Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1syvLvZNw4oAM-YcaPxmJP31bEQ.roa
File: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (raw, json)
Hash identifier: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=
Subject key identifier: D6:CC:AF:2E:F6:4D:C3:8A:00:33:E6:1C:68:FC:66:24:FD:F5:6C:44
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55C68659485A45A30C937089214BF
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1syvLvZNw4oAM-YcaPxmJP31bEQ.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199415
IP address blocks: 2a10:4646:121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:68:65:94:85:a4:5a:30:c9:37:08:92:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6ccaf2ef64dc38a0033e61c68fc6624fdf56c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:61:48:67:33:71:c1:e4:76:b0:a1:3e:84:
45:17:10:c8:75:81:2e:cc:97:db:5c:d0:29:37:6a:
f2:56:bc:fc:56:76:65:28:f0:18:b0:48:ce:29:58:
b0:24:5a:db:2e:00:cc:f8:29:8e:72:3c:51:9a:89:
a3:49:a2:34:23:c8:46:5d:db:4b:63:e9:4b:10:6b:
12:7b:8b:e7:81:7e:b5:b4:9e:4b:ce:de:90:14:1c:
4e:6c:cf:0c:81:05:10:7f:5a:b8:8f:64:7d:44:a5:
87:de:c3:10:ed:21:ed:e0:c9:9e:8c:de:6e:b0:c9:
ed:e7:b4:0c:0d:90:3a:52:d3:f3:34:63:4c:09:d7:
a9:3f:d3:13:c7:de:b1:62:13:4b:69:67:10:7b:33:
3e:ae:14:10:24:14:ad:40:d0:1f:28:9d:42:8d:ea:
01:44:97:2f:0f:44:a7:ec:72:6d:40:cf:59:b4:04:
57:1e:51:69:9a:c3:79:2d:15:ad:d9:dd:55:15:cc:
4a:e3:75:1d:ca:bd:40:54:77:7a:84:6e:15:6a:0f:
87:02:47:32:71:92:be:bf:b4:10:9d:c1:1d:2e:aa:
5c:e2:ed:09:f1:ec:d5:fd:47:1a:82:2a:46:74:17:
eb:af:f9:66:d0:ef:3d:ae:ee:43:0e:63:0d:f6:79:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:AF:2E:F6:4D:C3:8A:00:33:E6:1C:68:FC:66:24:FD:F5:6C:44
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1syvLvZNw4oAM-YcaPxmJP31bEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:121::/48
Signature Algorithm: sha256WithRSAEncryption
18:34:23:b9:14:dc:8e:81:04:09:65:52:6d:20:ad:40:de:71:
04:90:1e:a5:fd:66:db:b1:e4:b0:6d:02:2a:4a:69:26:96:fa:
a8:72:7f:06:1f:c7:fb:26:2d:3a:3a:a8:6c:74:bd:df:9c:c4:
40:da:7d:58:de:16:59:ee:3a:46:3c:95:b3:18:85:85:a9:6f:
7d:13:f5:2d:78:a6:e7:9b:0c:73:ad:cc:9c:d5:74:9a:70:64:
a7:59:f5:ba:5a:6a:25:b3:83:37:05:3b:71:61:e3:34:a1:87:
4d:45:96:72:fb:71:8c:2d:d7:20:7d:29:a3:df:21:93:21:d7:
2c:ab:20:a0:4d:66:b5:b4:82:6a:bc:38:b5:b9:ea:9a:f0:be:
de:e0:e8:39:ce:1c:a5:c8:00:be:bd:fd:78:db:38:ba:87:76:
94:63:88:b3:8e:08:09:7d:26:80:fb:22:38:cd:72:02:49:18:
f6:3c:82:95:d7:ed:d4:9a:13:f4:97:55:f2:69:26:ca:bc:b8:
06:8e:d8:a9:e1:ce:61:b4:3b:69:d9:05:8f:db:a1:59:bd:95:
36:46:57:ec:83:8a:69:fa:48:66:b8:4f:72:aa:03:6b:3c:06:
06:80:c1:e5:8e:be:69:f1:27:96:ea:6d:9e:40:6e:49:25:c0:
3d:72:fb:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntVxoZZSFpFowyTcIkhS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjUwMTAyMTU0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmNjYWYyZWY2NGRjMzhhMDAzM2U2MWM2OGZjNjYyNGZkZjU2YzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYthSGczccHkdrChPoRFFxDIdYEu
zJfbXNApN2ryVrz8VnZlKPAYsEjOKViwJFrbLgDM+CmOcjxRmomjSaI0I8hGXdtL
Y+lLEGsSe4vngX61tJ5Lzt6QFBxObM8MgQUQf1q4j2R9RKWH3sMQ7SHt4MmejN5u
sMnt57QMDZA6UtPzNGNMCdepP9MTx96xYhNLaWcQezM+rhQQJBStQNAfKJ1CjeoB
RJcvD0Sn7HJtQM9ZtARXHlFpmsN5LRWt2d1VFcxK43Udyr1AVHd6hG4Vag+HAkcy
cZK+v7QQncEdLqpc4u0J8ezV/UcagipGdBfrr/lm0O89ru5DDmMN9nlR9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNbMry72TcOKADPmHGj8ZiT99WxEMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvMXN5dkx2Wk53NG9BTS1ZY2FQeG1KUDMxYkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgEh
MA0GCSqGSIb3DQEBCwUAA4IBAQAYNCO5FNyOgQQJZVJtIK1A3nEEkB6l/WbbseSw
bQIqSmkmlvqocn8GH8f7Ji06OqhsdL3fnMRA2n1Y3hZZ7jpGPJWzGIWFqW99E/Ut
eKbnmwxzrcyc1XSacGSnWfW6Wmols4M3BTtxYeM0oYdNRZZy+3GMLdcgfSmj3yGT
IdcsqyCgTWa1tIJqvDi1ueqa8L7e4Og5zhylyAC+vf142zi6h3aUY4izjggJfSaA
+yI4zXICSRj2PIKV1+3UmhP0l1XyaSbKvLgGjtip4c5htDtp2QWP26FZvZU2Rlfs
g4pp+khmuE9yqgNrPAYGgMHljr5p8SeW6m2eQG5JJcA9cvt+
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:20 2025 by rpki-client