Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WCelWbxY_ryT25IoQyob9TjveSo.roa
File: WCelWbxY_ryT25IoQyob9TjveSo.roa (raw, json)
Hash identifier: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=
Subject key identifier: 58:27:A5:59:BC:58:FE:BC:93:DB:92:28:43:2A:1B:F5:38:EF:79:2A
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B56A5179549477A66B7D3CE3D5859C
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WCelWbxY_ryT25IoQyob9TjveSo.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216308
IP address blocks: 2a10:4646:390::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6a:51:79:54:94:77:a6:6b:7d:3c:e3:d5:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5827a559bc58febc93db9228432a1bf538ef792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:7f:fc:bf:c2:f3:31:5a:9c:2f:0f:f1:c8:
36:44:58:07:28:09:0d:53:01:ee:e5:5f:c9:55:13:
ae:d9:5c:26:a0:82:39:ad:31:7b:b0:9a:f8:ea:ff:
75:95:e0:75:21:c5:6c:c4:fc:3c:90:51:08:0c:fe:
d2:41:a0:1b:3f:1b:28:d4:fd:3c:a2:8a:ed:9c:44:
ff:10:88:fa:c0:cd:4e:ad:dd:45:6f:d4:9b:a1:b6:
86:ea:bd:69:c1:fa:e0:3d:50:6d:c5:af:8f:25:55:
0d:01:af:d3:3c:06:08:eb:b7:7a:9d:1e:b2:cf:47:
32:99:4c:17:81:90:70:19:ee:56:57:a0:7c:df:4b:
86:4d:e1:4c:46:d2:11:f9:b5:fe:ca:87:82:88:41:
ae:a8:0a:ab:d1:87:a8:1c:13:71:49:ef:52:bd:4d:
c8:0b:06:e0:b9:27:3b:54:d9:cd:fb:e5:1d:fe:b3:
ad:db:a8:28:f4:bc:b4:c6:2b:1d:23:0c:09:e4:32:
50:96:4c:7f:7b:43:5b:91:a9:b0:79:a8:c0:7e:77:
b2:e8:d3:86:47:09:94:4b:8e:5a:cc:33:ca:d6:ce:
44:61:61:20:12:3f:94:e8:76:60:f9:0f:74:7d:b6:
94:f9:b9:df:11:5a:f1:6d:7f:d3:ab:0d:c9:2d:e2:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:A5:59:BC:58:FE:BC:93:DB:92:28:43:2A:1B:F5:38:EF:79:2A
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WCelWbxY_ryT25IoQyob9TjveSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:390::/44
Signature Algorithm: sha256WithRSAEncryption
2f:eb:99:16:bd:81:be:02:07:dc:39:69:4a:f2:10:89:8f:b2:
63:55:39:79:f3:66:28:59:f2:dc:70:98:db:df:e8:0d:24:74:
69:fe:6e:25:2a:bc:e7:40:d9:c8:00:a3:04:e8:80:bd:a7:bf:
cc:6b:f0:9e:59:1c:c5:10:92:a5:52:12:2e:81:c2:8d:17:fe:
4f:7b:5a:74:c3:73:6f:36:1a:9a:5c:f7:fc:6a:30:9a:4e:3a:
9a:79:8d:fd:87:51:00:32:8e:87:e7:1e:ac:7c:52:e7:56:83:
4c:99:37:ab:af:af:e6:30:64:4c:00:4f:7d:46:0e:7d:2e:83:
be:4a:22:4c:15:b1:97:ee:d2:3b:f0:ab:12:dc:d1:00:e3:6c:
00:e5:37:f8:e4:f7:c7:a4:65:1b:59:7d:73:96:bc:3e:c7:63:
b2:48:fe:91:6c:35:7f:a6:cf:23:25:88:e0:05:18:7d:13:d9:
7c:c3:14:f9:cc:a6:9d:41:d7:f6:d5:b3:6c:b4:d7:2f:e6:08:
93:a9:a6:e6:3b:7e:e3:56:cc:b0:ab:21:0b:2d:c8:c3:6e:1c:
11:1e:5a:ed:ba:66:53:45:bb:19:52:1f:f5:d2:02:50:72:d8:
15:70:2d:b8:4c:bc:9a:8f:08:9c:72:f9:5d:89:dc:26:82:e2:
64:d2:41:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntWpReVSUd6ZrfTzj1YWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjUwMTAyMTU0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODI3YTU1OWJjNThmZWJjOTNkYjkyMjg0MzJhMWJmNTM4ZWY3OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6N//L/C8zFanC8P8cg2RFgHKAkN
UwHu5V/JVROu2VwmoII5rTF7sJr46v91leB1IcVsxPw8kFEIDP7SQaAbPxso1P08
oortnET/EIj6wM1Ord1Fb9SbobaG6r1pwfrgPVBtxa+PJVUNAa/TPAYI67d6nR6y
z0cymUwXgZBwGe5WV6B830uGTeFMRtIR+bX+yoeCiEGuqAqr0YeoHBNxSe9SvU3I
CwbguSc7VNnN++Ud/rOt26go9Ly0xisdIwwJ5DJQlkx/e0NbkamweajAfney6NOG
RwmUS45azDPK1s5EYWEgEj+U6HZg+Q90fbaU+bnfEVrxbX/Tqw3JLeKyYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFgnpVm8WP68k9uSKEMqG/U473kqMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvV0NlbFdieFlfcnlUMjVJb1F5b2I5VGp2ZVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAv65kWvYG+AgfcOWlK8hCJj7JjVTl582YoWfLc
cJjb3+gNJHRp/m4lKrznQNnIAKME6IC9p7/Ma/CeWRzFEJKlUhIugcKNF/5Pe1p0
w3NvNhqaXPf8ajCaTjqaeY39h1EAMo6H5x6sfFLnVoNMmTerr6/mMGRMAE99Rg59
LoO+SiJMFbGX7tI78KsS3NEA42wA5Tf45PfHpGUbWX1zlrw+x2OySP6RbDV/ps8j
JYjgBRh9E9l8wxT5zKadQdf21bNstNcv5giTqabmO37jVsywqyELLcjDbhwRHlrt
umZTRbsZUh/10gJQctgVcC24TLyajwiccvldidwmguJk0kHn
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:00:26 2025 by rpki-client