Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa
File: jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa (raw, json)
Hash identifier: mcdHes63xQ4mXYFPj11J8KDqcbki1pWoOvlCMQmkfxA=
Subject key identifier: 8E:19:7B:CB:7B:23:16:AB:B9:B8:86:CC:2D:71:DF:2A:C3:45:77:1E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE535C9C95E20E96511175E3F3E71
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131668
IP address blocks: 2a0f:5707:ffa0::/46 maxlen: 48
2a0f:5707:ffa4::/46 maxlen: 48
2a0f:5707:fff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e5:35:c9:c9:5e:20:e9:65:11:17:5e:3f:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e197bcb7b2316abb9b886cc2d71df2ac345771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:ac:f8:0e:b5:ce:8a:fe:c1:11:98:55:62:
57:67:c1:74:32:12:d5:10:91:7e:68:86:27:83:65:
a9:9c:1f:dd:50:45:9b:81:38:de:ef:b8:e5:ab:61:
a8:66:b0:a9:bd:96:35:f3:70:2c:ae:e7:65:13:14:
38:db:38:e4:58:16:24:13:75:8c:78:c0:97:94:9f:
a4:7c:10:ff:8b:40:9e:b4:39:7e:27:7a:2d:5c:78:
4c:0c:29:3c:34:f2:24:88:b8:8f:8e:8c:9a:26:2b:
dc:e6:67:55:07:d8:90:98:4f:2d:e1:c2:f4:0d:c6:
51:9f:7b:49:07:be:b4:46:86:73:ac:f8:b1:ae:02:
7c:06:ce:1d:b3:a7:d5:e6:2b:e9:cf:44:c1:29:07:
01:12:b1:b4:b7:09:5b:b4:07:be:5d:9d:31:05:b1:
42:8c:fe:86:7c:da:fa:16:50:89:7e:d3:0e:a7:25:
ba:09:05:e0:6d:17:50:a1:e1:e9:ef:4d:18:fe:10:
cd:ea:a9:e0:37:0e:8b:81:9d:ee:2f:1e:ab:14:3d:
7d:3d:c6:33:16:f6:be:59:c3:bd:de:30:7e:70:8f:
d0:7a:86:01:98:56:a7:91:89:35:f7:79:cd:0d:8d:
03:3a:14:8a:7e:c9:c2:25:4f:1d:8d:76:64:e5:d7:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:7B:CB:7B:23:16:AB:B9:B8:86:CC:2D:71:DF:2A:C3:45:77:1E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ffa0::/45
2a0f:5707:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
88:cd:84:8d:be:3c:ae:f4:a2:9f:60:88:b6:75:c1:af:65:6f:
07:99:e8:c4:cd:d6:ff:71:bb:cb:3a:50:b5:5d:63:51:d1:a3:
dd:29:c1:85:48:cb:59:b2:aa:ef:e2:9d:cc:83:ee:31:e1:2f:
5c:94:2c:47:ca:4d:6a:2b:00:a4:45:da:59:b2:5c:bd:d2:7b:
62:d8:ba:f6:a1:38:36:d4:e0:9c:2d:c9:cd:c3:04:3f:d3:6f:
0e:06:db:85:b1:b2:52:ae:eb:34:7f:3c:8e:34:5e:f6:76:e4:
11:53:67:81:a7:39:51:d1:76:d4:de:ac:56:f6:ec:e1:1f:b1:
71:81:b8:f0:88:2b:60:6f:dc:a1:14:a4:20:2b:8f:3e:69:d0:
d7:3c:97:17:d0:64:18:f1:a7:0e:18:56:35:ff:5a:a6:01:80:
02:c3:ff:3b:48:cb:ed:41:42:9f:ff:9b:28:3d:a1:45:e1:f9:
7f:52:2a:56:cd:4d:4b:5e:98:69:d0:b4:98:ac:b5:6c:7e:76:
69:5f:8c:b1:f3:4a:95:20:00:e9:c3:2f:be:f0:2d:e7:20:8d:
b9:59:f7:7f:33:86:4f:a8:77:6c:a5:b4:9e:a5:f3:23:8a:45:
93:37:8f:6b:f1:7f:79:ee:6c:53:b7:9a:b9:01:f0:d2:92:d2:
a8:33:39:97
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma+U1ycleIOllERdePz5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTE5N2JjYjdiMjMxNmFiYjliODg2Y2MyZDcxZGYyYWMzNDU3NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNis+A61zor+wRGYVWJXZ8F0MhLV
EJF+aIYng2WpnB/dUEWbgTje77jlq2GoZrCpvZY183AsrudlExQ42zjkWBYkE3WM
eMCXlJ+kfBD/i0CetDl+J3otXHhMDCk8NPIkiLiPjoyaJivc5mdVB9iQmE8t4cL0
DcZRn3tJB760RoZzrPixrgJ8Bs4ds6fV5ivpz0TBKQcBErG0twlbtAe+XZ0xBbFC
jP6GfNr6FlCJftMOpyW6CQXgbRdQoeHp700Y/hDN6qngNw6LgZ3uLx6rFD19PcYz
Fva+WcO93jB+cI/QeoYBmFankYk193nNDY0DOhSKfsnCJU8djXZk5ddy0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI4Ze8t7IxarubiGzC1x3yrDRXceMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvamhsN3kzc2pGcXU1dUliTUxYSGZLc05GZHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcDKg9XB/+g
AwcAKg9XB//yMA0GCSqGSIb3DQEBCwUAA4IBAQCIzYSNvjyu9KKfYIi2dcGvZW8H
mejEzdb/cbvLOlC1XWNR0aPdKcGFSMtZsqrv4p3Mg+4x4S9clCxHyk1qKwCkRdpZ
sly90nti2Lr2oTg21OCcLcnNwwQ/028OBtuFsbJSrus0fzyONF72duQRU2eBpzlR
0XbU3qxW9uzhH7FxgbjwiCtgb9yhFKQgK48+adDXPJcX0GQY8acOGFY1/1qmAYAC
w/87SMvtQUKf/5soPaFF4fl/UipWzU1LXphp0LSYrLVsfnZpX4yx80qVIADpwy++
8C3nII25Wfd/M4ZPqHdspbSepfMjikWTN49r8X957mxTt5q5AfDSktKoMzmX
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:50 2025 by rpki-client