Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/aez7uQj7F9RHXPsyiJ9ukGsL2xY.roa
File: aez7uQj7F9RHXPsyiJ9ukGsL2xY.roa (raw, json)
Hash identifier: lGMklbRxyGm2FaDqbUeKgB/DonosL5ehLIDCbNEgCnA=
Subject key identifier: 69:EC:FB:B9:08:FB:17:D4:47:5C:FB:32:88:9F:6E:90:6B:0B:DB:16
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01967BE2E910BC798A24DF2301025A9B71B1
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/aez7uQj7F9RHXPsyiJ9ukGsL2xY.roa
Signing time: Mon 28 Apr 2025 10:13:10 +0000
ROA not before: Mon 28 Apr 2025 10:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:da41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:e2:e9:10:bc:79:8a:24:df:23:01:02:5a:9b:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 28 10:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ecfbb908fb17d4475cfb32889f6e906b0bdb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:f8:b0:e4:d1:e9:ac:ba:f6:77:32:2c:42:
24:c2:08:06:3e:46:d2:0e:5a:78:b3:7c:52:da:0a:
9b:59:ea:ff:b4:08:7c:73:12:31:dc:7a:10:9a:7c:
3d:ab:e8:2e:07:1d:ad:9f:1a:dd:bc:84:5d:56:6b:
cd:b7:52:9a:b6:56:58:9e:59:be:84:aa:7e:9d:24:
07:60:bd:59:13:c0:59:12:9b:36:b6:f6:5d:34:f1:
c5:14:9c:e5:b9:96:cc:ac:e5:86:8d:3b:71:2e:d6:
cd:b0:91:6f:48:62:87:49:73:33:1c:79:7f:f1:03:
83:d4:23:86:1c:59:34:ca:74:38:b5:c4:62:4e:40:
86:9c:99:18:eb:99:ba:8f:c6:2e:f5:c9:cb:c7:64:
ce:40:9d:c8:90:8e:7f:46:37:9d:f6:48:9f:be:de:
43:4f:76:85:bd:80:19:6e:d2:dc:7c:99:d5:8f:20:
93:9f:dd:74:19:17:5a:70:bb:e9:fd:46:27:9b:bb:
c6:04:ae:76:32:38:3d:e8:a0:82:52:e6:89:5f:2e:
5e:ed:b8:fc:5a:98:be:96:06:21:c3:13:dd:0a:26:
21:b6:b2:aa:3c:ad:54:4e:69:1c:75:82:52:26:05:
98:19:bd:75:7d:3f:56:06:08:60:71:82:57:35:51:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:FB:B9:08:FB:17:D4:47:5C:FB:32:88:9F:6E:90:6B:0B:DB:16
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/aez7uQj7F9RHXPsyiJ9ukGsL2xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da41::/32
Signature Algorithm: sha256WithRSAEncryption
07:f5:16:aa:04:32:ef:2b:4c:cc:2d:d6:f8:bb:d8:60:d0:49:
26:03:3a:73:20:d2:dd:fd:0c:4c:19:a6:54:bc:7c:70:21:60:
c7:73:b2:2b:6a:5a:a2:48:63:d6:d1:c8:78:36:7c:cd:7b:d8:
9d:df:b7:2a:21:92:95:78:27:bb:a9:d9:83:0c:43:f0:94:a8:
cc:a9:d6:ca:05:84:f4:97:66:d8:21:e6:ec:87:06:42:42:e8:
eb:97:a7:04:55:b3:c7:ec:88:05:69:4f:8b:65:d7:e9:29:b6:
6e:0f:aa:ae:73:e9:0e:de:a1:b8:de:fa:e1:79:f9:f9:64:83:
66:e0:3d:37:ed:82:4f:ec:4a:df:14:d3:89:93:33:c3:ea:06:
ff:e0:54:6f:38:39:a8:0e:2e:36:54:11:01:b7:06:a4:04:f1:
62:99:eb:82:ec:86:2e:3d:9a:22:4b:c5:1d:22:c8:1e:d8:00:
be:74:94:0b:1b:59:31:71:62:ea:2c:24:7d:23:64:a6:f1:db:
42:ee:3a:31:4f:e5:6d:b5:2c:c0:11:fb:6e:00:cb:70:ee:1d:
d9:8a:30:07:df:2c:b5:58:b2:31:78:57:79:1a:af:52:b4:05:
b0:ee:f1:76:88:4e:03:15:91:15:23:b5:0b:ec:a7:21:d1:db:
43:d5:23:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZZ74ukQvHmKJN8jAQJam3GxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjUwNDI4MTAxMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWVjZmJiOTA4ZmIxN2Q0NDc1Y2ZiMzI4ODlmNmU5MDZiMGJkYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8P4sOTR6ay69ncyLEIkwggGPkbS
Dlp4s3xS2gqbWer/tAh8cxIx3HoQmnw9q+guBx2tnxrdvIRdVmvNt1KatlZYnlm+
hKp+nSQHYL1ZE8BZEps2tvZdNPHFFJzluZbMrOWGjTtxLtbNsJFvSGKHSXMzHHl/
8QOD1COGHFk0ynQ4tcRiTkCGnJkY65m6j8Yu9cnLx2TOQJ3IkI5/Rjed9kifvt5D
T3aFvYAZbtLcfJnVjyCTn910GRdacLvp/UYnm7vGBK52Mjg96KCCUuaJXy5e7bj8
Wpi+lgYhwxPdCiYhtrKqPK1UTmkcdYJSJgWYGb11fT9WBghgcYJXNVEXdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGns+7kI+xfUR1z7MoifbpBrC9sWMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvYWV6N3VRajdGOVJIWFBzeWlKOXVrR3NMMnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgnaQTAN
BgkqhkiG9w0BAQsFAAOCAQEAB/UWqgQy7ytMzC3W+LvYYNBJJgM6cyDS3f0MTBmm
VLx8cCFgx3OyK2paokhj1tHIeDZ8zXvYnd+3KiGSlXgnu6nZgwxD8JSozKnWygWE
9Jdm2CHm7IcGQkLo65enBFWzx+yIBWlPi2XX6Sm2bg+qrnPpDt6huN764Xn5+WSD
ZuA9N+2CT+xK3xTTiZMzw+oG/+BUbzg5qA4uNlQRAbcGpATxYpnrguyGLj2aIkvF
HSLIHtgAvnSUCxtZMXFi6iwkfSNkpvHbQu46MU/lbbUswBH7bgDLcO4d2YowB98s
tViyMXhXeRqvUrQFsO7xdohOAxWRFSO1C+ynIdHbQ9Ujaw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:16 2025 by rpki-client