Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa
File: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (raw, json)
Hash identifier: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=
Subject key identifier: 13:17:69:09:35:C2:B7:CB:89:E1:9F:CC:DB:E1:24:89:EA:A1:8E:81
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019426D9D9E01F9D0B14A2324A31B4B0C4DA
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211088
IP address blocks: 2001:678:f94::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d9:e0:1f:9d:0b:14:a2:32:4a:31:b4:b0:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1317690935c2b7cb89e19fccdbe12489eaa18e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:fb:4f:fe:34:45:2a:84:98:b9:66:64:3a:
ff:ac:bb:de:5a:3a:9c:e7:40:18:03:a4:b5:3a:ba:
30:2d:d2:00:de:a4:c6:9f:cb:21:78:d6:ed:7f:e5:
44:f4:61:5e:3e:98:4b:01:4f:23:1c:dd:53:d0:59:
7b:82:1f:31:3c:eb:7a:30:9c:ec:43:13:e6:d0:e3:
02:d3:c7:ad:86:8c:67:01:0a:10:85:bd:0b:e1:7a:
a5:62:35:8b:81:5e:a8:9d:18:6c:2f:2f:a9:5b:bd:
d0:13:10:62:08:44:66:b7:e3:05:79:88:e0:2a:8f:
48:09:a3:88:b8:30:a5:63:fa:54:13:25:43:10:cf:
f1:9e:58:55:b2:77:1f:8d:17:4b:f9:a7:46:9d:d5:
0d:7e:68:c9:7a:7a:37:91:f5:90:69:71:ff:df:d4:
e8:2a:58:f2:96:0a:1c:8f:a3:36:73:97:ae:32:7e:
26:37:90:91:b8:c7:9d:e1:2d:6b:5b:e8:96:06:a2:
38:2a:48:36:ec:02:5d:37:2a:9b:cf:f3:59:ba:89:
89:c5:49:01:f7:5c:ab:ea:df:73:cb:12:36:e1:ec:
4c:c1:24:18:f4:48:ad:f2:ca:3d:98:41:16:62:2d:
d5:0c:82:e5:a6:32:e3:46:84:22:57:aa:9a:c4:49:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:69:09:35:C2:B7:CB:89:E1:9F:CC:DB:E1:24:89:EA:A1:8E:81
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f94::/48
Signature Algorithm: sha256WithRSAEncryption
1c:00:e4:48:94:27:d9:23:08:d1:bf:3a:86:bf:c7:b3:18:87:
d5:80:1d:4f:01:be:a9:60:4d:75:b8:9c:7a:06:31:6a:85:15:
d1:98:f9:c8:af:5c:0d:22:96:da:ec:59:0f:43:97:51:47:d5:
70:15:20:f3:5f:1b:60:e4:a9:f5:21:61:6c:61:9b:6b:64:42:
4e:73:df:3e:2f:85:7c:73:e7:b6:d0:9f:67:c5:be:a1:08:56:
44:a2:35:6f:43:b0:d6:70:9f:54:0e:5c:1e:bf:c7:b2:00:64:
c8:2f:5a:5e:c0:2b:2e:00:cb:92:80:44:09:c9:47:c1:e1:df:
ff:2a:a5:a3:8f:31:75:a1:2f:89:cb:0a:fa:54:e0:cb:00:ae:
af:74:ab:e0:5b:f3:52:f6:f9:70:38:36:68:b3:e6:44:8c:76:
e0:6b:17:06:ca:c3:60:0d:84:ea:fc:57:c4:87:c4:ac:2e:37:
42:e2:a3:6d:49:6c:17:07:df:dd:90:58:bf:c3:16:1e:45:23:
aa:ac:f7:61:3a:7f:4b:7d:43:1b:bc:14:dd:07:4c:07:4f:af:
94:6b:1f:8a:b6:7d:87:12:6a:42:73:d2:64:ce:5c:b9:af:10:
94:3e:87:2d:13:0f:3a:49:a3:63:90:75:5c:22:73:ed:a7:28:
d7:be:9b:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2dngH50LFKIySjG0sMTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm
NDM3MzkwHhcNMjUwMTAyMTE0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzE3NjkwOTM1YzJiN2NiODllMTlmY2NkYmUxMjQ4OWVhYTE4ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwD7T/40RSqEmLlmZDr/rLveWjqc
50AYA6S1OrowLdIA3qTGn8sheNbtf+VE9GFePphLAU8jHN1T0Fl7gh8xPOt6MJzs
QxPm0OMC08ethoxnAQoQhb0L4XqlYjWLgV6onRhsLy+pW73QExBiCERmt+MFeYjg
Ko9ICaOIuDClY/pUEyVDEM/xnlhVsncfjRdL+adGndUNfmjJeno3kfWQaXH/39To
Kljylgocj6M2c5euMn4mN5CRuMed4S1rW+iWBqI4Kkg27AJdNyqbz/NZuomJxUkB
91yr6t9zyxI24exMwSQY9Eit8so9mEEWYi3VDILlpjLjRoQiV6qaxEk8LQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBMXaQk1wrfLieGfzNvhJInqoY6BMB8GA1UdIwQY
MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt
ZDlkMGFhMjhhYjJiLzEvRXhkcENUWEN0OHVKNFpfTTItRWtpZXFoam9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi
LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+U
MA0GCSqGSIb3DQEBCwUAA4IBAQAcAORIlCfZIwjRvzqGv8ezGIfVgB1PAb6pYE11
uJx6BjFqhRXRmPnIr1wNIpba7FkPQ5dRR9VwFSDzXxtg5Kn1IWFsYZtrZEJOc98+
L4V8c+e20J9nxb6hCFZEojVvQ7DWcJ9UDlwev8eyAGTIL1pewCsuAMuSgEQJyUfB
4d//KqWjjzF1oS+Jywr6VODLAK6vdKvgW/NS9vlwODZos+ZEjHbgaxcGysNgDYTq
/FfEh8SsLjdC4qNtSWwXB9/dkFi/wxYeRSOqrPdhOn9LfUMbvBTdB0wHT6+Uax+K
tn2HEmpCc9Jkzly5rxCUPoctEw86SaNjkHVcInPtpyjXvpsL
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:06 2025 by rpki-client