Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa
File: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (raw, json)
Hash identifier: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=
Subject key identifier: 8D:1F:3E:C4:01:9C:AF:97:97:7E:77:FD:3D:0F:A0:0A:BE:2C:A8:15
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01941F8C44A6B643833B1F5867B573772557
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138330
IP address blocks: 2a12:a307:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:a6:b6:43:83:3b:1f:58:67:b5:73:77:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d1f3ec4019caf97977e77fd3d0fa00abe2ca815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:6a:0a:71:99:e2:b4:6c:9f:c9:e7:0a:50:
b4:ab:c3:6d:ba:84:9b:57:c3:ad:a4:2e:52:aa:ee:
0c:1b:91:a1:25:99:c5:8b:a8:ff:ac:c3:1e:34:8d:
15:b2:20:29:8c:08:4a:db:48:cb:8b:01:95:a5:d6:
13:18:25:21:d3:19:10:5d:db:ce:15:53:11:5f:fe:
d8:43:b3:3e:f2:cc:d5:7a:bd:61:8f:6c:2c:f8:04:
1d:cf:52:9b:13:d9:7e:7d:6c:d4:b6:1d:bb:d3:7a:
bd:30:e8:60:7a:3d:97:52:bf:93:8f:20:8c:d0:16:
24:54:a5:44:10:cc:89:f9:df:12:ce:0e:0b:f7:55:
0e:67:00:13:9a:37:c0:ac:86:6e:1c:dd:6a:da:4c:
a5:ab:da:fb:10:f4:a2:dd:13:52:78:ea:5d:3e:74:
23:3d:44:03:31:2d:9e:45:fb:77:d3:77:2b:12:d1:
77:7c:20:f0:89:54:27:2e:d6:c8:87:8f:a7:a0:66:
58:92:84:ac:d8:30:87:27:48:1b:a3:ae:07:15:06:
d5:7b:c6:eb:6c:29:cd:ff:34:2d:d1:0b:8f:64:43:
e6:94:62:e3:38:06:bb:70:1b:ab:9f:2c:0f:43:1a:
84:84:41:56:36:0b:b6:23:30:ba:bf:bb:c4:0c:78:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:3E:C4:01:9C:AF:97:97:7E:77:FD:3D:0F:A0:0A:BE:2C:A8:15
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a307:1::/48
Signature Algorithm: sha256WithRSAEncryption
50:46:c2:d3:55:78:4e:99:5a:6e:1e:64:4a:41:08:29:19:de:
6e:ce:55:75:2b:59:83:f1:69:82:6b:8e:50:11:d5:3d:6a:e8:
45:57:88:30:f4:67:70:d1:6d:16:31:0b:83:13:5f:8b:ad:f3:
40:30:21:72:b3:6a:08:0b:a6:35:44:74:31:05:70:cd:fc:4e:
b7:a7:fd:38:a9:0a:5b:74:d6:9a:af:d6:7f:79:51:d3:24:e5:
f7:a1:e0:65:46:b5:15:c6:32:80:a7:ea:4a:a5:72:7d:e3:ca:
e8:68:5d:c0:3b:6f:6b:45:d8:18:a2:59:19:cf:e7:d6:d8:12:
75:6c:3a:96:ae:17:23:d8:25:ea:9e:68:52:ad:2f:4d:d8:b6:
ca:9e:93:e8:d7:68:de:67:ca:a0:b5:df:e5:4b:9d:3c:e4:c2:
be:ee:2e:3d:d3:fb:b3:55:c6:97:63:48:c7:e9:c8:f4:15:86:
58:6b:c2:a2:fe:66:54:15:ff:70:d0:32:eb:6f:e4:88:e3:e4:
97:34:5e:2b:09:08:0b:3f:98:ca:78:c5:24:ab:a3:c2:a2:33:
64:1b:de:ff:dc:32:b6:df:bf:c1:51:ac:8e:3e:e3:e0:71:b2:
9d:43:09:7d:3b:16:19:12:9b:32:2f:6c:91:df:63:84:08:fd:
39:cd:14:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjESmtkODOx9YZ7VzdyVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDFmM2VjNDAxOWNhZjk3OTc3ZTc3ZmQzZDBmYTAwYWJlMmNhODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA379qCnGZ4rRsn8nnClC0q8NtuoSb
V8OtpC5Squ4MG5GhJZnFi6j/rMMeNI0VsiApjAhK20jLiwGVpdYTGCUh0xkQXdvO
FVMRX/7YQ7M+8szVer1hj2ws+AQdz1KbE9l+fWzUth2703q9MOhgej2XUr+TjyCM
0BYkVKVEEMyJ+d8Szg4L91UOZwATmjfArIZuHN1q2kylq9r7EPSi3RNSeOpdPnQj
PUQDMS2eRft303crEtF3fCDwiVQnLtbIh4+noGZYkoSs2DCHJ0gbo64HFQbVe8br
bCnN/zQt0QuPZEPmlGLjOAa7cBurnywPQxqEhEFWNgu2IzC6v7vEDHjCpwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI0fPsQBnK+Xl353/T0PoAq+LKgVMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvalI4LXhBR2NyNWVYZm5mOVBRLWdDcjRzcUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKjBwAB
MA0GCSqGSIb3DQEBCwUAA4IBAQBQRsLTVXhOmVpuHmRKQQgpGd5uzlV1K1mD8WmC
a45QEdU9auhFV4gw9Gdw0W0WMQuDE1+LrfNAMCFys2oIC6Y1RHQxBXDN/E63p/04
qQpbdNaar9Z/eVHTJOX3oeBlRrUVxjKAp+pKpXJ948roaF3AO29rRdgYolkZz+fW
2BJ1bDqWrhcj2CXqnmhSrS9N2LbKnpPo12jeZ8qgtd/lS5085MK+7i490/uzVcaX
Y0jH6cj0FYZYa8Ki/mZUFf9w0DLrb+SI4+SXNF4rCQgLP5jKeMUkq6PCojNkG97/
3DK237/BUayOPuPgcbKdQwl9OxYZEpsyL2yR32OECP05zRTq
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:33 2025 by rpki-client