Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cuj9x3FN-4r0Zu9OZaNznJgeEGU.roa
File: Cuj9x3FN-4r0Zu9OZaNznJgeEGU.roa (raw, json)
Hash identifier: vZZI7E3C/Lsu29ZzSZrhE39zE0FDYn73mEuhh8weRsM=
Subject key identifier: 0A:E8:FD:C7:71:4D:FB:8A:F4:66:EF:4E:65:A3:73:9C:98:1E:10:65
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE60E783F229598EBE914D3EFB272
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cuj9x3FN-4r0Zu9OZaNznJgeEGU.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210445
IP address blocks: 2a0c:9a40:821a::/48 maxlen: 48
2a0c:9a40:9300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e6:0e:78:3f:22:95:98:eb:e9:14:d3:ef:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae8fdc7714dfb8af466ef4e65a3739c981e1065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:6c:1a:5f:a7:ad:3e:03:45:28:40:7a:3e:
e9:16:0c:5a:2c:4a:eb:1d:92:f3:32:ae:d2:0a:77:
56:bd:14:61:a9:1e:0e:d9:b7:8a:0f:d2:48:10:27:
28:67:0e:6d:0c:60:d9:89:86:c3:f3:c5:cb:4f:fa:
82:60:b3:d7:28:6c:21:88:03:41:c4:0f:47:e4:c2:
49:a4:96:e4:46:d5:90:66:4e:b3:64:39:82:6b:3a:
8a:f9:39:aa:2a:53:00:b6:c7:47:98:7d:1c:5b:b8:
40:13:58:5a:c4:a9:65:1f:f1:cb:a2:c0:55:2b:90:
74:64:57:64:46:e4:f3:3a:0d:be:f7:4c:54:96:98:
ff:a7:e9:53:06:21:56:3a:13:de:ef:99:76:b9:d1:
6e:a3:db:25:73:c4:27:76:fc:42:cc:9e:18:c2:bc:
30:49:4e:6d:08:ac:4f:a1:68:8e:34:ef:de:2f:cb:
25:eb:83:3b:eb:5c:98:c5:1f:06:6b:47:01:52:4f:
a0:11:91:f8:78:1f:ac:24:90:d4:04:74:41:d0:17:
c6:e9:37:16:e4:6c:2f:94:fb:7a:7e:5f:02:45:17:
bd:58:92:20:ba:f0:a2:ba:7a:6d:41:6d:1d:78:d2:
4d:4b:42:5f:74:6b:f9:9a:51:12:a9:85:98:15:12:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:FD:C7:71:4D:FB:8A:F4:66:EF:4E:65:A3:73:9C:98:1E:10:65
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Cuj9x3FN-4r0Zu9OZaNznJgeEGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:821a::/48
2a0c:9a40:9300::/40
Signature Algorithm: sha256WithRSAEncryption
cd:4d:2c:cd:aa:67:dd:8a:73:b5:ae:4b:8a:df:36:36:a0:48:
fc:4b:68:11:b2:e4:eb:2a:a0:b4:65:f3:52:6a:c0:fe:8f:ed:
ef:48:9d:9f:ab:09:f8:fc:98:f3:7b:37:c5:ba:ca:fd:4d:b7:
59:bb:f0:52:2c:38:d0:e4:95:94:a2:7e:0d:5c:9e:e1:82:4e:
fc:6b:b2:33:e0:d6:e8:9f:24:9d:50:df:ae:d8:f7:65:3a:ce:
39:3a:01:99:c7:67:ec:f9:43:5f:0e:29:92:51:d6:b9:b9:5d:
ea:b5:11:d2:95:f8:27:0d:3e:89:90:50:a3:fb:1f:65:6b:e0:
c1:4b:0b:e6:42:72:b1:e1:fb:c5:21:47:90:76:dd:70:30:e8:
e6:fd:8a:30:e3:b6:85:b6:be:56:b6:f2:d3:c4:84:a2:37:07:
18:48:70:e4:7d:79:14:a8:2b:7c:4d:ba:9d:12:9b:b6:fb:3b:
cb:ba:35:1a:ea:d3:46:d7:a9:b0:7d:51:25:61:4d:c9:84:e3:
10:c0:9e:26:8a:35:96:e3:7f:2f:04:15:0c:50:e4:ff:e7:cf:
cf:db:97:65:58:d7:f0:ed:7f:c9:41:d7:1e:b2:67:a4:17:ca:
68:5b:7a:e6:92:d8:f3:a2:64:c7:36:56:2a:29:d6:45:9d:a6:
1c:58:ec:2f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZQi++YOeD8ilZjr6RTT77JyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWU4ZmRjNzcxNGRmYjhhZjQ2NmVmNGU2NWEzNzM5Yzk4MWUxMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFlsGl+nrT4DRShAej7pFgxaLErr
HZLzMq7SCndWvRRhqR4O2beKD9JIECcoZw5tDGDZiYbD88XLT/qCYLPXKGwhiANB
xA9H5MJJpJbkRtWQZk6zZDmCazqK+TmqKlMAtsdHmH0cW7hAE1haxKllH/HLosBV
K5B0ZFdkRuTzOg2+90xUlpj/p+lTBiFWOhPe75l2udFuo9slc8QndvxCzJ4Ywrww
SU5tCKxPoWiONO/eL8sl64M761yYxR8Ga0cBUk+gEZH4eB+sJJDUBHRB0BfG6TcW
5GwvlPt6fl8CRRe9WJIguvCiunptQW0deNJNS0JfdGv5mlESqYWYFRL30wIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFAro/cdxTfuK9GbvTmWjc5yYHhBlMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvQ3VqOXgzRk4tNHIwWnU5T1phTnpuSmdlRUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgyaQIIa
AwYAKgyaQJMwDQYJKoZIhvcNAQELBQADggEBAM1NLM2qZ92Kc7WuS4rfNjagSPxL
aBGy5OsqoLRl81JqwP6P7e9InZ+rCfj8mPN7N8W6yv1Nt1m78FIsONDklZSifg1c
nuGCTvxrsjPg1uifJJ1Q367Y92U6zjk6AZnHZ+z5Q18OKZJR1rm5Xeq1EdKV+CcN
PomQUKP7H2Vr4MFLC+ZCcrHh+8UhR5B23XAw6Ob9ijDjtoW2vla28tPEhKI3BxhI
cOR9eRSoK3xNup0Sm7b7O8u6NRrq00bXqbB9USVhTcmE4xDAniaKNZbjfy8EFQxQ
5P/nz8/bl2VY1/Dtf8lB1x6yZ6QXymhbeuaS2POiZMc2Viop1kWdphxY7C8=
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:24:04 2025 by rpki-client