Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ooemiNKGVRy5RLKGSewCoVXtxhA.roa
File: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (raw, json)
Hash identifier: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=
Subject key identifier: A2:87:A6:88:D2:86:55:1C:B9:44:B2:86:49:EC:02:A1:55:ED:C6:10
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B653830DB55FC926A14C6F98DC77F2
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ooemiNKGVRy5RLKGSewCoVXtxhA.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397519
IP address blocks: 2a01:488:bb0c::/48 maxlen: 48
2a01:488:bb1e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:53:83:0d:b5:5f:c9:26:a1:4c:6f:98:dc:77:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a287a688d286551cb944b28649ec02a155edc610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:05:d4:6f:1b:4d:78:bf:ca:e8:8d:29:ed:
a0:84:21:a7:be:13:a1:af:33:80:93:18:15:39:c9:
61:f2:0b:44:39:68:c2:6c:81:7c:4a:77:2f:e0:60:
2f:15:62:bb:ea:9c:50:42:43:80:18:4d:0e:73:45:
cb:03:6b:e4:b3:62:41:ef:0e:bc:9e:e9:d2:12:f5:
4a:aa:cc:78:85:c4:02:cf:d6:d8:17:94:46:95:86:
82:72:44:8a:ce:b1:39:65:ac:b5:8f:a2:21:a8:f5:
e4:c2:de:b6:d9:ec:9b:f7:80:dc:f9:45:75:3a:97:
7b:97:7a:da:4e:d7:3d:ed:96:90:53:0b:d8:c8:93:
00:97:68:c9:c0:6d:ee:64:4e:f8:82:ee:51:9e:ec:
13:86:d0:e5:31:f8:84:78:82:77:22:28:4a:25:5a:
fb:54:43:47:c2:b8:ce:5e:80:4a:5c:1f:a6:f8:32:
fc:87:bb:08:30:11:a3:d4:d0:d8:0b:2e:31:ff:72:
e3:2a:ff:59:35:81:bd:2b:86:fb:d5:84:95:45:da:
03:0a:2e:5a:b5:83:b4:b4:a2:14:2c:6b:a9:93:7c:
71:56:88:e0:e4:02:11:ba:37:64:d9:6c:ba:1c:3a:
61:58:35:8c:05:23:05:fe:25:dc:71:0a:ef:90:fd:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:A6:88:D2:86:55:1C:B9:44:B2:86:49:EC:02:A1:55:ED:C6:10
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ooemiNKGVRy5RLKGSewCoVXtxhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb0c::/48
2a01:488:bb1e::/48
Signature Algorithm: sha256WithRSAEncryption
27:04:c7:c0:54:10:27:6b:cd:06:8f:6e:fd:22:c5:28:cb:ca:
b7:31:b4:19:d0:90:1c:ad:0e:18:08:45:ce:4f:5f:84:df:29:
b2:4d:34:69:84:a3:1a:08:d8:86:be:ba:c7:7f:0a:3a:ad:a2:
f9:29:5b:57:52:2a:76:ee:dd:09:f7:af:3d:9c:60:e6:b1:07:
bf:4a:35:12:22:c4:20:a4:80:d4:69:0c:b5:fd:04:ac:38:95:
e9:bf:7c:c2:51:a2:d6:04:3f:ad:84:48:68:7b:fd:7c:0d:6e:
eb:a1:c4:8e:90:1d:59:10:72:5a:e0:7c:57:fb:c1:41:01:bb:
bc:00:1c:11:74:ab:45:35:d4:f4:9c:bc:bb:e8:89:c9:f9:67:
e9:44:5a:a9:cd:da:a9:94:94:07:91:a3:d8:d4:53:2c:24:2d:
91:89:23:9b:2a:15:b9:6a:1d:d1:7b:36:fb:c8:54:71:b9:32:
d2:4b:e5:79:7f:1f:37:c1:14:6b:dc:48:fb:19:99:70:66:c0:
ab:8f:31:c1:11:0a:42:5a:91:08:3e:96:90:0c:7b:b6:be:4e:
88:2e:ae:6f:f9:e6:a4:2c:ca:e1:46:aa:c7:2c:df:ca:58:25:
7e:e9:bd:68:d1:a5:4e:0a:e7:01:4d:96:b2:94:78:e1:de:84:
e6:dd:ee:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQntlODDbVfySahTG+Y3HfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwMTAyMTU1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjg3YTY4OGQyODY1NTFjYjk0NGIyODY0OWVjMDJhMTU1ZWRjNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPwF1G8bTXi/yuiNKe2ghCGnvhOh
rzOAkxgVOclh8gtEOWjCbIF8Sncv4GAvFWK76pxQQkOAGE0Oc0XLA2vks2JB7w68
nunSEvVKqsx4hcQCz9bYF5RGlYaCckSKzrE5Zay1j6IhqPXkwt622eyb94Dc+UV1
Opd7l3raTtc97ZaQUwvYyJMAl2jJwG3uZE74gu5RnuwThtDlMfiEeIJ3IihKJVr7
VENHwrjOXoBKXB+m+DL8h7sIMBGj1NDYCy4x/3LjKv9ZNYG9K4b71YSVRdoDCi5a
tYO0tKIULGupk3xxVojg5AIRujdk2Wy6HDphWDWMBSMF/iXccQrvkP32XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKKHpojShlUcuUSyhknsAqFV7cYQMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvb29lbWlOS0dWUnk1UkxLR1Nld0NvVlh0eGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgEEiLsM
AwcAKgEEiLseMA0GCSqGSIb3DQEBCwUAA4IBAQAnBMfAVBAna80Gj279IsUoy8q3
MbQZ0JAcrQ4YCEXOT1+E3ymyTTRphKMaCNiGvrrHfwo6raL5KVtXUip27t0J9689
nGDmsQe/SjUSIsQgpIDUaQy1/QSsOJXpv3zCUaLWBD+thEhoe/18DW7rocSOkB1Z
EHJa4HxX+8FBAbu8ABwRdKtFNdT0nLy76InJ+WfpRFqpzdqplJQHkaPY1FMsJC2R
iSObKhW5ah3Rezb7yFRxuTLSS+V5fx83wRRr3Ej7GZlwZsCrjzHBEQpCWpEIPpaQ
DHu2vk6ILq5v+eakLMrhRqrHLN/KWCV+6b1o0aVOCucBTZaylHjh3oTm3e7a
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:17 2025 by rpki-client