Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ch1uHiNbVCoxHlMfaqHJoy1dTJ8.roa
File: Ch1uHiNbVCoxHlMfaqHJoy1dTJ8.roa (raw, json)
Hash identifier: NzzOdrq4ZDAlKJytX+V5NkssCPY90GxKrPhsOPGAc2E=
Subject key identifier: 0A:1D:6E:1E:23:5B:54:2A:31:1E:53:1F:6A:A1:C9:A3:2D:5D:4C:9F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D34B22412E0BAD924985C0A29D78
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ch1uHiNbVCoxHlMfaqHJoy1dTJ8.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44024
IP address blocks: 2a0b:b83:b8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d3:4b:22:41:2e:0b:ad:92:49:85:c0:a2:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1d6e1e235b542a311e531f6aa1c9a32d5d4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:d9:e4:26:e6:e6:b4:bc:c3:e6:8f:39:2d:
c4:6c:c8:0e:f4:8d:02:87:43:6b:97:8c:af:8a:19:
4f:45:08:39:56:46:e3:a1:6c:5b:11:9c:69:95:46:
a4:b0:d4:ce:ff:20:38:6d:e1:40:72:4b:60:10:2b:
44:8a:56:29:f4:1f:df:bc:58:65:cc:7b:14:af:52:
1e:cb:ff:bc:cc:6e:6a:18:96:dc:a1:28:b2:a3:49:
45:8b:16:a1:c6:0f:2d:9b:3f:6b:3e:ec:02:8f:63:
27:06:84:ba:01:6e:6f:0a:68:e3:05:2f:3f:82:c8:
74:ab:76:cf:e4:b7:f0:ce:e7:46:fd:08:cc:20:0f:
82:c9:7f:2e:20:c6:57:c7:01:38:62:1f:75:ca:a0:
1e:26:e4:71:7a:a8:3a:0f:52:bd:be:3c:97:65:8c:
40:40:df:a5:a5:ae:47:53:f3:a6:f8:ac:a6:2c:04:
b7:7f:a7:86:2d:d1:f3:f0:fe:91:ee:e2:27:3b:4f:
f5:8f:2d:83:23:84:4c:4c:df:62:77:53:72:15:f9:
0c:ab:da:08:aa:33:a1:b6:16:26:b9:70:98:4a:2e:
29:4f:cc:92:62:cc:c9:a3:6b:bd:d0:ba:fb:4e:f5:
64:88:6e:e5:06:ae:6c:78:6d:4d:0f:d8:43:a8:da:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:6E:1E:23:5B:54:2A:31:1E:53:1F:6A:A1:C9:A3:2D:5D:4C:9F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ch1uHiNbVCoxHlMfaqHJoy1dTJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b83:b8::/48
Signature Algorithm: sha256WithRSAEncryption
6a:2b:e8:70:a8:56:aa:89:3d:09:d5:81:08:a3:1c:dc:91:d9:
c4:5b:e7:4a:34:93:b1:db:18:84:db:6d:42:73:f3:a5:9b:a4:
ee:c7:9a:ca:22:e6:6b:26:14:5b:7a:5a:0e:1c:9d:70:a7:f7:
bf:27:f4:a6:34:b6:8a:ec:73:28:9b:0c:6e:19:a7:44:59:db:
48:c2:d8:13:6e:76:3c:b8:5b:ff:e5:6d:73:64:0b:7b:ef:b2:
a9:8a:06:14:d6:da:87:93:5d:cb:14:f0:f8:e0:9e:52:3d:52:
37:f6:b0:ca:10:d2:41:01:68:0f:e9:17:d4:61:3d:73:b6:cb:
cc:5a:cd:7d:8a:2c:57:92:87:75:d5:66:c3:3b:d0:fc:66:3c:
a6:f5:9a:88:78:ab:f7:d6:c2:9d:d4:c8:2b:19:f5:61:ad:69:
3a:5a:c8:a5:f9:59:d5:4b:4e:40:af:59:29:1e:b7:24:26:e1:
83:71:e4:a0:35:dc:9a:88:b8:c7:0b:63:11:11:9c:fe:0f:c2:
fe:a6:f4:5c:67:9b:c2:c5:96:56:85:09:33:0e:44:f7:e7:dc:
9f:2c:45:33:5e:b6:b5:d2:1a:5f:4e:01:e0:1d:0e:33:79:5e:
a7:a5:c2:52:11:0f:b3:56:d8:ad:8f:bf:6c:7b:e8:8d:b2:1a:
f0:3c:07:cb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR9NLIkEuC62SSYXAop14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTFkNmUxZTIzNWI1NDJhMzExZTUzMWY2YWExYzlhMzJkNWQ0YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWXZ5Cbm5rS8w+aPOS3EbMgO9I0C
h0Nrl4yvihlPRQg5VkbjoWxbEZxplUaksNTO/yA4beFAcktgECtEilYp9B/fvFhl
zHsUr1Iey/+8zG5qGJbcoSiyo0lFixahxg8tmz9rPuwCj2MnBoS6AW5vCmjjBS8/
gsh0q3bP5LfwzudG/QjMIA+CyX8uIMZXxwE4Yh91yqAeJuRxeqg6D1K9vjyXZYxA
QN+lpa5HU/Om+KymLAS3f6eGLdHz8P6R7uInO0/1jy2DI4RMTN9id1NyFfkMq9oI
qjOhthYmuXCYSi4pT8ySYszJo2u90Lr7TvVkiG7lBq5seG1ND9hDqNoOswIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAodbh4jW1QqMR5TH2qhyaMtXUyfMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvQ2gxdUhpTmJWQ294SGxNZmFxSEpveTFkVEo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLgwC4
MA0GCSqGSIb3DQEBCwUAA4IBAQBqK+hwqFaqiT0J1YEIoxzckdnEW+dKNJOx2xiE
221Cc/Olm6Tux5rKIuZrJhRbeloOHJ1wp/e/J/SmNLaK7HMomwxuGadEWdtIwtgT
bnY8uFv/5W1zZAt777KpigYU1tqHk13LFPD44J5SPVI39rDKENJBAWgP6RfUYT1z
tsvMWs19iixXkod11WbDO9D8Zjym9ZqIeKv31sKd1MgrGfVhrWk6Wsil+VnVS05A
r1kpHrckJuGDceSgNdyaiLjHC2MREZz+D8L+pvRcZ5vCxZZWhQkzDkT359yfLEUz
Xra10hpfTgHgHQ4zeV6npcJSEQ+zVtitj79se+iNshrwPAfL
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:19 2025 by rpki-client