Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/Im4zxAMioTMqKC_fblhr89BdW9U.roa
File: Im4zxAMioTMqKC_fblhr89BdW9U.roa (raw, json)
Hash identifier: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=
Subject key identifier: 22:6E:33:C4:03:22:A1:33:2A:28:2F:DF:6E:58:6B:F3:D0:5D:5B:D5
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019424B3E0B96D2E09958BE8FF2CC445A2B9
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/Im4zxAMioTMqKC_fblhr89BdW9U.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:48c4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e0:b9:6d:2e:09:95:8b:e8:ff:2c:c4:45:a2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=226e33c40322a1332a282fdf6e586bf3d05d5bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:40:99:65:55:f5:f9:79:c5:d7:59:f8:28:
53:87:e0:75:a6:45:c4:e7:18:09:6a:7b:1a:14:f9:
ee:35:5a:07:9d:75:12:59:9f:7b:60:ae:41:3b:59:
8f:56:d5:57:29:46:15:4f:06:a8:04:58:4a:0d:ea:
35:29:7b:ce:2f:cc:cd:c6:5a:1d:d6:36:49:e4:0e:
e2:d0:d4:37:f9:5c:3c:4f:af:6a:d6:73:2f:00:16:
6e:ed:5b:a9:e8:ac:d1:e5:27:d2:48:e3:87:e0:39:
60:87:e1:8e:2b:b4:97:14:6d:6a:f3:6b:9e:92:4a:
9b:bb:a7:b8:16:18:25:e7:c5:91:d5:22:39:a1:dd:
32:ae:9d:87:06:37:dc:bd:d3:be:84:46:f0:3d:cd:
cd:05:aa:09:f4:c8:9d:c3:be:d7:44:ec:25:ed:66:
3c:7f:dc:27:eb:a8:16:85:16:c2:31:76:05:9c:fa:
7c:86:ed:31:6f:7a:c9:a3:5e:ef:9f:59:d1:d2:77:
6b:94:68:cb:da:ed:05:d3:8d:8f:35:16:ea:14:90:
1e:f7:6f:0a:b2:9d:34:ed:0c:03:43:9e:21:43:81:
e0:c8:78:8e:1f:33:f7:05:85:b5:08:61:dd:3e:07:
85:bb:a1:47:2d:0e:a8:ea:56:94:6b:73:68:69:ed:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:33:C4:03:22:A1:33:2A:28:2F:DF:6E:58:6B:F3:D0:5D:5B:D5
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/Im4zxAMioTMqKC_fblhr89BdW9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:48c4::/32
Signature Algorithm: sha256WithRSAEncryption
a5:30:b6:05:90:c7:4d:7b:63:4a:62:95:61:6e:9e:05:f6:33:
54:25:75:ee:68:b1:83:c7:45:a5:31:8d:2e:53:a8:eb:76:19:
d2:a2:ca:9a:01:52:7d:fd:cf:a3:3b:71:95:52:84:5e:41:f8:
16:78:91:2a:4b:bb:31:a0:12:1f:ee:1b:be:34:25:5a:87:bb:
11:bd:d4:b2:44:3e:c6:08:2f:0c:2b:65:47:18:56:c7:17:64:
f9:fe:ec:ee:1e:3f:9d:8e:17:ab:0e:25:16:cb:9c:28:02:dd:
34:47:e3:7d:da:d7:33:69:ad:95:0a:fb:35:32:05:7b:89:ba:
81:91:8d:81:13:84:5c:59:53:94:2b:04:e6:76:6d:2f:75:cf:
2d:3e:9e:d9:cf:fa:1b:d2:b7:d3:85:f3:ba:d7:0f:8b:49:90:
cd:2d:94:11:c1:00:7a:e3:e5:4d:58:a9:ac:cf:b4:e9:46:7d:
56:f0:1a:ef:12:af:1b:a2:d8:3a:54:05:34:a9:cd:ed:55:d3:
75:9e:9f:02:18:13:15:4a:5c:0a:28:66:78:e1:55:c0:b7:ae:
bc:97:a1:85:4f:68:b8:66:c0:6e:8b:07:e8:ef:89:a8:dc:40:
b8:db:ce:8f:44:4a:dd:98:2a:78:db:33:91:8d:8a:7f:2e:d8:
8f:1f:b5:5c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQks+C5bS4JlYvo/yzERaK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjZlMzNjNDAzMjJhMTMzMmEyODJmZGY2ZTU4NmJmM2QwNWQ1YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqxAmWVV9fl5xddZ+ChTh+B1pkXE
5xgJansaFPnuNVoHnXUSWZ97YK5BO1mPVtVXKUYVTwaoBFhKDeo1KXvOL8zNxlod
1jZJ5A7i0NQ3+Vw8T69q1nMvABZu7Vup6KzR5SfSSOOH4Dlgh+GOK7SXFG1q82ue
kkqbu6e4Fhgl58WR1SI5od0yrp2HBjfcvdO+hEbwPc3NBaoJ9Midw77XROwl7WY8
f9wn66gWhRbCMXYFnPp8hu0xb3rJo17vn1nR0ndrlGjL2u0F042PNRbqFJAe928K
sp007QwDQ54hQ4HgyHiOHzP3BYW1CGHdPgeFu6FHLQ6o6laUa3Noae2cGQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCJuM8QDIqEzKigv325Ya/PQXVvVMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvSW00enhBTWlvVE1xS0NfZmJsaHI4OUJkVzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5IxDAN
BgkqhkiG9w0BAQsFAAOCAQEApTC2BZDHTXtjSmKVYW6eBfYzVCV17mixg8dFpTGN
LlOo63YZ0qLKmgFSff3PoztxlVKEXkH4FniRKku7MaASH+4bvjQlWoe7Eb3UskQ+
xggvDCtlRxhWxxdk+f7s7h4/nY4Xqw4lFsucKALdNEfjfdrXM2mtlQr7NTIFe4m6
gZGNgROEXFlTlCsE5nZtL3XPLT6e2c/6G9K304XzutcPi0mQzS2UEcEAeuPlTVip
rM+06UZ9VvAa7xKvG6LYOlQFNKnN7VXTdZ6fAhgTFUpcCihmeOFVwLeuvJehhU9o
uGbAbosH6O+JqNxAuNvOj0RK3ZgqeNszkY2Kfy7Yjx+1XA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:13 2025 by rpki-client