Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa
File: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (raw, json)
Hash identifier: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=
Subject key identifier: 67:7E:EF:85:33:88:81:74:FB:60:51:E5:37:7C:3D:68:BF:A5:93:96
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019423D72A309B89D4ADDDC1FE433818C87B
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:6640:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:30:9b:89:d4:ad:dd:c1:fe:43:38:18:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=677eef8533888174fb6051e5377c3d68bfa59396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:84:28:cb:29:97:68:d7:0e:66:b6:17:ef:
59:de:af:3f:85:66:fb:e6:39:12:6c:d9:9d:b4:cd:
4f:a7:12:11:cd:fe:14:c9:57:59:d7:91:70:66:f2:
eb:bd:2d:f9:7f:c0:c9:b4:4c:2f:83:0e:15:7c:08:
94:b8:e2:f4:4f:5b:6c:86:24:71:5a:0e:ce:37:24:
07:57:ba:ac:89:3a:06:d2:cb:58:1f:ed:49:d9:2f:
d1:d5:92:ba:70:2d:07:29:dc:81:9e:fe:ff:1a:68:
df:ed:d9:1f:d3:05:bb:9e:7a:e2:2f:27:48:bd:02:
d2:6c:93:95:b5:d9:2e:a7:35:64:76:bc:d6:a9:a0:
dc:eb:a9:89:8b:44:2a:ea:7f:bd:99:af:53:37:19:
c2:74:f0:dd:02:14:ba:8d:73:8a:ef:e7:e8:6e:0d:
cd:08:88:45:21:a1:bb:3c:72:c8:e5:c8:c2:8e:0c:
72:d3:85:a4:72:88:fa:e4:2a:49:75:d8:51:bd:d4:
17:f9:13:f9:5d:1f:88:ff:ec:6f:3a:54:f0:94:17:
49:91:5f:02:85:f8:31:75:7e:d0:4e:b6:d1:87:33:
bf:54:a4:7b:a7:4b:0c:f5:12:38:f2:21:6c:a4:75:
da:22:06:78:84:13:79:61:d1:84:21:eb:da:fa:01:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:EF:85:33:88:81:74:FB:60:51:E5:37:7C:3D:68:BF:A5:93:96
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6640:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:d0:c8:d4:e7:49:bb:d3:06:e5:68:8d:c1:fe:23:9d:7a:94:
9c:b0:27:e0:f6:86:5a:f0:44:c1:5f:17:32:b2:b1:90:83:e5:
0c:32:7a:b3:5e:a8:9c:3d:4c:ac:32:5a:54:f1:54:b7:1a:38:
82:bc:6e:c6:23:3d:28:ee:42:38:1c:37:9d:e9:8b:4c:80:7c:
55:4d:04:7b:a8:f9:e3:13:f4:8c:bb:e2:c5:7c:ae:3d:67:be:
0e:0d:d9:26:f3:ec:82:4d:dd:9c:6b:6d:1b:4d:ad:8a:bc:5a:
aa:dc:75:56:20:30:c0:69:02:d6:11:80:be:07:28:e9:7c:06:
45:22:f5:fe:02:78:f5:f1:52:8f:a3:c1:e7:4a:03:33:ae:09:
81:97:d2:3f:41:79:78:42:db:08:c8:23:92:1e:f8:31:2a:7a:
69:4f:3f:24:b4:d3:03:12:98:bd:b7:1d:8a:1f:7b:64:81:4b:
6b:6c:31:4a:d4:6c:4b:73:c6:25:ad:2b:12:a6:27:f0:54:5f:
9b:ce:73:b9:e4:d2:47:69:b4:e9:f8:3d:71:80:11:64:74:91:
f3:84:f3:f0:f7:f9:7c:75:0c:b6:a2:5d:3a:d8:be:6e:d7:c2:
87:16:45:5c:8c:76:5c:a3:8a:0f:d2:72:2c:fe:3d:fd:fb:50:
28:7f:f9:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1yowm4nUrd3B/kM4GMh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzdlZWY4NTMzODg4MTc0ZmI2MDUxZTUzNzdjM2Q2OGJmYTU5Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYaEKMspl2jXDma2F+9Z3q8/hWb7
5jkSbNmdtM1PpxIRzf4UyVdZ15FwZvLrvS35f8DJtEwvgw4VfAiUuOL0T1tshiRx
Wg7ONyQHV7qsiToG0stYH+1J2S/R1ZK6cC0HKdyBnv7/Gmjf7dkf0wW7nnriLydI
vQLSbJOVtdkupzVkdrzWqaDc66mJi0Qq6n+9ma9TNxnCdPDdAhS6jXOK7+fobg3N
CIhFIaG7PHLI5cjCjgxy04Wkcoj65CpJddhRvdQX+RP5XR+I/+xvOlTwlBdJkV8C
hfgxdX7QTrbRhzO/VKR7p0sM9RI48iFspHXaIgZ4hBN5YdGEIeva+gF81QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGd+74UziIF0+2BR5Td8PWi/pZOWMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvWjM3dmhUT0lnWFQ3WUZIbE4zdzlhTC1sazVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBmQAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQB20MjU50m70wblaI3B/iOdepScsCfg9oZa8ETB
XxcysrGQg+UMMnqzXqicPUysMlpU8VS3GjiCvG7GIz0o7kI4HDed6YtMgHxVTQR7
qPnjE/SMu+LFfK49Z74ODdkm8+yCTd2ca20bTa2KvFqq3HVWIDDAaQLWEYC+Byjp
fAZFIvX+Anj18VKPo8HnSgMzrgmBl9I/QXl4QtsIyCOSHvgxKnppTz8ktNMDEpi9
tx2KH3tkgUtrbDFK1GxLc8YlrSsSpifwVF+bznO55NJHabTp+D1xgBFkdJHzhPPw
9/l8dQy2ol062L5u18KHFkVcjHZco4oP0nIs/j39+1Aof/k6
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:40 2025 by rpki-client