Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IPBTkgYZN1ky71cmrPHymiWIx0s.roa
File: IPBTkgYZN1ky71cmrPHymiWIx0s.roa (raw, json)
Hash identifier: Mlu6v1wn4FCGtZn3OMidocLviP7RksLrKsmn24hkyeQ=
Subject key identifier: 20:F0:53:92:06:19:37:59:32:EF:57:26:AC:F1:F2:9A:25:88:C7:4B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFE115B524AFB58146DB4EE95ADFE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IPBTkgYZN1ky71cmrPHymiWIx0s.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216191
IP address blocks: 2a0c:9a40:8c00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fe:11:5b:52:4a:fb:58:14:6d:b4:ee:95:ad:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f053920619375932ef5726acf1f29a2588c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:cc:70:aa:2d:4a:3d:8a:09:8b:41:55:80:
90:a0:5a:11:06:0c:c7:ee:e0:09:22:87:46:f4:72:
57:39:dc:94:ea:3a:fa:b1:70:03:be:13:02:c0:21:
ad:d5:e1:17:69:cf:33:5e:d6:dc:1d:77:b1:60:96:
5d:4e:47:4e:39:e3:78:ee:24:6c:07:7e:0f:f7:28:
d3:56:e8:06:bb:d8:65:12:a9:fc:82:b9:50:0a:00:
0a:40:27:da:ca:e9:11:c5:5c:3b:4b:31:73:98:d7:
76:97:73:b9:61:80:70:26:e5:28:9f:a5:74:23:c2:
b7:cc:6e:75:0f:b9:dd:d9:f8:0a:81:7e:7b:05:33:
80:d4:da:ba:df:dd:3c:7a:af:79:ae:73:ef:cc:f9:
12:df:af:32:dd:8b:f3:36:eb:52:dd:e9:5e:77:35:
75:db:8d:a2:6a:85:17:06:5a:2f:f7:c1:65:23:d4:
a2:fb:83:0a:1e:f3:69:1f:65:65:64:f9:0f:e0:b4:
77:58:b3:18:bf:57:16:a6:5a:84:5f:c0:a2:35:27:
36:25:66:7d:50:99:45:a3:43:63:08:5c:d9:6f:f8:
30:ff:1e:e8:95:cf:88:9f:79:ad:c3:a7:c0:75:69:
46:83:d4:a0:fc:8f:ab:15:05:d0:37:54:f5:68:5b:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:53:92:06:19:37:59:32:EF:57:26:AC:F1:F2:9A:25:88:C7:4B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IPBTkgYZN1ky71cmrPHymiWIx0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c00::/44
Signature Algorithm: sha256WithRSAEncryption
49:70:21:bd:9f:91:c4:12:4c:16:ac:84:c6:26:db:d3:2f:ab:
76:5d:5b:c9:63:c8:b2:1d:cc:36:2c:45:16:c0:84:47:41:0d:
e0:76:37:cc:c1:c3:15:08:da:b9:43:eb:64:b5:4f:ec:9a:57:
44:ee:21:d7:61:61:d9:3a:79:6b:61:c5:41:91:76:71:a4:57:
92:2a:c6:95:40:32:35:7c:d1:36:d0:19:45:43:7d:25:51:d6:
23:3a:6a:b5:6e:8b:1f:7d:b6:29:42:d2:60:d2:50:4d:b8:86:
7c:b4:4f:96:5f:50:e9:f5:84:9a:4f:9f:26:27:f2:69:0a:82:
a1:b8:d4:65:f6:12:c6:f0:35:e1:00:9a:fc:a0:2e:2b:50:a0:
53:a6:75:71:79:f0:2e:8e:05:bd:98:49:28:e0:40:05:52:f7:
72:18:97:b1:35:e3:f3:05:31:59:d9:15:6b:43:9c:55:ff:cc:
e7:e4:c5:5a:c8:1e:b9:ed:dc:b0:f1:cd:ab:d0:fc:7f:71:ab:
9b:83:21:c9:3c:93:a2:56:f0:af:ab:77:53:cb:f7:5e:7b:d5:
f3:43:a8:68:ce:23:83:88:ee:2b:a5:fc:54:81:b3:d7:5a:a7:
2d:62:30:d2:34:e0:4d:39:f2:f6:1d:3c:31:57:fb:98:0b:9b:
df:33:f7:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+/4RW1JK+1gUbbTula3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGYwNTM5MjA2MTkzNzU5MzJlZjU3MjZhY2YxZjI5YTI1ODhjNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPXMcKotSj2KCYtBVYCQoFoRBgzH
7uAJIodG9HJXOdyU6jr6sXADvhMCwCGt1eEXac8zXtbcHXexYJZdTkdOOeN47iRs
B34P9yjTVugGu9hlEqn8grlQCgAKQCfayukRxVw7SzFzmNd2l3O5YYBwJuUon6V0
I8K3zG51D7nd2fgKgX57BTOA1Nq63908eq95rnPvzPkS368y3YvzNutS3eledzV1
242iaoUXBlov98FlI9Si+4MKHvNpH2VlZPkP4LR3WLMYv1cWplqEX8CiNSc2JWZ9
UJlFo0NjCFzZb/gw/x7olc+In3mtw6fAdWlGg9Sg/I+rFQXQN1T1aFvbhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCDwU5IGGTdZMu9XJqzx8poliMdLMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvSVBCVGtnWVpOMWt5NzFjbXJQSHltaVdJeDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIwA
MA0GCSqGSIb3DQEBCwUAA4IBAQBJcCG9n5HEEkwWrITGJtvTL6t2XVvJY8iyHcw2
LEUWwIRHQQ3gdjfMwcMVCNq5Q+tktU/smldE7iHXYWHZOnlrYcVBkXZxpFeSKsaV
QDI1fNE20BlFQ30lUdYjOmq1bosffbYpQtJg0lBNuIZ8tE+WX1Dp9YSaT58mJ/Jp
CoKhuNRl9hLG8DXhAJr8oC4rUKBTpnVxefAujgW9mEko4EAFUvdyGJexNePzBTFZ
2RVrQ5xV/8zn5MVayB657dyw8c2r0Px/caubgyHJPJOiVvCvq3dTy/dee9XzQ6ho
ziODiO4rpfxUgbPXWqctYjDSNOBNOfL2HTwxV/uYC5vfM/dF
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:41 2025 by rpki-client