Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa
File: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (raw, json)
Hash identifier: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=
Subject key identifier: 97:98:77:A9:23:CD:D9:BE:9F:30:4F:17:58:6A:B1:9F:92:1E:E6:D3
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55A7F68FA513E6047EFC1DC43DAFD
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198596
IP address blocks: 2a10:4646:320::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:7f:68:fa:51:3e:60:47:ef:c1:dc:43:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=979877a923cdd9be9f304f17586ab19f921ee6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:3b:d2:ad:a3:bb:08:01:ee:2d:fc:19:08:
0b:d9:32:a3:ea:3a:c7:2f:5b:c8:21:95:42:10:c8:
a5:7e:29:2c:c5:99:77:6e:7e:b8:ad:f9:e3:f9:1d:
8b:d5:c7:bd:6e:07:48:aa:ef:63:d5:0d:e3:a5:7d:
cf:e1:85:1a:a2:bb:64:32:a1:52:c0:d9:0a:05:fe:
72:99:00:5b:aa:e0:76:fa:79:f9:3c:5c:27:65:ca:
ab:6d:fb:bd:23:95:10:86:0e:f5:8d:c3:93:43:1d:
13:d5:80:37:08:b1:3d:1f:7c:ce:68:c5:12:91:c4:
c4:5e:45:90:38:7a:d1:be:cf:91:6f:20:0b:e1:3b:
1b:fc:bf:0e:9d:75:8d:47:ce:2a:97:7e:7f:ee:aa:
76:a5:86:fc:57:10:32:39:c4:53:15:ea:79:24:d8:
25:2a:33:5f:cd:b1:b4:e6:44:33:91:9e:c6:11:76:
6b:20:94:88:3e:f7:41:46:43:0a:00:6b:90:94:49:
a7:f6:d0:6c:ca:be:95:a9:4f:84:c7:bf:22:bc:2f:
e3:b3:57:78:1c:db:f8:de:da:c2:d9:9c:12:fe:d3:
d0:60:51:57:db:b6:f3:d1:18:63:30:9a:ae:84:97:
0e:9e:93:c7:0a:c2:10:8a:93:84:14:23:fd:f4:6e:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:77:A9:23:CD:D9:BE:9F:30:4F:17:58:6A:B1:9F:92:1E:E6:D3
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:320::/44
Signature Algorithm: sha256WithRSAEncryption
c1:be:55:e1:34:fe:26:a4:81:78:ae:80:fe:1a:2b:90:72:fc:
8d:f0:09:48:8c:dd:2c:c9:47:fa:b3:9b:c8:83:7f:61:d0:6a:
34:26:31:9f:90:41:47:18:8b:d2:f4:6a:91:d0:a8:89:da:3b:
8e:cf:63:bc:eb:fd:53:b2:58:0e:aa:4f:0d:e4:1c:31:50:b8:
71:30:cd:3f:69:bd:74:ac:61:9f:8a:c4:8c:01:38:d6:49:68:
a2:44:e7:2a:41:32:b4:2b:1d:69:d2:e2:9e:77:3a:fa:d3:38:
b1:21:66:37:58:77:e0:87:4f:1f:d7:9b:7e:c7:81:eb:69:23:
84:df:75:ef:6d:fb:7c:c3:76:df:4e:2f:03:ad:d7:fd:ba:11:
92:50:73:86:00:45:73:63:81:93:0e:76:36:6a:ba:c0:0a:f9:
fa:7e:8a:f0:3e:77:09:20:a5:b6:71:b6:96:dd:b0:a8:ca:31:
88:6f:f9:31:f4:b0:fe:05:ec:87:18:0a:4a:09:51:2b:ea:a9:
55:aa:9a:57:56:21:ae:fb:4c:30:fd:09:80:f4:90:bb:f8:79:
dd:78:ba:da:52:33:b1:03:e4:27:8f:c4:01:bb:9f:2b:41:5c:
64:ba:40:b9:68:62:23:09:57:2e:57:c1:52:cf:52:a6:c7:94:
2b:8d:f9:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntVp/aPpRPmBH78HcQ9r9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjUwMTAyMTU0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzk4NzdhOTIzY2RkOWJlOWYzMDRmMTc1ODZhYjE5ZjkyMWVlNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J070q2juwgB7i38GQgL2TKj6jrH
L1vIIZVCEMilfiksxZl3bn64rfnj+R2L1ce9bgdIqu9j1Q3jpX3P4YUaortkMqFS
wNkKBf5ymQBbquB2+nn5PFwnZcqrbfu9I5UQhg71jcOTQx0T1YA3CLE9H3zOaMUS
kcTEXkWQOHrRvs+RbyAL4Tsb/L8OnXWNR84ql35/7qp2pYb8VxAyOcRTFep5JNgl
KjNfzbG05kQzkZ7GEXZrIJSIPvdBRkMKAGuQlEmn9tBsyr6VqU+Ex78ivC/js1d4
HNv43trC2ZwS/tPQYFFX27bz0RhjMJquhJcOnpPHCsIQipOEFCP99G5+pwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJeYd6kjzdm+nzBPF1hqsZ+SHubTMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvbDVoM3FTUE4yYjZmTUU4WFdHcXhuNUllNXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgMg
MA0GCSqGSIb3DQEBCwUAA4IBAQDBvlXhNP4mpIF4roD+GiuQcvyN8AlIjN0syUf6
s5vIg39h0Go0JjGfkEFHGIvS9GqR0KiJ2juOz2O86/1TslgOqk8N5BwxULhxMM0/
ab10rGGfisSMATjWSWiiROcqQTK0Kx1p0uKedzr60zixIWY3WHfgh08f15t+x4Hr
aSOE33Xvbft8w3bfTi8Drdf9uhGSUHOGAEVzY4GTDnY2arrACvn6forwPncJIKW2
cbaW3bCoyjGIb/kx9LD+BeyHGApKCVEr6qlVqppXViGu+0ww/QmA9JC7+HndeLra
UjOxA+Qnj8QBu58rQVxkukC5aGIjCVcuV8FSz1Kmx5Qrjflu
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:31:32 2025 by rpki-client