Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa
File: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (raw, json)
Hash identifier: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=
Subject key identifier: F4:E1:5F:98:88:8E:4C:7C:C8:F0:02:8B:D8:AE:A4:27:B9:DB:D7:B3
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DF2C07BF4311E8A6AF08A5941EDD
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200240
IP address blocks: 2a0a:280:3200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:2c:07:bf:43:11:e8:a6:af:08:a5:94:1e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e15f98888e4c7cc8f0028bd8aea427b9dbd7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:b2:18:21:4a:39:78:95:b2:50:e7:51:f6:
c9:2f:65:f7:9d:b1:a4:a2:cd:ef:41:f9:99:05:56:
ab:df:9a:96:ba:c5:f6:25:41:fc:ec:7a:1a:20:f6:
e0:f9:fb:35:d4:73:91:fc:26:27:34:2a:3a:25:eb:
0b:d5:55:df:cd:69:e2:60:07:33:20:cb:21:14:f8:
f8:42:e7:f5:c2:e8:99:14:5c:0e:db:56:61:80:8b:
46:5d:a2:cb:bf:2c:f1:f4:9f:66:03:cf:0d:cc:89:
5d:20:ee:67:ac:f7:5f:f7:d8:87:ec:fe:f7:38:23:
a5:d2:d3:68:a5:72:8d:ba:ea:99:ef:19:c4:ca:d4:
33:c0:83:32:31:2c:44:df:6b:8d:f7:ff:99:77:93:
85:51:24:25:b8:a5:b8:e6:fe:b6:b3:11:c8:8b:e3:
73:1c:88:d5:17:7c:ae:b0:db:25:fe:be:1c:a1:be:
71:bb:a7:dc:38:31:a7:56:03:50:ed:fe:ef:d8:7e:
7f:cb:57:b3:8a:82:a1:b5:a1:a0:e6:62:5d:73:79:
ca:d4:ac:3d:de:30:c2:7e:d9:4c:51:d8:6a:34:89:
45:25:f5:55:0e:06:74:29:25:cd:61:7c:d1:e0:bb:
83:e0:b9:35:84:f3:c9:06:16:ce:01:57:e2:90:47:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:5F:98:88:8E:4C:7C:C8:F0:02:8B:D8:AE:A4:27:B9:DB:D7:B3
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3200::/40
Signature Algorithm: sha256WithRSAEncryption
32:95:ff:7a:30:b2:ad:84:5f:04:f7:09:11:ee:b9:6d:7a:11:
7f:fc:9e:5c:47:1b:7d:c8:74:e8:f1:f5:94:54:af:4a:6d:c9:
b7:da:db:12:51:8f:3b:dc:6a:ab:03:70:ec:0e:a0:c2:61:05:
45:b4:a0:9c:33:8a:cb:b6:bd:45:c8:dc:15:80:c9:6a:f2:5f:
38:ee:17:db:7c:7a:4c:0f:e1:de:de:9a:75:82:fa:9f:22:4f:
8e:65:8a:cf:5d:5f:31:e1:40:49:b4:87:ef:53:9f:00:03:cc:
52:52:38:f2:b0:61:e2:29:fe:f7:61:ac:39:ae:93:53:2a:3c:
f6:8c:30:49:c1:f0:21:0d:c3:2e:f4:d6:8d:6b:a1:f3:0b:7e:
86:c5:d0:91:62:96:db:40:09:e4:7f:b3:a9:88:1b:5c:93:d8:
6b:e4:38:f9:d0:f2:be:90:68:52:87:e6:d2:31:42:60:53:1b:
7e:aa:11:61:c6:ff:ee:fb:a6:ee:d2:13:b7:20:8b:76:e7:42:
89:05:35:9a:d3:94:09:5f:8e:14:34:26:62:d5:27:f5:e5:e9:
a2:a3:52:8c:75:67:7d:35:27:2f:58:7a:b9:fe:1a:9e:37:df:
a4:d6:e0:d9:e9:d2:44:6d:46:13:8b:ee:c4:98:16:81:a3:f2:
91:72:0a:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlId8sB79DEeimrwillB7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjUwMTAyMDM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGUxNWY5ODg4OGU0YzdjYzhmMDAyOGJkOGFlYTQyN2I5ZGJkN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPmyGCFKOXiVslDnUfbJL2X3nbGk
os3vQfmZBVar35qWusX2JUH87HoaIPbg+fs11HOR/CYnNCo6JesL1VXfzWniYAcz
IMshFPj4Quf1wuiZFFwO21ZhgItGXaLLvyzx9J9mA88NzIldIO5nrPdf99iH7P73
OCOl0tNopXKNuuqZ7xnEytQzwIMyMSxE32uN9/+Zd5OFUSQluKW45v62sxHIi+Nz
HIjVF3yusNsl/r4cob5xu6fcODGnVgNQ7f7v2H5/y1ezioKhtaGg5mJdc3nK1Kw9
3jDCftlMUdhqNIlFJfVVDgZ0KSXNYXzR4LuD4Lk1hPPJBhbOAVfikEfY6wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPThX5iIjkx8yPACi9iupCe529ezMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvOU9GZm1JaU9USHpJOEFLTDJLNmtKN25iMTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgDIw
DQYJKoZIhvcNAQELBQADggEBADKV/3owsq2EXwT3CRHuuW16EX/8nlxHG33IdOjx
9ZRUr0ptybfa2xJRjzvcaqsDcOwOoMJhBUW0oJwzisu2vUXI3BWAyWryXzjuF9t8
ekwP4d7emnWC+p8iT45lis9dXzHhQEm0h+9TnwADzFJSOPKwYeIp/vdhrDmuk1Mq
PPaMMEnB8CENwy701o1rofMLfobF0JFilttACeR/s6mIG1yT2GvkOPnQ8r6QaFKH
5tIxQmBTG36qEWHG/+77pu7SE7cgi3bnQokFNZrTlAlfjhQ0JmLVJ/Xl6aKjUox1
Z301Jy9Yern+Gp4336TW4Nnp0kRtRhOL7sSYFoGj8pFyCuE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:29 2025 by rpki-client