Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EngfK9smC__YmwGzxuZzzUctSOc.roa
File: EngfK9smC__YmwGzxuZzzUctSOc.roa (raw, json)
Hash identifier: z2JoLcvnDWchVYUO6+3tYP3D684F8wcSW2Iu8GF12rk=
Subject key identifier: 12:78:1F:2B:DB:26:0B:FF:D8:9B:01:B3:C6:E6:73:CD:47:2D:48:E7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD22DA3303EF9305334B68D4E372D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EngfK9smC__YmwGzxuZzzUctSOc.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199109
IP address blocks: 2a0c:9a40:8320::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d2:2d:a3:30:3e:f9:30:53:34:b6:8d:4e:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12781f2bdb260bffd89b01b3c6e673cd472d48e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:ee:e8:42:47:68:55:49:70:74:1f:ce:0e:
2d:4c:fc:21:01:1e:4d:df:3b:69:9b:90:03:34:19:
f7:3c:63:6d:c9:04:a6:64:5a:18:1b:af:27:ba:51:
7f:80:5e:54:ee:fe:86:b1:28:bd:37:ed:de:95:df:
dd:c5:20:27:47:41:c6:7d:71:11:18:1e:7d:9b:d7:
88:2e:72:1f:cd:6f:16:6f:5e:92:ae:16:26:6e:41:
cd:0a:19:7a:eb:a9:65:2b:86:2d:eb:fe:5b:6f:3a:
e7:b4:74:cf:d7:2e:99:f9:e8:f1:08:64:b8:06:d4:
a9:0c:fb:ff:25:36:94:8a:4d:80:92:d9:9d:20:d7:
1a:64:91:47:ea:cf:8d:18:95:54:35:30:b6:8d:e9:
4d:c7:07:f3:b9:bf:88:0b:e2:7a:42:fa:0e:64:72:
9c:fe:fa:15:5d:ac:68:ad:08:a8:32:b3:72:d6:c2:
97:1a:39:60:2c:b1:8f:55:65:7e:92:c1:a0:76:18:
40:9e:c0:7e:7c:1b:38:f3:1f:ce:fa:db:cf:fd:62:
1b:4e:1f:9c:0a:2a:e4:f6:85:20:5f:2c:d3:6b:1c:
00:08:ca:97:31:bc:97:96:f4:90:6e:95:88:b6:20:
6a:3e:35:34:f2:0f:87:e8:db:42:a4:48:29:a1:4b:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:1F:2B:DB:26:0B:FF:D8:9B:01:B3:C6:E6:73:CD:47:2D:48:E7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EngfK9smC__YmwGzxuZzzUctSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8320::/48
Signature Algorithm: sha256WithRSAEncryption
5b:73:33:f6:fc:fa:a4:f9:45:c9:0a:f1:81:88:cd:74:9e:d9:
36:f1:15:fd:58:6b:bd:a8:99:ab:4b:b4:bd:6c:92:ab:c4:d5:
cb:6e:af:6f:19:b4:17:2a:2e:bc:d5:63:b2:a6:64:7f:98:c2:
60:b8:cd:e9:f1:ed:f7:95:1d:6a:34:8e:bf:72:e2:8d:d7:b6:
51:66:3b:a7:71:db:b7:f9:ca:58:09:07:73:f7:e9:15:91:07:
5e:e2:3a:67:2a:31:a7:5f:5e:f5:ca:7b:9a:5f:d6:ff:78:1a:
44:a4:9c:3c:62:6b:c2:67:59:87:8c:7e:18:9c:cb:b2:3f:0d:
fa:b4:45:bd:ca:ae:34:32:2e:c7:25:a3:5e:db:b1:64:8b:7f:
0e:ec:8d:78:68:5b:d6:0b:c3:d2:22:32:fd:c3:43:32:02:f3:
a4:d4:ae:bb:22:5c:c9:f9:b2:46:a7:59:19:6e:b4:be:d4:33:
96:85:ff:db:c8:89:0a:8f:e5:b0:d0:ac:b8:e7:14:6a:01:73:
a7:9e:9a:44:c4:cc:70:54:04:b9:1b:42:99:f2:d8:26:b4:3b:
ac:2f:b4:a4:53:7d:4f:1c:2b:2d:2d:b2:93:7d:b5:b2:81:30:
6b:ae:e8:7f:6d:35:7a:74:8f:cb:ea:e4:2e:d7:07:b4:58:7d:
2b:ad:ca:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+9ItozA++TBTNLaNTjctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjc4MWYyYmRiMjYwYmZmZDg5YjAxYjNjNmU2NzNjZDQ3MmQ0OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0STu6EJHaFVJcHQfzg4tTPwhAR5N
3ztpm5ADNBn3PGNtyQSmZFoYG68nulF/gF5U7v6GsSi9N+3eld/dxSAnR0HGfXER
GB59m9eILnIfzW8Wb16SrhYmbkHNChl666llK4Yt6/5bbzrntHTP1y6Z+ejxCGS4
BtSpDPv/JTaUik2AktmdINcaZJFH6s+NGJVUNTC2jelNxwfzub+IC+J6QvoOZHKc
/voVXaxorQioMrNy1sKXGjlgLLGPVWV+ksGgdhhAnsB+fBs48x/O+tvP/WIbTh+c
Cirk9oUgXyzTaxwACMqXMbyXlvSQbpWItiBqPjU08g+H6NtCpEgpoUvBqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBJ4HyvbJgv/2JsBs8bmc81HLUjnMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRW5nZks5c21DX19ZbXdHenh1Wnp6VWN0U09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIMg
MA0GCSqGSIb3DQEBCwUAA4IBAQBbczP2/Pqk+UXJCvGBiM10ntk28RX9WGu9qJmr
S7S9bJKrxNXLbq9vGbQXKi681WOypmR/mMJguM3p8e33lR1qNI6/cuKN17ZRZjun
cdu3+cpYCQdz9+kVkQde4jpnKjGnX171ynuaX9b/eBpEpJw8YmvCZ1mHjH4YnMuy
Pw36tEW9yq40Mi7HJaNe27Fki38O7I14aFvWC8PSIjL9w0MyAvOk1K67IlzJ+bJG
p1kZbrS+1DOWhf/byIkKj+Ww0Ky45xRqAXOnnppExMxwVAS5G0KZ8tgmtDusL7Sk
U31PHCstLbKTfbWygTBrruh/bTV6dI/L6uQu1we0WH0rrcom
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:14 2025 by rpki-client