Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/bksTsZ-cnXirfbGe5nOmhmEPTTY.roa
File: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (raw, json)
Hash identifier: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=
Subject key identifier: 6E:4B:13:B1:9F:9C:9D:78:AB:7D:B1:9E:E6:73:A6:86:61:0F:4D:36
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B262A7CDFE748F1FD78DF83F2E50E4
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/bksTsZ-cnXirfbGe5nOmhmEPTTY.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 2a11:840:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:62:a7:cd:fe:74:8f:1f:d7:8d:f8:3f:2e:50:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e4b13b19f9c9d78ab7db19ee673a686610f4d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:49:0c:81:ca:f5:76:3a:d7:6e:79:89:31:
d8:fe:4f:3d:59:fc:8a:4c:a7:94:91:3c:d6:90:07:
08:fe:4d:b2:1b:29:0b:bf:fb:63:d6:fb:fa:d8:f4:
fe:a1:10:ee:9a:45:c3:e0:df:0a:e9:77:82:24:66:
81:97:d8:a1:a7:94:0c:82:8c:81:42:5a:d6:f1:89:
95:ac:8f:fe:f4:e2:7b:b4:58:10:ce:85:d8:bf:68:
18:4d:ee:45:3c:bb:96:5e:58:a2:02:45:51:ad:13:
06:df:85:f7:1d:3d:eb:cc:18:18:d0:80:14:a2:dc:
9b:02:dc:a9:c2:b6:b3:30:4b:04:ba:18:70:9a:42:
27:e8:a3:49:19:05:5d:2f:d1:a9:5e:b3:de:32:c3:
b6:ad:1e:ab:e6:60:50:fc:a2:68:86:b6:38:bf:2a:
dc:4f:41:a6:5c:5e:2a:56:ca:31:eb:11:63:71:5a:
17:98:26:6a:a9:33:71:e2:15:30:25:01:9c:63:50:
50:5e:c7:e7:ae:4e:16:e2:7e:44:3a:97:43:f3:87:
43:5d:55:b6:68:c4:ca:c4:2c:80:a2:42:2b:2a:b7:
bb:ca:f9:fd:c0:12:4b:e4:50:a7:00:2b:eb:65:a9:
4c:1b:1e:24:27:bb:2c:23:61:22:64:c3:71:ab:16:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:13:B1:9F:9C:9D:78:AB:7D:B1:9E:E6:73:A6:86:61:0F:4D:36
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/bksTsZ-cnXirfbGe5nOmhmEPTTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:24::/48
Signature Algorithm: sha256WithRSAEncryption
31:6d:56:f7:cf:ba:f2:35:30:e0:67:5c:64:4c:6e:d1:02:b5:
2c:0b:48:4e:b7:00:02:ed:05:19:c4:ad:e6:16:50:98:2b:74:
96:93:53:5e:8b:cb:b3:02:c4:63:41:d0:70:9a:ea:44:be:63:
32:3b:8d:df:a1:b8:79:02:5b:a4:2b:0d:ba:9a:b7:fe:72:61:
f5:91:f9:97:69:69:22:5e:da:16:4d:54:f7:97:cf:c5:c0:24:
2e:d3:d5:e3:ee:0c:78:c5:66:f9:22:c5:74:af:e7:49:a1:27:
20:14:81:fc:ab:dc:f3:22:59:da:0a:d6:44:d8:2d:16:44:3f:
0c:e9:45:07:2e:2e:b8:ed:6e:80:9a:38:8a:31:0a:22:bf:0e:
28:5b:f9:35:34:a3:f5:65:85:c6:71:87:6c:f2:f6:39:f6:71:
80:f5:60:bf:27:bf:77:24:e6:1a:cf:75:02:80:15:00:ef:ba:
9a:c7:eb:91:f0:b9:c2:46:b9:11:0a:bc:42:02:78:fb:84:82:
15:92:f6:a6:44:8d:0d:76:fb:df:29:2d:da:89:63:7d:80:91:
31:6d:9a:8d:03:fe:58:86:c8:87:73:ed:8d:a5:f2:7e:e2:78:
ca:33:ac:a1:c9:b3:85:5e:e0:c2:34:51:bc:e9:34:f0:7e:a9:
85:55:70:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQksmKnzf50jx/Xjfg/LlDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjUwMTAyMDE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTRiMTNiMTlmOWM5ZDc4YWI3ZGIxOWVlNjczYTY4NjYxMGY0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVBJDIHK9XY61255iTHY/k89WfyK
TKeUkTzWkAcI/k2yGykLv/tj1vv62PT+oRDumkXD4N8K6XeCJGaBl9ihp5QMgoyB
QlrW8YmVrI/+9OJ7tFgQzoXYv2gYTe5FPLuWXliiAkVRrRMG34X3HT3rzBgY0IAU
otybAtypwrazMEsEuhhwmkIn6KNJGQVdL9GpXrPeMsO2rR6r5mBQ/KJohrY4vyrc
T0GmXF4qVsox6xFjcVoXmCZqqTNx4hUwJQGcY1BQXsfnrk4W4n5EOpdD84dDXVW2
aMTKxCyAokIrKre7yvn9wBJL5FCnACvrZalMGx4kJ7ssI2EiZMNxqxa9zwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG5LE7GfnJ14q32xnuZzpoZhD002MB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvYmtzVHNaLWNuWGlyZmJHZTVuT21obUVQVFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAk
MA0GCSqGSIb3DQEBCwUAA4IBAQAxbVb3z7ryNTDgZ1xkTG7RArUsC0hOtwAC7QUZ
xK3mFlCYK3SWk1Nei8uzAsRjQdBwmupEvmMyO43fobh5AlukKw26mrf+cmH1kfmX
aWkiXtoWTVT3l8/FwCQu09Xj7gx4xWb5IsV0r+dJoScgFIH8q9zzIlnaCtZE2C0W
RD8M6UUHLi647W6AmjiKMQoivw4oW/k1NKP1ZYXGcYds8vY59nGA9WC/J793JOYa
z3UCgBUA77qax+uR8LnCRrkRCrxCAnj7hIIVkvamRI0NdvvfKS3aiWN9gJExbZqN
A/5YhsiHc+2NpfJ+4njKM6yhybOFXuDCNFG86TTwfqmFVXCu
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:46:37 2025 by rpki-client