Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/BIlQDTjBunsd7fPXD6TudWu_EEU.roa
File: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (raw, json)
Hash identifier: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=
Subject key identifier: 04:89:50:0D:38:C1:BA:7B:1D:ED:F3:D7:0F:A4:EE:75:6B:BF:10:45
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01956A6A81F6D14B7DAB41DBB2BF1994E468
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/BIlQDTjBunsd7fPXD6TudWu_EEU.roa
Signing time: Thu 06 Mar 2025 07:45:19 +0000
ROA not before: Thu 06 Mar 2025 07:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 2a0b:4144::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:6a:81:f6:d1:4b:7d:ab:41:db:b2:bf:19:94:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 6 07:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0489500d38c1ba7b1dedf3d70fa4ee756bbf1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:4e:bb:a1:aa:e1:35:6a:f0:e8:ef:ff:86:
93:31:7d:24:05:b7:35:49:5c:02:cb:7a:82:91:cc:
b8:25:8e:30:3f:1f:bd:fc:50:e8:53:03:d8:e8:61:
f6:1b:e7:b1:65:32:d1:fd:92:f8:c9:ed:34:50:25:
9e:40:79:45:25:f6:7a:dc:9e:92:41:3c:73:ad:63:
ff:6a:b4:f7:31:b3:a7:cd:7a:1a:a4:06:9d:22:1f:
6a:5a:96:79:d6:e0:82:cc:fc:13:be:8d:06:8a:8d:
e9:84:c3:53:dc:d8:85:a2:43:33:90:d1:36:3c:16:
a3:0a:64:d8:b7:99:20:8d:85:ad:4c:a5:40:fb:78:
84:ef:93:ca:22:35:24:67:c0:00:08:a5:e5:45:57:
e2:84:36:7c:b9:b5:85:fd:cd:e1:ac:a1:df:08:87:
a7:be:ba:c9:df:83:6f:68:e2:e8:46:e0:7b:de:64:
bd:75:ea:7e:d2:bb:47:7e:3d:3f:ce:ef:79:c7:ab:
71:3c:9a:eb:1e:12:ea:19:b4:81:fe:0a:ce:6f:2b:
12:a5:9f:7f:42:08:26:f9:d9:4d:c5:ea:de:21:53:
87:3f:1b:64:41:e7:6b:47:cd:b8:26:95:a8:88:0d:
2f:71:96:2f:b9:b1:9f:1e:d4:bb:f9:05:e1:2d:6d:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:50:0D:38:C1:BA:7B:1D:ED:F3:D7:0F:A4:EE:75:6B:BF:10:45
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/BIlQDTjBunsd7fPXD6TudWu_EEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4144::/48
Signature Algorithm: sha256WithRSAEncryption
73:2a:63:5a:51:ea:5a:cc:36:d1:75:53:e4:4f:12:4a:59:78:
e8:d3:8a:c8:38:03:17:0f:77:60:1c:2f:ef:15:29:e5:64:2c:
cf:21:25:c9:15:8a:93:59:21:f5:51:13:08:17:5e:06:97:30:
e9:1b:df:26:80:45:73:bb:9f:b2:5d:70:2d:5a:1e:5c:83:79:
a5:40:48:5f:0c:26:73:e4:c7:8e:0f:19:3a:89:63:35:ec:d7:
af:48:92:7d:e1:08:9a:2f:5e:57:52:fd:f5:a5:1c:74:ce:50:
e5:f9:b1:d6:32:08:91:3d:52:0b:b9:cc:39:c3:66:03:80:af:
2c:cc:7f:3c:ae:36:96:8a:c5:24:57:ef:fd:54:e3:2a:ad:54:
2e:ac:b4:69:75:45:84:15:7f:9f:be:af:8b:37:fa:21:86:35:
b3:7a:ca:67:26:1b:e6:a9:dd:36:78:de:70:3d:af:a0:da:0f:
70:2e:a0:57:d5:1b:c9:e2:b5:d2:f5:4c:a2:c1:78:07:8d:af:
8c:34:bf:fe:a6:1f:a5:f8:be:5f:1e:a9:ab:1d:ae:52:4b:7a:
5b:20:a6:46:9e:1c:7f:a3:c3:fd:0b:3c:dc:70:80:6a:9e:c4:
87:02:20:77:4c:13:51:08:f7:47:4f:64:b4:a6:d7:05:ae:c3:
42:96:16:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZVqaoH20Ut9q0Hbsr8ZlORoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh
MTQ3YmMwHhcNMjUwMzA2MDc0NTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDg5NTAwZDM4YzFiYTdiMWRlZGYzZDcwZmE0ZWU3NTZiYmYxMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqROu6Gq4TVq8Ojv/4aTMX0kBbc1
SVwCy3qCkcy4JY4wPx+9/FDoUwPY6GH2G+exZTLR/ZL4ye00UCWeQHlFJfZ63J6S
QTxzrWP/arT3MbOnzXoapAadIh9qWpZ51uCCzPwTvo0Gio3phMNT3NiFokMzkNE2
PBajCmTYt5kgjYWtTKVA+3iE75PKIjUkZ8AACKXlRVfihDZ8ubWF/c3hrKHfCIen
vrrJ34NvaOLoRuB73mS9dep+0rtHfj0/zu95x6txPJrrHhLqGbSB/grObysSpZ9/
Qggm+dlNxereIVOHPxtkQedrR824JpWoiA0vcZYvubGfHtS7+QXhLW2WzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFASJUA04wbp7He3z1w+k7nVrvxBFMB8GA1UdIwQY
MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt
ZDg3MjEzNzU2NDRhLzEvQklsUURUakJ1bnNkN2ZQWEQ2VHVkV3VfRUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh
LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtBRAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBzKmNaUepazDbRdVPkTxJKWXjo04rIOAMXD3dg
HC/vFSnlZCzPISXJFYqTWSH1URMIF14GlzDpG98mgEVzu5+yXXAtWh5cg3mlQEhf
DCZz5MeODxk6iWM17NevSJJ94QiaL15XUv31pRx0zlDl+bHWMgiRPVILucw5w2YD
gK8szH88rjaWisUkV+/9VOMqrVQurLRpdUWEFX+fvq+LN/ohhjWzespnJhvmqd02
eN5wPa+g2g9wLqBX1RvJ4rXS9UyiwXgHja+MNL/+ph+l+L5fHqmrHa5SS3pbIKZG
nhx/o8P9CzzccIBqnsSHAiB3TBNRCPdHT2S0ptcFrsNClhb5
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:10 2025 by rpki-client