Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jMEG5fGQkrDLsHDnXoGIOLwi3nA.roa
File: jMEG5fGQkrDLsHDnXoGIOLwi3nA.roa (raw, json)
Hash identifier: WTZnsk7MZSWLAt8Wgqj3WgzscikEc1jKbwsohFSVUdw=
Subject key identifier: 8C:C1:06:E5:F1:90:92:B0:CB:B0:70:E7:5E:81:88:38:BC:22:DE:70
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE04D2D78CA71D1A427BE56F2EFAE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jMEG5fGQkrDLsHDnXoGIOLwi3nA.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210041
IP address blocks: 2a0e:aa07:e030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e0:4d:2d:78:ca:71:d1:a4:27:be:56:f2:ef:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc106e5f19092b0cbb070e75e818838bc22de70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:bd:74:70:9a:99:d9:90:26:fb:a1:3b:78:
a4:48:fc:e4:ca:0c:e9:78:ec:66:f6:d2:ef:c5:23:
0d:ea:c5:42:f8:f9:0a:77:ea:9b:d3:c1:b9:ef:be:
ee:3a:4a:fd:4c:cb:1a:fb:97:21:7d:9b:a8:f8:b3:
f2:a2:f6:55:53:00:fc:fb:95:5a:08:19:a3:d1:41:
f8:3c:4d:b1:41:8e:db:06:59:97:a6:20:04:82:5d:
f8:62:6c:cc:9c:76:ea:bf:37:04:92:11:ba:3d:e5:
2a:4e:df:92:cd:07:aa:cd:51:16:03:f3:00:d8:d4:
eb:a9:ba:87:5a:c3:17:1a:7a:74:45:cd:51:e0:41:
d7:21:c9:03:8a:5e:d1:2c:c1:48:c5:3b:62:c2:16:
e2:32:76:e4:ad:e4:f9:14:44:41:26:1f:90:d3:00:
31:5b:c1:5a:15:66:a8:8e:57:e5:09:67:11:8e:38:
e9:7f:8b:22:f0:29:a4:8c:d1:78:34:b7:b0:3f:8b:
e4:1e:56:59:86:cd:d0:9b:19:31:97:50:dc:74:34:
30:7b:ac:fd:eb:e8:db:93:71:54:63:e8:a6:20:27:
bc:b8:ea:c1:fa:5f:31:b8:bd:3e:f9:ea:db:ca:9c:
bd:85:39:56:7f:2c:92:ef:c4:df:3d:d9:6e:d6:af:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:06:E5:F1:90:92:B0:CB:B0:70:E7:5E:81:88:38:BC:22:DE:70
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jMEG5fGQkrDLsHDnXoGIOLwi3nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e030::/48
Signature Algorithm: sha256WithRSAEncryption
1b:8d:30:fb:eb:43:dd:97:da:44:7a:75:8c:72:f3:3e:56:15:
ae:0f:d7:61:3c:15:16:11:92:1b:4d:fd:24:11:25:69:99:67:
e4:77:94:77:39:1a:17:f0:4f:05:9b:dd:6a:27:ec:f7:1f:f9:
6a:ef:01:11:3a:1d:d5:42:ff:b8:be:f9:ee:fd:3c:2e:85:33:
2d:c7:c2:30:b0:fc:52:09:c3:5f:b3:6b:03:d8:92:f4:25:e6:
90:99:68:03:f0:ec:48:62:69:c3:8f:ad:28:8d:cd:77:da:b7:
2d:5f:08:45:4f:98:25:93:bb:ad:8a:b9:7f:ec:76:c9:33:d3:
45:77:72:6e:8c:3e:7a:57:38:09:59:34:1a:2f:5d:a5:bd:40:
07:9e:86:7a:8b:af:1e:dc:1e:e0:8e:5c:83:d0:50:62:35:95:
25:9c:ea:e3:09:0b:8f:cb:92:27:69:98:b1:49:41:1a:33:f0:
2c:b1:8c:9c:35:0a:72:19:16:c1:1c:3e:4d:11:85:c6:e6:44:
0e:5b:06:be:cf:76:3a:c2:7f:ea:c6:b5:91:22:f6:67:80:82:
f1:55:c0:e8:a5:f2:0d:cd:cb:83:86:80:b1:db:5e:b4:89:84:
7f:50:62:1f:14:d6:d1:41:61:00:ff:30:c7:d0:31:48:a8:94:
75:f9:97:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljuBNLXjKcdGkJ75W8u+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2MxMDZlNWYxOTA5MmIwY2JiMDcwZTc1ZTgxODgzOGJjMjJkZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCW9dHCamdmQJvuhO3ikSPzkygzp
eOxm9tLvxSMN6sVC+PkKd+qb08G5777uOkr9TMsa+5chfZuo+LPyovZVUwD8+5Va
CBmj0UH4PE2xQY7bBlmXpiAEgl34YmzMnHbqvzcEkhG6PeUqTt+SzQeqzVEWA/MA
2NTrqbqHWsMXGnp0Rc1R4EHXIckDil7RLMFIxTtiwhbiMnbkreT5FERBJh+Q0wAx
W8FaFWaojlflCWcRjjjpf4si8CmkjNF4NLewP4vkHlZZhs3Qmxkxl1DcdDQwe6z9
6+jbk3FUY+imICe8uOrB+l8xuL0++erbypy9hTlWfyyS78TfPdlu1q9aJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIzBBuXxkJKwy7Bw516BiDi8It5wMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvak1FRzVmR1FrckRMc0hEblhvR0lPTHdpM25BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Aw
MA0GCSqGSIb3DQEBCwUAA4IBAQAbjTD760Pdl9pEenWMcvM+VhWuD9dhPBUWEZIb
Tf0kESVpmWfkd5R3ORoX8E8Fm91qJ+z3H/lq7wEROh3VQv+4vvnu/TwuhTMtx8Iw
sPxSCcNfs2sD2JL0JeaQmWgD8OxIYmnDj60ojc132rctXwhFT5glk7utirl/7HbJ
M9NFd3JujD56VzgJWTQaL12lvUAHnoZ6i68e3B7gjlyD0FBiNZUlnOrjCQuPy5In
aZixSUEaM/AssYycNQpyGRbBHD5NEYXG5kQOWwa+z3Y6wn/qxrWRIvZngILxVcDo
pfINzcuDhoCx2160iYR/UGIfFNbRQWEA/zDH0DFIqJR1+Zfg
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:50 2025 by rpki-client