Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/30lwzpQpdK18VSEUUcrNnTo6x_A.roa
File: 30lwzpQpdK18VSEUUcrNnTo6x_A.roa (raw, json)
Hash identifier: 4WguQBLzBO5P5jDsU3mpB16po/h7d1SpGS2u9Q2vIdM=
Subject key identifier: DF:49:70:CE:94:29:74:AD:7C:55:21:14:51:CA:CD:9D:3A:3A:C7:F0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FC00BAAD383352AB2B25DC3FD69945
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/30lwzpQpdK18VSEUUcrNnTo6x_A.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216382
IP address blocks: 2a0c:9a40:9cc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:00:ba:ad:38:33:52:ab:2b:25:dc:3f:d6:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4970ce942974ad7c55211451cacd9d3a3ac7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:54:38:ca:78:4a:d7:63:15:79:44:6d:68:
2a:c7:80:d0:de:ed:9a:bd:0d:55:7c:58:29:e3:25:
0e:28:72:af:9e:33:5e:f8:93:01:4a:85:b6:1f:71:
bc:76:cd:62:9b:32:b7:3a:cf:4a:cf:1a:1f:bf:2c:
3b:f2:5c:4d:3c:d6:df:94:34:cf:15:1e:e8:29:c3:
24:99:0d:ea:e3:51:9e:ce:d1:18:93:2d:3a:40:aa:
46:66:ff:4e:5d:38:fa:74:e3:8e:07:ff:b0:5b:d5:
e4:90:75:ae:4d:46:54:a2:28:13:90:39:08:15:1e:
f6:0d:a5:1b:f5:a7:4c:82:03:df:f5:8e:70:d0:23:
f1:85:99:dc:78:6e:a1:7d:0b:f6:db:52:63:b2:5e:
7d:3f:d6:5a:05:66:ff:60:13:c0:a6:54:c7:39:02:
3e:1e:62:72:ce:e6:21:a0:ff:24:6e:f6:29:78:94:
80:dc:e6:3a:66:7b:22:18:70:41:79:79:db:99:68:
fe:1c:6f:6c:e0:56:67:09:6d:64:c5:d2:e1:3b:8a:
fe:a0:ab:0f:58:d6:ae:4e:0d:f8:9e:fc:26:70:65:
15:a8:42:c2:59:43:2a:9d:5e:8d:60:6f:5b:b3:53:
aa:0a:c8:8a:a7:eb:f3:22:43:f3:2b:19:e9:fd:b4:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:70:CE:94:29:74:AD:7C:55:21:14:51:CA:CD:9D:3A:3A:C7:F0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/30lwzpQpdK18VSEUUcrNnTo6x_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9cc0::/44
Signature Algorithm: sha256WithRSAEncryption
31:ac:1a:d4:6b:85:13:e5:6c:ae:66:e1:5f:aa:b8:39:86:8b:
ad:32:59:24:15:1f:49:88:96:fd:52:da:95:47:0d:09:07:36:
f6:e1:ca:8a:60:1b:39:0b:60:8f:06:5d:b4:85:f0:1e:b7:d8:
00:c4:e1:6e:3d:fc:b9:22:ab:0f:45:83:bf:0d:ff:d7:10:e3:
d2:d6:69:c8:f9:32:b7:e6:9b:c4:93:5d:ff:d2:19:d2:8c:c0:
55:01:29:b9:d0:68:42:85:58:3c:77:d8:6a:51:0c:a0:ec:93:
a7:26:80:6a:55:98:25:f0:1d:9d:5b:a3:fd:2e:5d:91:cf:5c:
70:f4:c8:a8:bd:fe:cd:e8:b2:b1:72:36:68:27:95:ba:37:a9:
5d:86:66:46:60:73:84:10:f8:b2:94:2e:c7:8a:e5:56:f1:93:
45:05:ed:27:f4:c0:43:f5:ed:28:18:5c:d6:bd:b3:32:6b:9d:
0b:10:83:a8:84:33:ac:ee:05:e5:50:48:bf:af:e7:02:07:71:
53:b8:d4:2e:58:5d:7e:6e:60:37:9b:ea:65:62:07:da:55:54:
83:33:3d:67:4c:ae:4e:d7:4a:a9:0d:8a:30:fd:20:d7:4b:87:
0c:cf:e5:11:0e:70:cb:4a:06:ab:9c:e9:ae:35:8f:7d:02:68:
96:a2:6a:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi/AC6rTgzUqsrJdw/1plFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQ5NzBjZTk0Mjk3NGFkN2M1NTIxMTQ1MWNhY2Q5ZDNhM2FjN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVhUOMp4StdjFXlEbWgqx4DQ3u2a
vQ1VfFgp4yUOKHKvnjNe+JMBSoW2H3G8ds1imzK3Os9Kzxofvyw78lxNPNbflDTP
FR7oKcMkmQ3q41GeztEYky06QKpGZv9OXTj6dOOOB/+wW9XkkHWuTUZUoigTkDkI
FR72DaUb9adMggPf9Y5w0CPxhZnceG6hfQv221Jjsl59P9ZaBWb/YBPAplTHOQI+
HmJyzuYhoP8kbvYpeJSA3OY6ZnsiGHBBeXnbmWj+HG9s4FZnCW1kxdLhO4r+oKsP
WNauTg34nvwmcGUVqELCWUMqnV6NYG9bs1OqCsiKp+vzIkPzKxnp/bRoRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN9JcM6UKXStfFUhFFHKzZ06OsfwMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvMzBsd3pwUXBkSzE4VlNFVVVjck5uVG82eF9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQJzA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxrBrUa4UT5WyuZuFfqrg5houtMlkkFR9JiJb9
UtqVRw0JBzb24cqKYBs5C2CPBl20hfAet9gAxOFuPfy5IqsPRYO/Df/XEOPS1mnI
+TK35pvEk13/0hnSjMBVASm50GhChVg8d9hqUQyg7JOnJoBqVZgl8B2dW6P9Ll2R
z1xw9Miovf7N6LKxcjZoJ5W6N6ldhmZGYHOEEPiylC7HiuVW8ZNFBe0n9MBD9e0o
GFzWvbMya50LEIOohDOs7gXlUEi/r+cCB3FTuNQuWF1+bmA3m+plYgfaVVSDMz1n
TK5O10qpDYow/SDXS4cMz+URDnDLSgarnOmuNY99AmiWomqZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:26 2025 by rpki-client