Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o5Ro7VS4jc73N_TEl2Ad2_4X9Fk.roa
File: o5Ro7VS4jc73N_TEl2Ad2_4X9Fk.roa (raw, json)
Hash identifier: nyoWIqfUU0VtyLpCGvDsYfhK/BeNlSV2jSQy41JF5+w=
Subject key identifier: A3:94:68:ED:54:B8:8D:CE:F7:37:F4:C4:97:60:1D:DB:FE:17:F4:59
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF9F0A7C50C17D9D5727EC3BCF554
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o5Ro7VS4jc73N_TEl2Ad2_4X9Fk.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215650
IP address blocks: 2a0c:9a40:80f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f9:f0:a7:c5:0c:17:d9:d5:72:7e:c3:bc:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a39468ed54b88dcef737f4c497601ddbfe17f459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:24:8a:81:db:f2:40:3c:c9:7c:4c:f9:07:
32:1b:b6:69:c1:11:bb:4c:ef:70:d3:5a:24:c6:29:
10:b8:db:d3:5c:03:16:5b:d5:06:9a:a7:c6:35:21:
7e:05:ca:6b:d7:5d:48:05:bf:c9:ee:77:f7:e6:6a:
6c:90:3e:98:3b:88:f0:26:a1:b1:e1:99:3b:30:f4:
0a:74:fb:95:dc:d9:fb:fc:37:4d:e3:5b:14:fb:1e:
53:8e:0f:99:84:14:6b:68:f6:ce:f4:6b:6d:6f:6c:
e4:fb:90:39:3f:66:46:39:9c:9a:01:5c:c5:37:46:
fc:48:de:5e:6f:69:d4:54:82:7e:da:52:44:39:d4:
cf:48:5c:b2:c2:58:72:b0:16:cd:ac:4a:b3:92:5c:
95:59:bf:84:65:9e:b2:b8:27:fd:62:29:88:56:b4:
a2:68:0a:42:04:f9:94:7f:20:64:f1:50:b6:17:a2:
b1:cd:f7:f8:6a:8e:2b:de:7c:7a:f6:7a:fe:d1:7d:
56:3a:e5:a8:7f:1a:04:f6:a5:70:77:fe:6e:c4:bd:
b8:e1:c7:8f:48:94:8d:54:9f:27:af:4a:c2:99:50:
81:cd:3f:84:f4:b7:6c:bc:47:66:ec:10:db:7b:4a:
c4:13:8d:06:d0:6f:fe:ed:70:4f:bb:5e:56:ef:e6:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:68:ED:54:B8:8D:CE:F7:37:F4:C4:97:60:1D:DB:FE:17:F4:59
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o5Ro7VS4jc73N_TEl2Ad2_4X9Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80f0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:63:46:bd:bc:5a:ea:e2:2a:c7:1c:38:0b:e4:93:71:14:4c:
ce:b9:23:64:04:8f:c0:03:49:a1:7a:4b:23:c4:1b:0a:b7:78:
85:7f:64:ef:e5:78:c1:ab:ee:6d:94:ac:60:5b:03:b8:65:2b:
14:fe:c7:62:12:36:80:38:8e:92:58:c3:f4:28:d5:a5:e7:20:
7d:5d:f1:50:8b:d0:93:5a:0e:d5:b7:1b:1f:1f:84:6c:db:92:
5f:a8:9c:ea:66:bc:e1:a6:82:81:fe:f1:ac:a8:a9:a4:63:6d:
54:c6:2b:9d:47:41:74:b9:be:cb:d6:1f:be:0d:fc:25:ea:d3:
d7:3c:40:83:0b:0f:4c:39:fb:e3:f1:69:77:47:34:3e:89:6c:
b1:b1:2e:13:92:0f:25:39:e2:18:5f:79:cd:31:b0:21:81:14:
96:62:65:c8:74:df:43:ab:8a:cb:59:4c:e5:a5:44:d5:12:73:
9d:28:ee:2c:a3:28:b3:09:61:1d:26:a0:a9:4a:86:7e:2c:e3:
4e:99:92:5d:22:8e:c5:16:12:60:f6:e1:c8:18:11:a1:1c:63:
d7:2c:14:16:54:11:a9:d6:76:d7:27:69:09:3a:bf:20:0a:07:
6f:ca:42:b0:16:dc:80:10:d8:b6:67:0a:86:3b:25:3a:0b:52:
9d:99:f2:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+/nwp8UMF9nVcn7DvPVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzk0NjhlZDU0Yjg4ZGNlZjczN2Y0YzQ5NzYwMWRkYmZlMTdmNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8kioHb8kA8yXxM+QcyG7ZpwRG7
TO9w01okxikQuNvTXAMWW9UGmqfGNSF+Bcpr111IBb/J7nf35mpskD6YO4jwJqGx
4Zk7MPQKdPuV3Nn7/DdN41sU+x5Tjg+ZhBRraPbO9Gttb2zk+5A5P2ZGOZyaAVzF
N0b8SN5eb2nUVIJ+2lJEOdTPSFyywlhysBbNrEqzklyVWb+EZZ6yuCf9YimIVrSi
aApCBPmUfyBk8VC2F6Kxzff4ao4r3nx69nr+0X1WOuWofxoE9qVwd/5uxL244ceP
SJSNVJ8nr0rCmVCBzT+E9LdsvEdm7BDbe0rEE40G0G/+7XBPu15W7+YI+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKOUaO1UuI3O9zf0xJdgHdv+F/RZMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvbzVSbzdWUzRqYzczTl9URWwyQWQyXzRYOUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIDw
MA0GCSqGSIb3DQEBCwUAA4IBAQBvY0a9vFrq4irHHDgL5JNxFEzOuSNkBI/AA0mh
eksjxBsKt3iFf2Tv5XjBq+5tlKxgWwO4ZSsU/sdiEjaAOI6SWMP0KNWl5yB9XfFQ
i9CTWg7VtxsfH4Rs25JfqJzqZrzhpoKB/vGsqKmkY21UxiudR0F0ub7L1h++Dfwl
6tPXPECDCw9MOfvj8Wl3RzQ+iWyxsS4Tkg8lOeIYX3nNMbAhgRSWYmXIdN9Dq4rL
WUzlpUTVEnOdKO4soyizCWEdJqCpSoZ+LONOmZJdIo7FFhJg9uHIGBGhHGPXLBQW
VBGp1nbXJ2kJOr8gCgdvykKwFtyAENi2ZwqGOyU6C1KdmfL7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:25 2025 by rpki-client