Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2GXrSAOq6aZ1Ws8fKOHPG_MBGV0.roa
File: 2GXrSAOq6aZ1Ws8fKOHPG_MBGV0.roa (raw, json)
Hash identifier: BWWxc200KtBKhO8S7HN6fP7keCVvDIrJ3OB/aDsu96Y=
Subject key identifier: D8:65:EB:48:03:AA:E9:A6:75:5A:CF:1F:28:E1:CF:1B:F3:01:19:5D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCCAB10F9FAB88763FAA7AA0E815F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2GXrSAOq6aZ1Ws8fKOHPG_MBGV0.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142036
IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cc:ab:10:f9:fa:b8:87:63:fa:a7:aa:0e:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d865eb4803aae9a6755acf1f28e1cf1bf301195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:e7:bf:ae:4b:02:23:c3:ad:30:27:f8:b0:
39:3b:cd:ca:cd:da:c4:42:f5:80:52:21:38:66:d4:
a9:be:e3:d4:6c:5f:ca:82:cb:7d:e8:cd:85:85:19:
00:4a:d8:03:54:ff:9d:8b:51:2b:af:15:fd:de:37:
37:26:fc:3f:26:43:31:b1:41:52:35:d3:c6:d5:b2:
83:20:f2:17:b6:75:8a:81:c6:ec:92:96:ac:c8:a2:
f0:28:9f:e9:97:3a:0d:23:ce:ff:57:50:5f:de:28:
67:ba:6d:5c:12:4f:56:f7:7b:03:2f:9f:88:2b:82:
69:d4:cc:c8:75:42:3a:f7:0c:39:ba:a0:70:ed:02:
d7:48:12:6f:f9:d7:24:61:8a:94:28:2a:c0:69:29:
4b:be:63:2c:0e:1e:e2:c8:ab:bd:f8:fc:f2:a3:d2:
1d:ac:c3:8a:68:51:73:b8:e2:09:ec:6d:7c:2f:3b:
c2:74:5a:1f:2f:17:68:18:7f:65:f4:f5:ac:4d:95:
53:32:41:ce:62:3e:04:fe:e0:c6:36:e0:44:05:f1:
d9:fa:90:4c:cf:e4:ac:96:bb:5d:29:a9:c4:0f:e7:
b2:d2:ad:16:dd:99:4b:d2:89:6a:06:02:e2:ea:6e:
00:77:de:8e:93:a1:9a:76:6e:a7:78:e8:91:12:7c:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:EB:48:03:AA:E9:A6:75:5A:CF:1F:28:E1:CF:1B:F3:01:19:5D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2GXrSAOq6aZ1Ws8fKOHPG_MBGV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82e0::/44
Signature Algorithm: sha256WithRSAEncryption
09:9c:24:4b:82:63:53:05:1b:ab:6f:5c:a0:68:0e:42:1e:e9:
9e:f9:90:22:57:1b:77:de:e8:30:03:69:14:c7:c0:0e:d7:62:
ec:39:72:74:4a:4a:37:62:64:8a:58:dc:c5:cd:2a:c0:72:cc:
d9:06:30:74:ee:39:41:22:bc:59:66:92:7e:5a:22:77:36:21:
74:e7:07:cb:c2:3d:94:d5:41:39:19:d2:38:18:cd:c0:97:c4:
6d:56:07:35:ca:8d:18:70:e9:0c:0d:2f:4b:01:44:c4:49:eb:
fa:47:29:59:42:43:77:65:70:7b:e7:6b:04:fa:93:57:bb:f9:
0b:f8:d1:67:1b:20:4a:e3:16:06:72:a1:2e:58:c1:9d:27:da:
e2:39:c6:b2:79:2e:a1:97:6f:40:d4:40:b9:ea:5d:0b:3b:e1:
3f:a7:43:a0:83:12:89:76:d3:18:18:e4:a6:8a:55:e2:25:0c:
9e:e8:f5:cd:ba:a6:cb:47:3b:6f:23:fd:c8:68:bc:b0:cf:03:
07:f9:69:53:66:3a:fe:94:0e:eb:33:1e:00:88:4a:60:5d:77:
1e:d6:5e:e4:5e:e9:9d:21:ce:e8:46:e6:7b:10:3d:31:89:bc:
42:02:1f:39:a2:e8:67:3a:56:7d:ac:40:bd:9e:11:e8:15:82:
0f:4e:db:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+8yrEPn6uIdj+qeqDoFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY1ZWI0ODAzYWFlOWE2NzU1YWNmMWYyOGUxY2YxYmYzMDExOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K3nv65LAiPDrTAn+LA5O83KzdrE
QvWAUiE4ZtSpvuPUbF/Kgst96M2FhRkAStgDVP+di1ErrxX93jc3Jvw/JkMxsUFS
NdPG1bKDIPIXtnWKgcbskpasyKLwKJ/plzoNI87/V1Bf3ihnum1cEk9W93sDL5+I
K4Jp1MzIdUI69ww5uqBw7QLXSBJv+dckYYqUKCrAaSlLvmMsDh7iyKu9+Pzyo9Id
rMOKaFFzuOIJ7G18LzvCdFofLxdoGH9l9PWsTZVTMkHOYj4E/uDGNuBEBfHZ+pBM
z+SslrtdKanED+ey0q0W3ZlL0olqBgLi6m4Ad96Ok6Gadm6neOiREnzQZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNhl60gDqummdVrPHyjhzxvzARldMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvMkdYclNBT3E2YVoxV3M4ZktPSFBHX01CR1YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQILg
MA0GCSqGSIb3DQEBCwUAA4IBAQAJnCRLgmNTBRurb1ygaA5CHume+ZAiVxt33ugw
A2kUx8AO12LsOXJ0Sko3YmSKWNzFzSrAcszZBjB07jlBIrxZZpJ+WiJ3NiF05wfL
wj2U1UE5GdI4GM3Al8RtVgc1yo0YcOkMDS9LAUTESev6RylZQkN3ZXB752sE+pNX
u/kL+NFnGyBK4xYGcqEuWMGdJ9riOcayeS6hl29A1EC56l0LO+E/p0OggxKJdtMY
GOSmilXiJQye6PXNuqbLRztvI/3IaLywzwMH+WlTZjr+lA7rMx4AiEpgXXce1l7k
XumdIc7oRuZ7ED0xibxCAh85ouhnOlZ9rEC9nhHoFYIPTtuX
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:41 2025 by rpki-client