a:6b:c8:d5:ea:4d:16:c9:52:b2:14:2d:9c:e4:37:77:26:9d:
c7:aa:34:37:0b:a4:05:cb:39:82:9d:b4:18:05:7c:c5:74:75:
55:3a:de:5b:05:a1:6b:de:78:19:8a:fb:2c:a2:7d:0e:5c:c6:
4c:54:f8:92:85:5f:ba:76:04:48:eb:09:a6:48:f4:09:27:27:
18:ad:02:3c:19:a9:c8:ca:52:58:e6:f7:9a:c5:d9:a2:a1:20:
55:6f:55:50:bd:ad:19:f3:bc:bb:5b:13:8b:78:5c:42:f0:ed:
29:4f:33:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljsbq9DxXRLhaj+qoqCEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTNkMTFlOTkwN2UwNmNiMTg2OGRiMmIxMTgyNTQwZGZkMDZlNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5xuoRiLXb8kA9uKgkNH8Dd+fXH
a/L7MWGEKNX6wxkZ1eaBYmz4u22k8tLj5L/bZJIF0EE+FcwVH1du6o3+s89VbN60
hkmYF5SDLew6D1o8VmqehIT8wcfvU/diNYCDhxEbryRzdH+IwQHKVvSuKHFoaYMX
6g7ligtyfW+lGecJILl1wTAW6Ke1FHUGEz2skonrB2vsB6A5ITkYmbdLWMWGLBls
UzN09WxXpWOtY/kjD5jU0Ij60VclAW6egBvX4OrB8/USbgqBml4y4vyNCB9jukoK
cgJC2kxxicd2TmJmcGjmkP++lUoX60BqeeCQ6QdvGcD/v2dkQ3Buq10qxQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEk9EemQfgbLGGjbKxGCVA39BuYKMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvU1QwUjZaQi1Cc3NZYU5zckVZSlVEZjBHNWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKg6qB/CA
MA0GCSqGSIb3DQEBCwUAA4IBAQA2un9igwjs8FvNVuYdkgM97HT9kOX9ZFzP4pIx
0ObMSeX1o66bdpEbIv/LkdSre4o7xAZbickjjM1Cz6Zw8wMERfk5tz8dOJeGvG2L
SzlNzHr1H+ZZ7gG0bqa8DVaYC+mBP8jjtTVMKXDbRus46tdAp/unRO1zbvjPJYb7
c/fTYFTJPUcmvaLGivoAbl5n7nMqa8jV6k0WyVKyFC2c5Dd3Jp3HqjQ3C6QFyzmC
nbQYBXzFdHVVOt5bBaFr3ngZivsson0OXMZMVPiShV+6dgRI6wmmSPQJJycYrQI8
GanIylJY5veaxdmioSBVb1VQva0Z87y7WxOLeFxC8O0pTzMz
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:13 2025 by rpki-client