Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/77yJaauLzrFexoGSd8mW28O_fIU.roa
File: 77yJaauLzrFexoGSd8mW28O_fIU.roa (raw, json)
Hash identifier: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=
Subject key identifier: EF:BC:89:69:AB:8B:CE:B1:5E:C6:81:92:77:C9:96:DB:C3:BF:7C:85
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019426D9525190202A63A5B5BA35F12E1694
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/77yJaauLzrFexoGSd8mW28O_fIU.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208169
IP address blocks: 2001:678:e3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:51:90:20:2a:63:a5:b5:ba:35:f1:2e:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efbc8969ab8bceb15ec6819277c996dbc3bf7c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:86:e5:d2:08:f0:a1:43:a8:f6:74:95:4f:
2d:9c:22:d6:12:91:e1:ad:e0:af:48:a4:44:22:84:
0c:e1:ab:fb:b6:e8:24:19:1e:49:8c:32:b7:80:aa:
32:be:45:69:68:cf:f2:37:27:e7:18:67:c8:50:6f:
5b:c2:62:bb:da:c3:92:91:91:89:a4:8e:61:06:49:
04:1d:35:c2:72:fb:a7:58:80:c5:a3:c3:ba:9c:ce:
15:3a:9f:65:ba:32:df:89:cf:5b:c8:6a:33:22:19:
b3:d0:e6:60:8a:5c:8a:84:fd:df:38:77:ae:3e:fa:
ee:60:f3:90:fe:2f:02:c9:72:a3:e5:fd:f8:b7:52:
39:b3:42:11:4a:ec:c4:32:64:93:c2:b0:21:4f:fd:
7f:9d:75:55:ea:49:96:63:cc:bb:fc:75:08:58:1b:
91:5d:44:88:c5:5c:e1:a8:d7:7e:00:26:2a:99:4e:
43:49:2c:6f:28:5a:79:83:49:d5:fe:0e:4b:ea:6f:
0f:73:cf:26:be:34:3a:cf:74:5d:f9:e6:1b:4b:8b:
d0:e5:ef:67:8c:f5:6e:6b:a5:30:c6:db:d0:e9:0f:
67:bb:81:8a:ab:60:d5:b1:6d:82:ce:34:00:87:92:
cf:74:95:77:47:ce:9f:22:7c:6d:9f:44:9e:64:d8:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:89:69:AB:8B:CE:B1:5E:C6:81:92:77:C9:96:DB:C3:BF:7C:85
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/77yJaauLzrFexoGSd8mW28O_fIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e3c::/48
Signature Algorithm: sha256WithRSAEncryption
c0:01:b5:49:5b:d0:17:7a:48:67:de:7c:50:cd:3d:47:7c:b5:
8c:32:f6:48:3c:d8:c6:28:93:d6:4e:92:99:4d:29:e6:67:2a:
79:e2:b3:82:ae:e3:8b:e4:fe:0f:21:40:d3:c2:ef:3a:af:59:
4f:c1:88:82:3c:e2:e0:e2:e5:8a:e4:b3:7c:b6:f0:0a:6b:60:
b8:cd:75:59:03:4c:9e:0a:f5:c5:08:54:30:fe:1e:a8:0a:b3:
f1:cb:61:0c:2b:af:a7:69:4b:8e:c1:8a:44:87:c7:f5:80:24:
98:07:8e:5f:32:06:a3:21:6c:06:0a:b4:55:e0:bb:d2:2d:07:
06:52:45:66:36:c1:79:4e:1f:d8:c6:1b:a9:e3:e4:d5:2a:e5:
e1:09:e7:65:c3:ca:b1:f4:77:91:37:41:25:3a:d7:aa:bf:45:
ae:8a:8b:e9:ae:02:0b:95:25:27:36:e2:07:e4:ca:5b:49:8e:
67:da:f3:21:f0:e7:ed:13:59:32:75:7b:32:5e:c8:7a:a7:9f:
76:99:fd:b3:98:be:47:8d:ad:b2:10:96:ea:cf:38:47:0c:1c:
7c:0b:c3:f5:77:80:67:ee:7e:30:8f:a5:d4:ed:c0:02:45:27:
d4:59:8c:1c:e6:04:23:8d:d7:30:de:ae:59:31:8a:44:c2:92:
0c:15:fe:44
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2VJRkCAqY6W1ujXxLhaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTQ3ODBmNWNkMDdlOTQ4YmU2ZmE0YjQ5MjVhNzMxMzkw
NmQ1ZWIwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmJjODk2OWFiOGJjZWIxNWVjNjgxOTI3N2M5OTZkYmMzYmY3Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfKG5dII8KFDqPZ0lU8tnCLWEpHh
reCvSKREIoQM4av7tugkGR5JjDK3gKoyvkVpaM/yNyfnGGfIUG9bwmK72sOSkZGJ
pI5hBkkEHTXCcvunWIDFo8O6nM4VOp9lujLfic9byGozIhmz0OZgilyKhP3fOHeu
PvruYPOQ/i8CyXKj5f34t1I5s0IRSuzEMmSTwrAhT/1/nXVV6kmWY8y7/HUIWBuR
XUSIxVzhqNd+ACYqmU5DSSxvKFp5g0nV/g5L6m8Pc88mvjQ6z3Rd+eYbS4vQ5e9n
jPVua6UwxtvQ6Q9nu4GKq2DVsW2CzjQAh5LPdJV3R86fInxtn0SeZNg46wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO+8iWmri86xXsaBknfJltvDv3yFMB8GA1UdIwQY
MBaAFBSkeA9c0H6Ui+b6S0klpzE5BtXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGIt
OTkzMjM2ODYyMTZkLzEvNzd5SmFhdUx6ckZleG9HU2Q4bVcyOE9fZklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGItOTkzMjM2ODYyMTZk
LzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA48
MA0GCSqGSIb3DQEBCwUAA4IBAQDAAbVJW9AXekhn3nxQzT1HfLWMMvZIPNjGKJPW
TpKZTSnmZyp54rOCruOL5P4PIUDTwu86r1lPwYiCPOLg4uWK5LN8tvAKa2C4zXVZ
A0yeCvXFCFQw/h6oCrPxy2EMK6+naUuOwYpEh8f1gCSYB45fMgajIWwGCrRV4LvS
LQcGUkVmNsF5Th/Yxhup4+TVKuXhCedlw8qx9HeRN0ElOteqv0WuiovprgILlSUn
NuIH5MpbSY5n2vMh8OftE1kydXsyXsh6p592mf2zmL5Hja2yEJbqzzhHDBx8C8P1
d4Bn7n4wj6XU7cACRSfUWYwc5gQjjdcw3q5ZMYpEwpIMFf5E
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:22 2025 by rpki-client