Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/a543lKmyyGMa0HBPrwfoutV1h7c.roa
File: a543lKmyyGMa0HBPrwfoutV1h7c.roa (raw, json)
Hash identifier: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=
Subject key identifier: 6B:9E:37:94:A9:B2:C8:63:1A:D0:70:4F:AF:07:E8:BA:D5:75:87:B7
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01941F8C42CAF704CEEC39E64908B5560F48
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/a543lKmyyGMa0HBPrwfoutV1h7c.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23748
IP address blocks: 2a12:a300::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:ca:f7:04:ce:ec:39:e6:49:08:b5:56:0f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9e3794a9b2c8631ad0704faf07e8bad57587b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:54:15:f0:a6:e1:53:fa:60:5c:b8:9c:84:
81:3b:6e:f7:b7:4b:1a:0c:fb:2e:f5:71:d1:69:2b:
bb:ac:2b:21:ca:95:02:b0:05:1e:9d:4f:f5:b2:e1:
fb:6f:d2:af:0e:35:13:0b:5f:21:db:c2:bc:e8:a4:
ef:91:d5:10:12:15:1f:2f:b7:15:97:37:02:3a:37:
cd:82:63:5e:82:d9:1e:82:76:ad:fd:aa:ed:1c:32:
23:73:7e:4d:c4:9d:64:bf:ec:92:5e:b2:18:21:9c:
42:fb:c9:f8:6e:d4:f4:67:4d:f3:d3:4d:d0:12:f2:
e1:de:69:f5:28:02:23:ea:70:a8:83:ed:70:9e:ab:
ed:8c:b8:66:f3:af:2d:b7:82:d9:ac:61:4d:a3:3e:
57:32:39:7d:8e:33:9f:61:11:20:a0:b0:e4:a1:b6:
51:cd:6a:0f:eb:e3:fd:bd:09:30:da:25:15:66:1a:
b8:7f:42:f4:53:35:80:80:ea:75:35:b4:41:95:f3:
3a:64:de:1b:f5:63:cc:e6:aa:ed:81:7f:07:56:38:
90:78:f6:ba:2d:18:8e:5f:8a:94:9a:5b:97:ac:9e:
24:28:55:05:db:d4:b2:ad:7a:e6:4c:f6:2b:3c:a8:
29:aa:4f:e9:10:51:f3:2e:63:10:55:10:45:a9:ec:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9E:37:94:A9:B2:C8:63:1A:D0:70:4F:AF:07:E8:BA:D5:75:87:B7
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/a543lKmyyGMa0HBPrwfoutV1h7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
Signature Algorithm: sha256WithRSAEncryption
86:e0:35:83:80:a5:68:22:06:13:76:fc:f5:b3:8d:72:db:2e:
59:6c:3f:ef:e6:2b:ca:83:ee:fd:37:43:37:e2:81:cc:7c:a0:
80:ac:c2:4e:aa:ef:40:74:38:19:ee:89:7e:74:2b:03:c7:65:
f2:41:f4:10:48:c2:0c:d4:0e:f8:c6:11:a2:0c:3b:1f:ae:0f:
24:85:38:88:99:21:23:24:37:29:b3:09:0b:fb:7b:a5:58:ad:
cd:95:c5:53:54:db:21:77:0d:bc:8a:02:29:12:9d:d8:77:96:
b5:da:49:e1:f2:f5:bd:e6:f5:10:6e:b8:9c:59:0f:b4:19:d9:
d0:fc:51:e3:b2:82:de:eb:61:48:5b:27:b4:d3:83:a4:3a:0a:
3a:2a:dd:2e:86:7c:60:84:d9:bc:c8:36:72:55:2e:ab:4c:e6:
14:5e:fb:a5:e8:04:d7:c6:2e:50:6a:7b:ca:c4:17:28:72:76:
31:e9:57:74:5f:7e:0e:c4:5f:6c:0c:1e:db:2b:e6:e7:46:b0:
7e:c5:58:77:7a:d2:68:c7:2e:9a:a3:11:6e:5b:0e:aa:48:d2:
fc:47:78:2f:2c:9a:0e:c6:89:49:46:c3:35:88:9f:29:ae:28:
d7:87:ec:95:80:76:62:5e:57:14:95:7a:60:f7:f5:aa:98:44:
72:f0:e5:49
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQfjELK9wTO7DnmSQi1Vg9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjllMzc5NGE5YjJjODYzMWFkMDcwNGZhZjA3ZThiYWQ1NzU4N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2dUFfCm4VP6YFy4nISBO273t0sa
DPsu9XHRaSu7rCshypUCsAUenU/1suH7b9KvDjUTC18h28K86KTvkdUQEhUfL7cV
lzcCOjfNgmNegtkegnat/artHDIjc35NxJ1kv+ySXrIYIZxC+8n4btT0Z03z003Q
EvLh3mn1KAIj6nCog+1wnqvtjLhm868tt4LZrGFNoz5XMjl9jjOfYREgoLDkobZR
zWoP6+P9vQkw2iUVZhq4f0L0UzWAgOp1NbRBlfM6ZN4b9WPM5qrtgX8HVjiQePa6
LRiOX4qUmluXrJ4kKFUF29SyrXrmTPYrPKgpqk/pEFHzLmMQVRBFqey38wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGueN5SpsshjGtBwT68H6LrVdYe3MB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvYTU0M2xLbXl5R01hMEhCUHJ3Zm91dFYxaDdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKjADAN
BgkqhkiG9w0BAQsFAAOCAQEAhuA1g4ClaCIGE3b89bONctsuWWw/7+YryoPu/TdD
N+KBzHyggKzCTqrvQHQ4Ge6JfnQrA8dl8kH0EEjCDNQO+MYRogw7H64PJIU4iJkh
IyQ3KbMJC/t7pVitzZXFU1TbIXcNvIoCKRKd2HeWtdpJ4fL1veb1EG64nFkPtBnZ
0PxR47KC3uthSFsntNODpDoKOirdLoZ8YITZvMg2clUuq0zmFF77pegE18YuUGp7
ysQXKHJ2MelXdF9+DsRfbAwe2yvm50awfsVYd3rSaMcumqMRblsOqkjS/Ed4Lyya
DsaJSUbDNYifKa4o14fslYB2Yl5XFJV6YPf1qphEcvDlSQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:21 2025 by rpki-client