Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/CC3doM4fq52R0KVW9bRsvY14RWI.roa
File: CC3doM4fq52R0KVW9bRsvY14RWI.roa (raw, json)
Hash identifier: 9NyAVqwHA/K2/G6fceHq4CUm1tFov7ZhjrDZX3bfAdc=
Subject key identifier: 08:2D:DD:A0:CE:1F:AB:9D:91:D0:A5:56:F5:B4:6C:BD:8D:78:45:62
Certificate issuer: /CN=a90dc475029e1d793355978ba46bf873065564b1
Certificate serial: 0193F84501BEB2F01988B1642C815D8B8537
Authority key identifier: A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/CC3doM4fq52R0KVW9bRsvY14RWI.roa
Signing time: Tue 24 Dec 2024 10:44:52 +0000
ROA not before: Tue 24 Dec 2024 10:44:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41953
IP address blocks: 2a13:6440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:45:01:be:b2:f0:19:88:b1:64:2c:81:5d:8b:85:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90dc475029e1d793355978ba46bf873065564b1
Validity
Not Before: Dec 24 10:44:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=082ddda0ce1fab9d91d0a556f5b46cbd8d784562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:31:82:40:bb:aa:c5:1f:0b:42:72:7a:cb:
e4:a2:d6:92:08:5e:0d:d8:82:ed:26:93:5f:28:c1:
ac:74:6a:ff:d4:bb:3c:89:7d:1b:f1:c0:d3:15:54:
83:85:b7:3f:ba:92:05:15:66:97:42:66:e9:5a:73:
22:18:e3:f3:a7:18:d9:a0:ba:b9:a7:3c:b8:36:3f:
3b:4e:7f:29:9d:88:38:90:42:3e:6c:47:80:65:75:
88:d9:fb:fc:cf:ff:7c:dc:21:27:71:2e:1c:24:fc:
36:59:77:bd:f7:20:9f:56:81:4f:05:a3:7f:00:6f:
08:f7:7b:1c:70:23:b2:48:69:6a:47:e6:d6:a7:29:
52:07:2e:cd:90:2e:8d:75:65:0d:a5:35:b8:2b:35:
89:57:cb:97:10:f0:b0:b8:00:91:b8:7b:fd:f9:1b:
1f:6f:89:57:ad:76:6e:b8:b8:21:57:84:d3:c4:38:
59:33:99:68:60:5a:c0:58:36:e7:23:df:a3:84:2e:
b8:63:24:ae:3c:15:ab:48:5c:39:a4:5b:89:e5:09:
31:0c:34:1f:74:11:00:6d:c9:64:f8:03:3e:9a:3c:
5c:6a:04:ee:5e:8b:73:1d:c6:80:90:2f:fd:e4:50:
7d:fa:8e:e5:6e:2f:1c:21:51:e3:c4:9e:52:34:5e:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:DD:A0:CE:1F:AB:9D:91:D0:A5:56:F5:B4:6C:BD:8D:78:45:62
X509v3 Authority Key Identifier:
keyid:A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/CC3doM4fq52R0KVW9bRsvY14RWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6440::/29
Signature Algorithm: sha256WithRSAEncryption
71:50:0a:8f:55:34:62:1b:0a:e3:24:6a:d0:fc:2d:36:30:ba:
5d:dc:c5:92:e8:b1:f4:a7:12:cb:fe:33:6e:e2:b0:04:d4:0a:
84:45:f3:a2:6f:26:5c:4d:d9:8b:10:5f:9f:dd:7e:e0:bb:c8:
1c:a7:1c:92:80:0c:4b:15:85:30:47:0e:f0:d6:d3:70:14:d7:
bc:07:77:5b:cc:27:07:9b:c4:65:88:ab:7d:9a:f5:ec:19:e8:
e9:6d:b9:6d:cf:96:95:7b:75:0d:a0:c9:64:af:e8:43:44:86:
ca:7b:c6:ad:70:7a:f6:ec:a7:53:dc:a8:e0:90:95:d0:54:01:
9e:54:7c:7b:4d:a3:08:10:28:ea:fd:55:c0:17:3b:be:39:0a:
b4:06:81:07:a4:e6:89:e1:a0:d2:fd:8a:ba:99:79:2d:9f:51:
24:c7:ed:55:34:3d:8e:9f:ab:19:fb:ac:35:33:b3:47:3d:27:
96:64:e8:b7:84:a6:d5:79:e0:6c:ed:08:cc:63:66:be:fb:a8:
0e:f0:4b:58:40:dc:fa:70:34:f8:51:5a:72:f8:0c:25:35:87:
9d:44:3f:3d:3a:07:fd:eb:c5:fc:09:51:6a:e9:b7:30:9c:30:
71:77:6f:e4:6e:fe:f1:b8:19:b6:03:ee:fe:53:b0:bb:77:cf:
ff:a7:2d:be
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZP4RQG+svAZiLFkLIFdi4U3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGRjNDc1MDI5ZTFkNzkzMzU1OTc4YmE0NmJmODczMDY1
NTY0YjEwHhcNMjQxMjI0MTA0NDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODJkZGRhMGNlMWZhYjlkOTFkMGE1NTZmNWI0NmNiZDhkNzg0NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRQxgkC7qsUfC0JyesvkotaSCF4N
2ILtJpNfKMGsdGr/1Ls8iX0b8cDTFVSDhbc/upIFFWaXQmbpWnMiGOPzpxjZoLq5
pzy4Nj87Tn8pnYg4kEI+bEeAZXWI2fv8z/983CEncS4cJPw2WXe99yCfVoFPBaN/
AG8I93sccCOySGlqR+bWpylSBy7NkC6NdWUNpTW4KzWJV8uXEPCwuACRuHv9+Rsf
b4lXrXZuuLghV4TTxDhZM5loYFrAWDbnI9+jhC64YySuPBWrSFw5pFuJ5QkxDDQf
dBEAbclk+AM+mjxcagTuXotzHcaAkC/95FB9+o7lbi8cIVHjxJ5SNF4H3QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAgt3aDOH6udkdClVvW0bL2NeEViMB8GA1UdIwQY
MBaAFKkNxHUCnh15M1WXi6Rr+HMGVWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVEzRWRRS2VIWGt6VlplTHBHdjRjd1pWWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80ODNhNjgtMDhlNy00ZjkwLTlmZDkt
ZmY0YTJiODU4ODljLzEvQ0MzZG9NNGZxNTJSMEtWVzliUnN2WTE0UldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80ODNhNjgtMDhlNy00ZjkwLTlmZDktZmY0YTJiODU4ODlj
LzEvcVEzRWRRS2VIWGt6VlplTHBHdjRjd1pWWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNkQDAN
BgkqhkiG9w0BAQsFAAOCAQEAcVAKj1U0YhsK4yRq0PwtNjC6XdzFkuix9KcSy/4z
buKwBNQKhEXzom8mXE3ZixBfn91+4LvIHKcckoAMSxWFMEcO8NbTcBTXvAd3W8wn
B5vEZYirfZr17Bno6W25bc+WlXt1DaDJZK/oQ0SGynvGrXB69uynU9yo4JCV0FQB
nlR8e02jCBAo6v1VwBc7vjkKtAaBB6TmieGg0v2Kupl5LZ9RJMftVTQ9jp+rGfus
NTOzRz0nlmTot4Sm1XngbO0IzGNmvvuoDvBLWEDc+nA0+FFacvgMJTWHnUQ/PToH
/evF/AlRaum3MJwwcXdv5G7+8bgZtgPu/lOwu3fP/6ctvg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:15:05 2025 by rpki-client