Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa
File: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (raw, json)
Hash identifier: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=
Subject key identifier: 22:4E:8E:DC:1E:C5:8E:B0:6B:03:05:9D:35:08:A5:9A:05:B3:73:08
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B6549CCDE0F8BCD278FAD6836C517E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397522
IP address blocks: 2a01:488:bb1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:54:9c:cd:e0:f8:bc:d2:78:fa:d6:83:6c:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=224e8edc1ec58eb06b03059d3508a59a05b37308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:08:de:fc:06:ed:fa:ae:15:02:08:81:fa:
f6:3b:56:ce:00:74:8b:6d:7b:9b:d3:05:d0:37:ff:
16:71:6e:f7:41:1f:24:d1:61:74:cc:74:c8:99:62:
d1:e2:dc:00:17:ef:61:14:27:68:f4:7b:2e:61:35:
f7:98:63:4c:ef:39:31:c7:9d:b3:1e:a5:26:66:f7:
0a:37:47:07:74:88:25:8c:3c:eb:e9:e8:ac:98:29:
aa:45:22:97:f7:c1:8d:13:21:81:86:ad:a6:08:38:
61:4e:6d:7f:f8:7f:77:f1:d1:0f:cd:01:b2:90:45:
8a:f7:6c:ee:79:9c:37:ba:5a:2d:fe:5a:d6:2b:72:
46:9b:17:ab:76:73:c2:1f:3d:65:05:33:f5:98:66:
45:28:45:13:5d:db:42:53:b7:12:1a:7f:31:63:e3:
72:41:3d:57:6a:25:b6:e3:c0:d5:4e:15:d4:30:a2:
5d:15:27:f7:53:99:0f:23:28:6f:86:db:ec:87:ff:
71:b7:10:0b:16:02:59:2f:b9:dd:5b:d1:76:87:c9:
42:1a:8d:7d:67:72:03:f2:dd:8f:0f:cc:f2:a5:e9:
21:f8:14:2e:42:a9:02:86:07:58:0d:18:79:28:66:
1b:de:c6:50:1e:e4:be:bf:a4:ff:9c:8c:08:af:b5:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:8E:DC:1E:C5:8E:B0:6B:03:05:9D:35:08:A5:9A:05:B3:73:08
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb1d::/48
Signature Algorithm: sha256WithRSAEncryption
4a:41:14:0f:64:5a:a0:b4:b3:04:2c:0d:2c:c9:4c:d8:fc:a9:
a1:4e:ff:e3:a3:f8:2e:3b:16:c8:16:52:e9:bc:f2:30:96:16:
97:d0:aa:5d:a9:c2:f2:10:08:66:07:46:51:36:27:6c:97:2b:
db:da:f9:fe:ea:58:c5:e6:0c:a7:98:61:f2:6b:17:d4:15:b5:
2f:aa:0c:39:10:69:ec:a5:de:f7:0a:ed:7f:04:62:25:04:0f:
32:52:26:42:b3:15:4c:dd:8b:0e:84:32:c8:73:be:17:43:d9:
20:86:74:0b:42:4b:4a:39:ef:fa:88:3f:b8:20:3c:99:ee:de:
93:be:19:c1:62:fb:59:18:55:5f:05:25:b4:ac:6a:73:c8:79:
2b:88:74:8b:8c:c9:8a:a0:b0:3a:9e:df:9f:97:32:4e:55:ed:
a1:15:94:e9:2c:c8:ed:c7:f7:35:8d:4e:40:c3:ee:b0:7f:ca:
bc:22:45:ba:19:72:4e:a3:e1:b2:3c:d5:d9:dd:63:11:b6:95:
81:a3:bf:35:fa:6c:c9:ad:5e:0b:8b:36:c7:6d:c8:6c:75:bc:
0a:e4:99:49:99:c5:8b:5b:1b:3d:72:0d:37:ef:04:d9:6e:cf:
59:17:9a:fe:b4:5d:74:f9:f1:e5:c5:43:b4:0e:fe:fc:b0:73:
25:e2:5c:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntlSczeD4vNJ4+taDbFF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwMTAyMTU1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjRlOGVkYzFlYzU4ZWIwNmIwMzA1OWQzNTA4YTU5YTA1YjM3MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ncI3vwG7fquFQIIgfr2O1bOAHSL
bXub0wXQN/8WcW73QR8k0WF0zHTImWLR4twAF+9hFCdo9HsuYTX3mGNM7zkxx52z
HqUmZvcKN0cHdIgljDzr6eismCmqRSKX98GNEyGBhq2mCDhhTm1/+H938dEPzQGy
kEWK92zueZw3ulot/lrWK3JGmxerdnPCHz1lBTP1mGZFKEUTXdtCU7cSGn8xY+Ny
QT1XaiW248DVThXUMKJdFSf3U5kPIyhvhtvsh/9xtxALFgJZL7ndW9F2h8lCGo19
Z3ID8t2PD8zypekh+BQuQqkChgdYDRh5KGYb3sZQHuS+v6T/nIwIr7U05wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCJOjtwexY6wawMFnTUIpZoFs3MIMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvSWs2TzNCN0ZqckJyQXdXZE5RaWxtZ1d6Y3dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsd
MA0GCSqGSIb3DQEBCwUAA4IBAQBKQRQPZFqgtLMELA0syUzY/KmhTv/jo/guOxbI
FlLpvPIwlhaX0KpdqcLyEAhmB0ZRNidslyvb2vn+6ljF5gynmGHyaxfUFbUvqgw5
EGnspd73Cu1/BGIlBA8yUiZCsxVM3YsOhDLIc74XQ9kghnQLQktKOe/6iD+4IDyZ
7t6TvhnBYvtZGFVfBSW0rGpzyHkriHSLjMmKoLA6nt+flzJOVe2hFZTpLMjtx/c1
jU5Aw+6wf8q8IkW6GXJOo+GyPNXZ3WMRtpWBo781+mzJrV4LizbHbchsdbwK5JlJ
mcWLWxs9cg037wTZbs9ZF5r+tF10+fHlxUO0Dv78sHMl4lxM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:01 2025 by rpki-client