Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iFKskHAhUAeRKZa_FLOtY3OZJPE.roa
File: iFKskHAhUAeRKZa_FLOtY3OZJPE.roa (raw, json)
Hash identifier: eW+/ckoQIKVO2nt3YU3pnrj8493YPEO7nn+ty6hbovk=
Subject key identifier: 88:52:AC:90:70:21:50:07:91:29:96:BF:14:B3:AD:63:73:99:24:F1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482B85EEE4C77641549DDA9567F0B1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iFKskHAhUAeRKZa_FLOtY3OZJPE.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199925
IP address blocks: 2a0d:b740::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a0f:28c0::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:85:ee:e4:c7:76:41:54:9d:da:95:67:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8852ac9070215007912996bf14b3ad63739924f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:8c:95:ea:89:d8:70:ff:2d:4d:c4:0e:b4:
e5:17:fc:44:cd:2b:9b:d0:96:97:e2:ad:c8:d3:a3:
33:e3:33:11:7a:e3:f4:fd:94:ce:34:b3:8b:e2:c6:
87:b0:cb:79:91:27:5b:c0:fb:61:fb:6c:8f:b0:c7:
95:81:18:66:ef:f3:54:45:d5:c7:37:24:38:d6:e3:
91:8b:97:20:02:50:bc:e8:d1:c7:45:28:ca:71:08:
c1:f4:21:c1:72:b5:b0:66:91:04:65:f0:80:0d:57:
7f:ba:cd:40:32:9c:e8:50:6b:cd:9e:f5:2a:ff:62:
26:d8:04:cf:ff:3b:b0:c3:3d:1f:fb:82:05:1d:65:
94:0a:78:1a:67:23:9f:84:dd:8e:20:c0:94:f0:f1:
3e:61:13:c0:0c:7d:66:95:50:a2:14:bc:1d:5a:09:
fc:cc:c7:e7:b8:c0:1a:ae:40:86:8d:ca:5f:ab:87:
62:22:8c:57:94:bf:52:b2:93:0e:23:0b:cf:6f:59:
2e:bc:6c:ac:89:8c:c0:fc:1a:d1:2c:3c:39:9e:c6:
79:5a:7a:fc:c6:5e:91:51:8d:6a:9a:e7:43:4c:5d:
76:6a:7b:30:f3:d3:3c:70:b9:c8:26:79:4b:49:44:
68:60:c6:e8:8f:8b:4a:5c:cc:2b:73:35:c8:bb:e2:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:AC:90:70:21:50:07:91:29:96:BF:14:B3:AD:63:73:99:24:F1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iFKskHAhUAeRKZa_FLOtY3OZJPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b740::/29
2a0f:1480::/29
2a0f:28c0::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
be:ec:fc:77:d7:f1:8f:98:b2:a3:de:e6:6a:21:71:50:ef:0b:
12:c8:d7:9b:a7:db:da:38:96:1c:48:f0:a4:6d:89:f1:77:7a:
fb:46:a7:08:ec:e9:1b:04:6e:41:12:36:06:51:83:47:16:31:
a2:69:55:c5:5e:c0:77:c7:09:1b:79:10:48:a2:61:f6:ed:71:
9f:f9:00:47:63:fa:65:07:fe:17:91:98:5b:bb:3c:17:98:fe:
50:48:fe:09:50:55:c2:74:7b:75:14:82:43:01:ec:66:60:6a:
f5:42:75:38:dc:9e:51:d1:97:07:20:aa:80:a2:94:d7:e2:74:
83:3b:b6:13:9a:7a:21:fb:43:08:43:57:c3:79:76:2f:58:40:
72:6f:30:6b:33:06:25:c5:c2:25:35:1a:c7:fa:7e:51:04:85:
f5:50:8c:9a:2a:aa:a1:f8:b1:68:b7:4e:f0:fb:4d:04:10:e2:
43:e7:4a:82:47:43:ab:d9:7b:1e:44:b7:90:26:a4:15:ba:c4:
14:5f:e4:e6:67:37:ee:3d:4a:49:fd:88:04:41:65:34:97:aa:
85:f2:72:5e:52:d1:79:41:db:1a:8e:1b:59:a5:21:7c:5b:75:
39:9d:af:a0:1d:dc:1c:40:ef:f0:18:54:5f:8a:7d:4d:cc:30:
07:90:3a:61
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQnSCuF7uTHdkFUndqVZ/CxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODUyYWM5MDcwMjE1MDA3OTEyOTk2YmYxNGIzYWQ2MzczOTkyNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GCMleqJ2HD/LU3EDrTlF/xEzSub
0JaX4q3I06Mz4zMReuP0/ZTONLOL4saHsMt5kSdbwPth+2yPsMeVgRhm7/NURdXH
NyQ41uORi5cgAlC86NHHRSjKcQjB9CHBcrWwZpEEZfCADVd/us1AMpzoUGvNnvUq
/2Im2ATP/zuwwz0f+4IFHWWUCngaZyOfhN2OIMCU8PE+YRPADH1mlVCiFLwdWgn8
zMfnuMAarkCGjcpfq4diIoxXlL9SspMOIwvPb1kuvGysiYzA/BrRLDw5nsZ5Wnr8
xl6RUY1qmudDTF12answ89M8cLnIJnlLSURoYMboj4tKXMwrczXIu+JxCwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIhSrJBwIVAHkSmWvxSzrWNzmSTxMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvaUZLc2tIQWhVQWVSS1phX0ZMT3RZM09aSlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKg23QAMF
AyoPFIADBQMqDyjAAwUDKhMrQDANBgkqhkiG9w0BAQsFAAOCAQEAvuz8d9fxj5iy
o97maiFxUO8LEsjXm6fb2jiWHEjwpG2J8Xd6+0anCOzpGwRuQRI2BlGDRxYxomlV
xV7Ad8cJG3kQSKJh9u1xn/kAR2P6ZQf+F5GYW7s8F5j+UEj+CVBVwnR7dRSCQwHs
ZmBq9UJ1ONyeUdGXByCqgKKU1+J0gzu2E5p6IftDCENXw3l2L1hAcm8wazMGJcXC
JTUax/p+UQSF9VCMmiqqofixaLdO8PtNBBDiQ+dKgkdDq9l7HkS3kCakFbrEFF/k
5mc37j1KSf2IBEFlNJeqhfJyXlLReUHbGo4bWaUhfFt1OZ2voB3cHEDv8BhUX4p9
TcwwB5A6YQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:32:20 2025 by rpki-client