Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/o5FK-KkSckiod3aRSAvg_C0hR1Q.roa
File: o5FK-KkSckiod3aRSAvg_C0hR1Q.roa (raw, json)
Hash identifier: pdFjqkiefblpcPGzv7KiohLrBFYc122aelPxDTy7TEY=
Subject key identifier: A3:91:4A:F8:A9:12:72:48:A8:77:76:91:48:0B:E0:FC:2D:21:47:54
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0195CDC53BD8989D6CCEAEC371FB9463CF3E
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/o5FK-KkSckiod3aRSAvg_C0hR1Q.roa
Signing time: Tue 25 Mar 2025 14:46:49 +0000
ROA not before: Tue 25 Mar 2025 14:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:b3c0::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:c5:3b:d8:98:9d:6c:ce:ae:c3:71:fb:94:63:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 25 14:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3914af8a9127248a8777691480be0fc2d214754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:24:06:37:d4:a8:7b:b0:97:d9:f1:63:f0:
a2:5b:23:72:7d:f7:de:a5:0d:7a:b4:6b:94:40:96:
79:a4:de:d7:45:e7:80:c7:c2:22:8b:f1:99:77:02:
de:1b:bd:7a:d3:e6:04:da:aa:49:fa:d8:83:e4:b9:
c3:9a:57:28:43:e8:64:9c:50:70:00:ae:52:a4:e4:
69:08:2a:ea:0b:e2:a3:69:dc:13:63:8b:a5:50:67:
2b:d6:3e:27:3f:5d:72:5f:23:af:b3:88:d0:7d:b5:
49:2e:ea:1b:ed:96:a4:1f:0b:40:44:d8:5c:5e:10:
15:30:19:c9:db:5d:50:25:ae:b2:5c:ee:40:88:f2:
79:e4:50:81:da:cf:9c:f7:b9:3d:79:4b:3e:6e:25:
0b:6a:ea:bf:17:42:b8:2d:22:82:0b:57:c5:97:21:
d7:3d:82:ae:66:81:83:0a:0c:88:df:6d:63:f2:5f:
98:cd:4f:09:9c:0f:a9:ac:80:16:da:7f:c8:23:b8:
6f:f3:06:c2:83:7b:53:b6:a0:34:74:28:ee:03:14:
04:0f:b1:70:e2:3a:89:75:ab:9b:61:73:66:fa:3a:
03:52:db:f6:1a:a1:18:9d:bc:64:14:5d:79:10:da:
2d:80:25:90:31:a6:c0:e1:d0:57:31:64:69:5d:80:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:4A:F8:A9:12:72:48:A8:77:76:91:48:0B:E0:FC:2D:21:47:54
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/o5FK-KkSckiod3aRSAvg_C0hR1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a0f:e000::/29
Signature Algorithm: sha256WithRSAEncryption
94:70:05:81:1b:2a:0f:34:a8:9c:b1:08:87:50:22:04:b7:08:
1f:3f:d3:f1:d3:4d:32:ac:91:86:6d:7e:52:14:ed:55:b4:90:
00:37:ec:d5:fb:00:d1:eb:c0:4a:ae:ee:ea:d4:a3:ba:09:27:
76:f6:f4:a7:22:a2:0a:a0:b2:00:83:d5:dd:17:8a:d5:1c:0c:
29:32:cf:00:11:8a:f8:7e:54:ae:d7:98:e1:02:17:bf:f0:f0:
91:f5:cd:9c:2c:2a:4e:c7:84:25:77:c3:0c:3b:25:48:0a:42:
b2:ba:bf:12:1c:1a:94:52:d9:e9:97:ea:bf:b8:ed:94:14:1a:
23:cf:0e:10:96:c6:02:7b:51:4d:b2:8b:71:e3:3f:9e:a6:3f:
c8:27:50:18:c6:72:b8:66:b9:d5:0b:25:aa:b8:64:7d:1a:89:
53:23:ba:40:ab:60:f8:ed:2b:a6:59:5f:da:81:14:8c:fc:da:
6a:8e:9d:07:04:67:3e:ac:ce:54:9b:ee:ac:af:4d:3e:f8:13:
97:ed:46:fc:4f:e5:86:32:39:8b:e1:12:b8:96:2f:ed:65:cc:
d8:a7:4a:69:5d:e0:c4:e1:2f:f4:9b:61:d0:8b:9b:67:9f:b5:
d2:60:47:f1:04:bb:2b:fe:17:ea:0b:c9:de:72:fd:10:54:24:
b8:7e:c7:3d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZXNxTvYmJ1szq7DcfuUY88+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjUwMzI1MTQ0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzkxNGFmOGE5MTI3MjQ4YTg3Nzc2OTE0ODBiZTBmYzJkMjE0NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KwkBjfUqHuwl9nxY/CiWyNyfffe
pQ16tGuUQJZ5pN7XReeAx8Iii/GZdwLeG7160+YE2qpJ+tiD5LnDmlcoQ+hknFBw
AK5SpORpCCrqC+KjadwTY4ulUGcr1j4nP11yXyOvs4jQfbVJLuob7ZakHwtARNhc
XhAVMBnJ211QJa6yXO5AiPJ55FCB2s+c97k9eUs+biULauq/F0K4LSKCC1fFlyHX
PYKuZoGDCgyI321j8l+YzU8JnA+prIAW2n/II7hv8wbCg3tTtqA0dCjuAxQED7Fw
4jqJdaubYXNm+joDUtv2GqEYnbxkFF15ENotgCWQMabA4dBXMWRpXYBCqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKORSvipEnJIqHd2kUgL4PwtIUdUMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvbzVGSy1La1Nja2lvZDNhUlNBdmdfQzBoUjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgazwAMF
AyoP4AAwDQYJKoZIhvcNAQELBQADggEBAJRwBYEbKg80qJyxCIdQIgS3CB8/0/HT
TTKskYZtflIU7VW0kAA37NX7ANHrwEqu7urUo7oJJ3b29KciogqgsgCD1d0XitUc
DCkyzwARivh+VK7XmOECF7/w8JH1zZwsKk7HhCV3www7JUgKQrK6vxIcGpRS2emX
6r+47ZQUGiPPDhCWxgJ7UU2yi3HjP56mP8gnUBjGcrhmudULJaq4ZH0aiVMjukCr
YPjtK6ZZX9qBFIz82mqOnQcEZz6szlSb7qyvTT74E5ftRvxP5YYyOYvhEriWL+1l
zNinSmld4MThL/SbYdCLm2eftdJgR/EEuyv+F+oLyd5y/RBUJLh+xz0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:34 2025 by rpki-client