Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa
File: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (raw, json)
Hash identifier: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=
Subject key identifier: 78:84:F7:D9:99:83:FC:5A:FD:95:03:C5:9D:43:FE:FC:71:90:B2:67
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 01942369F3E0C9B46007454513937424B9B4
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 2a05:1700:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f3:e0:c9:b4:60:07:45:45:13:93:74:24:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7884f7d99983fc5afd9503c59d43fefc7190b267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:17:05:7e:cf:18:d7:d1:66:c3:f1:8d:d5:
24:fb:bb:c9:56:98:29:3f:ee:f8:4b:68:2e:47:17:
0f:7e:9e:02:48:d5:03:84:02:e8:c9:47:57:74:c3:
f9:6b:ef:5d:f5:68:25:48:10:85:e5:94:79:90:02:
c1:6b:d5:59:52:09:39:4e:35:d8:6a:b2:c9:8c:b5:
78:03:6d:cd:7f:13:0a:d4:3b:92:10:80:88:0b:17:
d0:5d:69:c8:cc:88:5a:2f:75:a9:54:aa:af:e0:7f:
1c:6a:ea:9e:6d:d0:1b:b4:47:ea:b7:b1:c9:09:75:
8e:d5:34:a9:33:1d:7e:09:3c:9a:44:3e:b9:ef:cb:
98:8c:06:4d:4c:49:c4:3d:ea:e1:61:6c:dc:fc:45:
aa:88:94:68:8f:55:b1:20:31:04:66:6c:ab:10:d5:
f6:fb:91:d1:fa:3e:e0:ca:3f:7d:e9:f3:9d:06:5e:
0f:d4:99:b8:84:5a:99:cb:4a:14:46:5c:df:e0:b3:
af:63:de:f9:97:4f:40:b9:3c:ea:09:22:40:c1:f7:
33:94:c7:3a:42:4f:c5:e4:8d:3a:e9:a8:82:a5:a1:
6d:a5:4b:f8:63:f7:00:7c:76:51:d3:50:e8:36:f9:
4b:f1:90:9e:05:e7:f9:89:d4:17:7b:6d:3a:6b:5c:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:F7:D9:99:83:FC:5A:FD:95:03:C5:9D:43:FE:FC:71:90:B2:67
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1700:2::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ab:d9:c4:ed:ba:93:2e:5a:18:ee:6e:29:a9:77:57:10:16:
e3:32:92:ad:20:a4:f9:f8:db:66:8f:0e:45:b7:76:5e:95:02:
40:95:70:0e:f8:3a:a1:87:19:3b:7e:e9:59:6a:e8:ad:b0:7f:
0a:77:71:af:19:f4:7b:e8:05:0f:ce:f8:4d:ea:55:3e:d7:06:
e6:9d:62:da:cd:67:52:0d:a5:d4:88:f5:04:36:24:7e:9e:77:
2d:0b:29:6d:7f:2c:ba:4e:db:fc:49:4a:6c:8e:62:57:49:eb:
b4:c2:5a:02:33:3d:06:e3:f6:e2:fb:66:4b:20:f3:b7:8a:83:
55:6d:1e:08:d5:a4:b5:f4:07:c6:09:6c:8c:97:8f:87:82:44:
c4:06:0f:d9:e1:fc:97:f0:3a:26:f1:5d:d2:69:8a:95:33:15:
fc:a7:f5:a0:a2:44:34:7c:4e:4d:1c:af:5a:e7:45:e0:30:d7:
39:e0:3c:c1:45:09:d9:b8:dc:57:f1:97:2e:8c:60:ca:18:a9:
84:cb:e2:ee:9b:52:25:19:38:ca:60:55:51:01:4d:68:e9:3c:
5e:79:18:41:ac:f6:02:49:49:fb:62:ff:53:d9:f2:bd:4e:9c:
99:02:5a:aa:f4:ff:93:c3:eb:6d:e8:67:b9:a9:22:0c:d6:56:
e9:01:9c:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjafPgybRgB0VFE5N0JLm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx
NzRmMTQwHhcNMjUwMTAxMTk0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODg0ZjdkOTk5ODNmYzVhZmQ5NTAzYzU5ZDQzZmVmYzcxOTBiMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrkXBX7PGNfRZsPxjdUk+7vJVpgp
P+74S2guRxcPfp4CSNUDhALoyUdXdMP5a+9d9WglSBCF5ZR5kALBa9VZUgk5TjXY
arLJjLV4A23NfxMK1DuSEICICxfQXWnIzIhaL3WpVKqv4H8cauqebdAbtEfqt7HJ
CXWO1TSpMx1+CTyaRD6578uYjAZNTEnEPerhYWzc/EWqiJRoj1WxIDEEZmyrENX2
+5HR+j7gyj996fOdBl4P1Jm4hFqZy0oURlzf4LOvY975l09AuTzqCSJAwfczlMc6
Qk/F5I066aiCpaFtpUv4Y/cAfHZR01DoNvlL8ZCeBef5idQXe206a1yUJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHiE99mZg/xa/ZUDxZ1D/vxxkLJnMB8GA1UdIwQY
MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt
OTBmOTdmNzQ2Njc2LzEvZUlUMzJabURfRnI5bFFQRm5VUC1fSEdRc21jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2
LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUXAAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCdq9nE7bqTLloY7m4pqXdXEBbjMpKtIKT5+Ntm
jw5Ft3ZelQJAlXAO+Dqhhxk7fulZauitsH8Kd3GvGfR76AUPzvhN6lU+1wbmnWLa
zWdSDaXUiPUENiR+nnctCyltfyy6Ttv8SUpsjmJXSeu0wloCMz0G4/bi+2ZLIPO3
ioNVbR4I1aS19AfGCWyMl4+HgkTEBg/Z4fyX8Dom8V3SaYqVMxX8p/WgokQ0fE5N
HK9a50XgMNc54DzBRQnZuNxX8ZcujGDKGKmEy+Lum1IlGTjKYFVRAU1o6TxeeRhB
rPYCSUn7Yv9T2fK9TpyZAlqq9P+Tw+tt6Ge5qSIM1lbpAZyl
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:55 2025 by rpki-client