Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bVTj9GlhWonuaW4I9cjegUl8Y0k.roa
File: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (raw, json)
Hash identifier: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=
Subject key identifier: 6D:54:E3:F4:69:61:5A:89:EE:69:6E:08:F5:C8:DE:81:49:7C:63:49
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DC2B3D32E9199343A39243B04E257
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bVTj9GlhWonuaW4I9cjegUl8Y0k.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214602
IP address blocks: 2a0c:f640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c2:b3:d3:2e:91:99:34:3a:39:24:3b:04:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d54e3f469615a89ee696e08f5c8de81497c6349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:ed:5c:2e:0e:01:ac:92:a0:7c:75:03:74:
e9:93:d9:ec:93:bd:bb:c0:f2:4d:05:9d:8a:aa:38:
12:4d:19:97:87:23:24:db:10:24:ca:e4:bb:34:61:
41:e0:0e:df:ba:26:ff:d6:3a:b6:6f:ec:c6:65:fe:
24:03:d8:75:7c:2c:34:e5:4c:4c:41:a1:84:88:f8:
16:ff:44:df:76:b6:48:4b:e4:4d:9e:d3:64:d9:12:
e7:e2:d0:3e:de:25:4c:89:24:26:88:b9:22:6e:1d:
e1:65:01:46:d9:c9:10:86:9b:b8:fe:66:34:9e:4c:
1a:d0:a6:ba:e7:3d:06:4f:16:cd:86:7d:77:1e:13:
88:6c:30:c4:8a:ef:01:09:56:db:be:ef:c1:c7:73:
9d:63:eb:1a:1c:51:f0:95:a3:2b:3c:55:e3:c3:b9:
8c:2f:50:24:9a:c2:68:31:80:23:3e:50:a4:f2:9f:
d0:96:de:0f:8a:62:c1:46:5d:b3:e8:b0:f1:d3:78:
f0:da:6c:3e:10:b2:34:54:8d:fe:33:1d:3a:40:fb:
53:e2:35:33:35:a1:85:9e:a5:dc:55:63:2f:48:84:
be:81:4a:74:37:ab:10:6e:7e:09:ea:b2:7c:1c:2c:
4a:ec:cd:62:79:75:da:e8:a8:96:a1:0d:76:89:b7:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:E3:F4:69:61:5A:89:EE:69:6E:08:F5:C8:DE:81:49:7C:63:49
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bVTj9GlhWonuaW4I9cjegUl8Y0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f640::/32
Signature Algorithm: sha256WithRSAEncryption
3e:83:03:38:02:6f:ee:29:36:cc:76:88:20:ef:fd:a6:e7:e8:
94:02:24:94:3f:ab:91:39:70:99:dd:e2:6f:30:bf:0a:1b:6b:
ec:8d:c9:ee:86:18:a5:81:e3:5b:52:98:6c:3f:72:86:a6:df:
22:98:60:bf:d7:18:cd:9c:81:58:a2:84:0a:0a:d3:88:f0:36:
93:82:a0:b0:ed:98:9a:83:3e:b2:dd:24:10:06:b3:24:2b:43:
59:95:4d:a3:a7:8a:f9:e2:1a:6c:97:f4:ac:03:bf:0b:2d:95:
5f:ae:f3:dc:c4:b2:0b:8c:0b:fc:88:54:46:2f:1f:e6:f1:3a:
01:4d:8f:25:d5:5d:26:b7:2e:89:c4:ce:13:5a:ad:50:25:02:
ee:54:88:f1:80:87:14:59:de:c6:74:40:0c:3a:c2:99:5f:f4:
96:7c:54:ff:d4:0a:97:f1:e6:af:1b:74:ac:82:06:d1:2a:f2:
9a:48:2a:7f:0c:c0:fc:48:1e:df:18:18:6d:e1:41:16:6d:1b:
5a:c8:c3:5f:37:53:32:4a:ba:06:97:10:34:37:37:f8:68:7c:
73:6b:b2:ed:2c:03:3e:85:29:08:9b:a4:b3:6a:94:90:10:fe:
be:c7:29:86:ed:72:f1:35:f7:a3:05:d4:38:c9:0d:f1:81:18:
de:b6:18:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijcKz0y6RmTQ6OSQ7BOJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwMTAxMTU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU0ZTNmNDY5NjE1YTg5ZWU2OTZlMDhmNWM4ZGU4MTQ5N2M2MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/TtXC4OAaySoHx1A3Tpk9nsk727
wPJNBZ2KqjgSTRmXhyMk2xAkyuS7NGFB4A7fuib/1jq2b+zGZf4kA9h1fCw05UxM
QaGEiPgW/0TfdrZIS+RNntNk2RLn4tA+3iVMiSQmiLkibh3hZQFG2ckQhpu4/mY0
nkwa0Ka65z0GTxbNhn13HhOIbDDEiu8BCVbbvu/Bx3OdY+saHFHwlaMrPFXjw7mM
L1AkmsJoMYAjPlCk8p/Qlt4PimLBRl2z6LDx03jw2mw+ELI0VI3+Mx06QPtT4jUz
NaGFnqXcVWMvSIS+gUp0N6sQbn4J6rJ8HCxK7M1ieXXa6KiWoQ12ibcooQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFG1U4/RpYVqJ7mluCPXI3oFJfGNJMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvYlZUajlHbGhXb251YVc0STljamVnVWw4WTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2QDAN
BgkqhkiG9w0BAQsFAAOCAQEAPoMDOAJv7ik2zHaIIO/9pufolAIklD+rkTlwmd3i
bzC/Chtr7I3J7oYYpYHjW1KYbD9yhqbfIphgv9cYzZyBWKKECgrTiPA2k4KgsO2Y
moM+st0kEAazJCtDWZVNo6eK+eIabJf0rAO/Cy2VX67z3MSyC4wL/IhURi8f5vE6
AU2PJdVdJrcuicTOE1qtUCUC7lSI8YCHFFnexnRADDrCmV/0lnxU/9QKl/Hmrxt0
rIIG0SrymkgqfwzA/Ege3xgYbeFBFm0bWsjDXzdTMkq6BpcQNDc3+Gh8c2uy7SwD
PoUpCJuks2qUkBD+vscphu1y8TX3owXUOMkN8YEY3rYYig==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:12 2025 by rpki-client