Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ila1sSC7B5QnjYDNQNrlS7t0jIU.roa
File: Ila1sSC7B5QnjYDNQNrlS7t0jIU.roa (raw, json)
Hash identifier: 2cpH2a1mGYK1JYDPkVfcbG+KtX/tWHDrweIKkD3CNxY=
Subject key identifier: 22:56:B5:B1:20:BB:07:94:27:8D:80:CD:40:DA:E5:4B:BB:74:8C:85
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CDE6296B0FF514419ADE70AC7E8C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ila1sSC7B5QnjYDNQNrlS7t0jIU.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 2a0b:b87:ffd1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cd:e6:29:6b:0f:f5:14:41:9a:de:70:ac:7e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2256b5b120bb0794278d80cd40dae54bbb748c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:bf:ad:a1:1b:21:14:67:1f:68:7a:5c:c7:
22:e3:6f:e4:ae:4a:00:d4:cb:a6:dd:5e:04:56:0c:
31:84:e5:0f:8d:f7:eb:61:5b:6b:29:3b:20:9a:bb:
07:67:0f:ba:f8:5f:5d:0d:fa:fd:c5:65:db:c9:ba:
62:30:27:17:64:d6:0b:06:c0:a5:dd:b5:3d:4c:b6:
4e:c9:fc:55:8d:ab:49:1c:bc:ce:ab:e5:0f:05:bf:
26:b0:d4:a7:00:25:e4:a0:5e:d5:7e:2f:a2:8a:4c:
bf:01:fd:93:82:54:86:0c:bc:6a:85:09:40:15:6c:
cd:ff:93:20:1d:4e:d2:0e:35:37:c9:74:ca:2d:db:
40:d1:fe:37:1e:90:84:9d:d6:5c:fe:10:fe:ba:ef:
d1:47:2b:bd:6a:88:98:f5:3c:71:ff:1f:0a:3a:72:
c3:2d:8c:b3:84:b8:8a:5a:b0:31:fd:b5:e9:1f:2c:
04:6d:b3:07:1e:75:fa:10:e1:10:77:00:2b:e0:84:
77:05:ba:65:98:6f:7b:99:50:5b:15:63:49:12:3c:
c0:ff:e5:84:61:25:64:1e:b2:db:c8:15:74:77:03:
b7:b1:9d:b3:fe:64:be:de:4b:5f:b9:39:46:eb:b9:
53:57:f9:79:4f:65:0c:b6:83:30:8f:10:77:d9:81:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:B5:B1:20:BB:07:94:27:8D:80:CD:40:DA:E5:4B:BB:74:8C:85
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ila1sSC7B5QnjYDNQNrlS7t0jIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffd1::/48
Signature Algorithm: sha256WithRSAEncryption
63:73:c5:57:e1:ab:aa:66:d6:0f:aa:f0:43:4a:b2:54:31:4a:
b0:91:b5:da:12:22:73:49:0e:05:29:2a:78:8e:ba:31:e4:62:
b7:d0:83:4c:49:95:c1:f2:0c:3e:c3:e0:ea:32:93:78:1c:28:
77:3b:39:27:f1:a1:4a:93:be:84:61:e0:c4:bb:4f:78:a1:c4:
79:b9:4c:9c:f1:bd:51:f9:75:0b:02:07:b8:e5:9a:72:f0:0d:
d2:4c:11:47:31:3d:a4:e5:9d:82:d5:d9:00:81:bb:7a:74:b0:
55:a6:a4:08:70:d9:14:f6:e5:cb:3f:77:e8:ee:d2:62:8f:34:
ff:1d:3e:28:1f:af:78:91:e8:05:e8:25:e0:d5:60:48:91:59:
cc:20:d7:f8:3e:2c:91:54:0c:e7:32:d8:86:b3:fb:9b:67:9a:
84:3f:ef:10:58:da:80:04:24:d5:a0:59:4d:90:db:f2:b5:56:
16:d2:fc:f0:f9:24:75:19:0a:4f:d4:f1:b1:e4:bf:ce:dc:b6:
22:d0:4c:0e:40:1d:6a:63:fe:b8:d5:06:8d:aa:be:86:2e:7d:
4c:55:25:2c:a3:31:70:b7:24:e5:bc:4b:1b:76:24:0a:6e:c2:
22:82:1a:13:b3:35:db:b0:96:75:0a:80:bb:5b:a2:31:63:9e:
c2:7a:0a:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR83mKWsP9RRBmt5wrH6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjU2YjViMTIwYmIwNzk0Mjc4ZDgwY2Q0MGRhZTU0YmJiNzQ4Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPy/raEbIRRnH2h6XMci42/krkoA
1Mum3V4EVgwxhOUPjffrYVtrKTsgmrsHZw+6+F9dDfr9xWXbybpiMCcXZNYLBsCl
3bU9TLZOyfxVjatJHLzOq+UPBb8msNSnACXkoF7Vfi+iiky/Af2TglSGDLxqhQlA
FWzN/5MgHU7SDjU3yXTKLdtA0f43HpCEndZc/hD+uu/RRyu9aoiY9Txx/x8KOnLD
LYyzhLiKWrAx/bXpHywEbbMHHnX6EOEQdwAr4IR3BbplmG97mVBbFWNJEjzA/+WE
YSVkHrLbyBV0dwO3sZ2z/mS+3ktfuTlG67lTV/l5T2UMtoMwjxB32YGZtwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCJWtbEguweUJ42AzUDa5Uu7dIyFMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvSWxhMXNTQzdCNVFuallETlFOcmxTN3QwaklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//R
MA0GCSqGSIb3DQEBCwUAA4IBAQBjc8VX4auqZtYPqvBDSrJUMUqwkbXaEiJzSQ4F
KSp4jrox5GK30INMSZXB8gw+w+DqMpN4HCh3Ozkn8aFKk76EYeDEu094ocR5uUyc
8b1R+XULAge45Zpy8A3STBFHMT2k5Z2C1dkAgbt6dLBVpqQIcNkU9uXLP3fo7tJi
jzT/HT4oH694kegF6CXg1WBIkVnMINf4PiyRVAznMtiGs/ubZ5qEP+8QWNqABCTV
oFlNkNvytVYW0vzw+SR1GQpP1PGx5L/O3LYi0EwOQB1qY/641QaNqr6GLn1MVSUs
ozFwtyTlvEsbdiQKbsIighoTszXbsJZ1CoC7W6IxY57CegpY
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:13 2025 by rpki-client