Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/7cT3aSsL0wbiRS5lv52RI34Luk4.roa
File: 7cT3aSsL0wbiRS5lv52RI34Luk4.roa (raw, json)
Hash identifier: EfFw+qTaohRQ1+uGz+AYgWEYzinArjZzbhW82ydlvDw=
Subject key identifier: ED:C4:F7:69:2B:0B:D3:06:E2:45:2E:65:BF:9D:91:23:7E:0B:BA:4E
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 06436F77
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/7cT3aSsL0wbiRS5lv52RI34Luk4.roa
Signing time: Sat 01 Jan 2022 14:58:16 +0000
ROA not before: Sat 01 Jan 2022 14:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47264
IP address blocks: 2a05:5500:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105082743 (0x6436f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Jan 1 14:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edc4f7692b0bd306e2452e65bf9d91237e0bba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:2d:25:a5:c1:de:e2:90:3c:9e:2a:a2:f7:
29:e2:2f:65:f2:bd:7d:38:58:94:46:5c:56:f0:03:
f0:04:42:1f:53:23:1f:5f:46:0d:8f:aa:28:01:8d:
e8:d1:01:66:b7:38:e5:7c:6d:d2:88:ba:bc:7c:0e:
fa:0f:f8:d8:4a:f4:cb:d6:55:81:8b:18:c6:33:51:
07:93:f2:a6:48:9c:c0:38:a5:a7:e9:2c:08:1c:53:
cf:d2:e1:1c:4d:bc:30:6e:c8:f8:a8:cb:c2:15:8a:
54:1f:36:54:3d:52:c2:25:5c:29:55:c6:b6:6b:38:
62:5e:f9:99:89:f8:c0:48:32:3d:f0:2d:ea:14:e1:
8b:ce:3d:fd:aa:56:78:06:2c:42:70:b9:cb:9c:c3:
a3:e1:4a:3b:10:ee:3a:f3:1b:7e:82:e8:0a:51:95:
78:00:80:9c:ef:ca:8f:17:a5:85:4f:8c:70:4b:e9:
f7:8c:a6:ad:0a:3b:d7:a0:b0:04:bc:6d:96:e1:4d:
4e:66:14:66:a0:65:ac:17:1e:a8:a1:ea:bb:31:a4:
68:51:d2:5a:a0:3b:ea:2c:eb:db:13:32:d7:8e:d3:
24:3f:d3:6f:8c:16:a5:5d:d5:77:bd:fd:ac:25:55:
c2:3b:4a:6e:2e:50:9a:9e:d2:24:a9:d0:1f:87:ad:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:F7:69:2B:0B:D3:06:E2:45:2E:65:BF:9D:91:23:7E:0B:BA:4E
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/7cT3aSsL0wbiRS5lv52RI34Luk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:5500:11::/48
Signature Algorithm: sha256WithRSAEncryption
19:19:f0:19:5f:9b:24:1d:29:aa:18:51:b4:f0:aa:27:14:32:
fc:7c:1c:35:e5:26:77:22:57:9e:5c:49:e1:b2:8f:f0:84:a6:
94:50:ba:1e:a8:1b:f8:f8:18:ff:78:80:bd:35:47:8a:9b:c2:
88:7d:6e:b3:5e:45:0c:86:26:0c:0f:4f:64:76:56:18:9a:50:
ef:a1:28:f5:f4:ea:39:78:f8:ae:e4:0d:a0:2d:2d:d9:84:12:
b5:47:e2:13:6b:f9:fb:16:39:a1:78:7a:14:c1:e5:0c:2d:5c:
1b:86:50:e0:d0:c7:b3:5a:53:e8:60:b5:6d:a7:ce:fc:e1:33:
63:76:7b:d9:3e:a1:79:ec:e3:fa:de:b3:25:c8:0c:3e:a5:a0:
54:55:51:79:c8:22:79:d1:4c:8c:55:72:60:1d:7a:ae:b7:7c:
34:3c:2a:e8:c2:78:fd:4d:c1:5b:76:33:fa:be:a4:e0:7a:01:
90:cd:2b:a0:19:07:e3:05:35:e4:54:7e:ce:65:e9:2d:88:97:
78:bc:43:cf:82:81:e8:16:65:c1:c3:f6:0a:6e:18:8f:c4:03:
71:7d:79:ab:d3:5b:a6:42:45:2f:b6:55:70:44:58:f3:42:61:
14:36:6e:38:bc:b2:12:60:8d:00:7c:c2:68:10:06:2b:53:bc:
9b:b7:40:d9
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBkNvdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGFlMWQ3Y2M2OGI3OGM0OTRjNTMwZWFhNGEwZjc1NTllMjVhNGVmMB4XDTIyMDEw
MTE0NTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRjNGY3NjkyYjBi
ZDMwNmUyNDUyZTY1YmY5ZDkxMjM3ZTBiYmE0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOTqLSWlwd7ikDyeKqL3KeIvZfK9fThYlEZcVvAD8ARCH1Mj
H19GDY+qKAGN6NEBZrc45Xxt0oi6vHwO+g/42Er0y9ZVgYsYxjNRB5PypkicwDil
p+ksCBxTz9LhHE28MG7I+KjLwhWKVB82VD1SwiVcKVXGtms4Yl75mYn4wEgyPfAt
6hThi849/apWeAYsQnC5y5zDo+FKOxDuOvMbfoLoClGVeACAnO/KjxelhU+McEvp
94ymrQo716CwBLxtluFNTmYUZqBlrBceqKHquzGkaFHSWqA76izr2xMy147TJD/T
b4wWpV3Vd739rCVVwjtKbi5Qmp7SJKnQH4etCm8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTtxPdpKwvTBuJFLmW/nZEjfgu6TjAfBgNVHSMEGDAWgBTYrh18xot4xJTF
MOqkoPdVniWk7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJLNGRmTWFMZU1TVXhURHFwS0QzVlo0bHBPOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvMTVjNzRjLWY4YjgtNGY1My1hMTMxLTY0ZTQzMWY3NGVlYS8x
LzdjVDNhU3NMMHdiaVJTNWx2NTJSSTM0THVrNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
MTVjNzRjLWY4YjgtNGY1My1hMTMxLTY0ZTQzMWY3NGVlYS8xLzJLNGRmTWFMZU1T
VXhURHFwS0QzVlo0bHBPOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoFVQAAETANBgkqhkiG9w0BAQsF
AAOCAQEAGRnwGV+bJB0pqhhRtPCqJxQy/HwcNeUmdyJXnlxJ4bKP8ISmlFC6Hqgb
+PgY/3iAvTVHipvCiH1us15FDIYmDA9PZHZWGJpQ76Eo9fTqOXj4ruQNoC0t2YQS
tUfiE2v5+xY5oXh6FMHlDC1cG4ZQ4NDHs1pT6GC1bafO/OEzY3Z72T6heezj+t6z
JcgMPqWgVFVRecgiedFMjFVyYB16rrd8NDwq6MJ4/U3BW3Yz+r6k4HoBkM0roBkH
4wU15FR+zmXpLYiXeLxDz4KB6BZlwcP2Cm4Yj8QDcX15q9NbpkJFL7ZVcERY80Jh
FDZuOLyyEmCNAHzCaBAGK1O8m7dA2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:30:01 2025 by rpki-client