Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/olxf7ZsuzIbb2ywWmhByxe-xLw8.roa
File: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (raw, json)
Hash identifier: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=
Subject key identifier: A2:5C:5F:ED:9B:2E:CC:86:DB:DB:2C:16:9A:10:72:C5:EF:B1:2F:0F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DDEAB3DCC96E559B11D3BA0961FF
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/olxf7ZsuzIbb2ywWmhByxe-xLw8.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199676
IP address blocks: 2a0a:280:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dd:ea:b3:dc:c9:6e:55:9b:11:d3:ba:09:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25c5fed9b2ecc86dbdb2c169a1072c5efb12f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:d5:42:f7:44:7f:62:a6:51:f2:89:a2:4e:
ab:2b:db:14:af:92:89:c8:96:9a:ef:37:55:c7:02:
0d:a4:e6:f2:bb:0f:55:dd:fd:4d:60:ad:3b:04:45:
52:bc:09:e1:67:56:44:9e:da:87:4e:00:48:2f:84:
64:17:68:25:ae:80:c9:93:76:93:c3:40:06:17:9a:
d6:2c:e4:03:39:06:2b:22:de:6b:33:81:22:c0:7f:
fa:5e:7d:9f:14:f1:cc:f4:7e:82:6e:f7:f7:02:a1:
db:04:f5:db:18:89:62:a4:bb:96:a1:3e:05:32:d5:
d0:c8:48:47:ae:c8:be:83:44:c3:3b:00:6f:58:19:
3b:08:38:4a:54:eb:7c:51:38:e7:7e:1e:2c:6c:1b:
91:2f:60:8b:6c:70:99:82:7e:3d:fc:b7:78:f8:0f:
f4:a0:ef:2f:84:d4:2f:7e:7e:19:4c:31:a7:d8:4c:
76:43:01:0b:02:a7:d2:dc:d2:04:6f:3b:6c:47:cf:
21:24:6b:87:d6:e2:a0:ac:2e:28:1d:9d:13:73:b4:
0f:6d:c9:bd:1b:01:fc:68:fc:30:eb:dd:6c:b6:84:
1b:02:c5:c2:4a:4c:31:0f:fd:a3:4c:da:fc:74:ee:
c0:42:8e:53:f1:1a:c4:be:0b:2a:1f:44:02:93:42:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:5F:ED:9B:2E:CC:86:DB:DB:2C:16:9A:10:72:C5:EF:B1:2F:0F
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/olxf7ZsuzIbb2ywWmhByxe-xLw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2100::/40
Signature Algorithm: sha256WithRSAEncryption
4f:18:f5:e0:08:67:ce:76:62:78:1b:1b:da:f5:72:ac:64:0a:
ef:4a:df:32:bf:4e:fc:d5:d9:da:00:26:f5:66:97:24:3c:ba:
60:97:99:b7:81:04:2e:95:ae:9c:28:81:f8:8f:55:64:4d:df:
ab:ca:6b:40:ec:36:88:fc:63:9a:6d:ff:9e:f8:71:c2:d3:1b:
22:37:a3:af:35:42:c8:21:7f:9e:40:a2:11:20:7c:4c:86:75:
a8:d0:8f:f6:bc:3d:3a:ea:69:31:9c:f6:f0:94:ef:9d:b4:51:
19:ef:be:d5:f9:31:09:02:ad:3c:41:94:22:1f:77:c9:f9:35:
9f:7b:c6:32:0a:ff:c1:01:d0:5d:00:52:e8:a9:7f:7d:7c:3d:
a5:07:71:68:40:9e:11:82:d7:e7:25:81:26:d9:e3:a9:24:f0:
92:0b:9f:52:11:fb:b5:82:34:31:71:36:49:20:e0:3b:bc:78:
81:7f:d2:56:66:8d:8c:f1:06:9d:09:ba:a0:6e:e1:1d:b3:3f:
46:ae:79:f4:c0:97:94:c1:52:44:ab:44:d5:c4:b8:c5:4f:6d:
27:82:7c:70:e4:fd:b4:bd:22:e7:ad:86:e4:bf:39:74:af:36:
43:b0:76:50:fe:1a:f3:0b:cc:d3:cc:84:53:a1:c7:9b:c9:3c:
b3:fb:9e:e7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlId3qs9zJblWbEdO6CWH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjUwMTAyMDM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjVjNWZlZDliMmVjYzg2ZGJkYjJjMTY5YTEwNzJjNWVmYjEyZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eDVQvdEf2KmUfKJok6rK9sUr5KJ
yJaa7zdVxwINpObyuw9V3f1NYK07BEVSvAnhZ1ZEntqHTgBIL4RkF2glroDJk3aT
w0AGF5rWLOQDOQYrIt5rM4EiwH/6Xn2fFPHM9H6Cbvf3AqHbBPXbGIlipLuWoT4F
MtXQyEhHrsi+g0TDOwBvWBk7CDhKVOt8UTjnfh4sbBuRL2CLbHCZgn49/Ld4+A/0
oO8vhNQvfn4ZTDGn2Ex2QwELAqfS3NIEbztsR88hJGuH1uKgrC4oHZ0Tc7QPbcm9
GwH8aPww691stoQbAsXCSkwxD/2jTNr8dO7AQo5T8RrEvgsqH0QCk0Kc3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKJcX+2bLsyG29ssFpoQcsXvsS8PMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvb2x4Zjdac3V6SWJiMnl3V21oQnl4ZS14THc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCEw
DQYJKoZIhvcNAQELBQADggEBAE8Y9eAIZ852YngbG9r1cqxkCu9K3zK/TvzV2doA
JvVmlyQ8umCXmbeBBC6VrpwogfiPVWRN36vKa0DsNoj8Y5pt/574ccLTGyI3o681
Qsghf55AohEgfEyGdajQj/a8PTrqaTGc9vCU7520URnvvtX5MQkCrTxBlCIfd8n5
NZ97xjIK/8EB0F0AUuipf318PaUHcWhAnhGC1+clgSbZ46kk8JILn1IR+7WCNDFx
Nkkg4Du8eIF/0lZmjYzxBp0JuqBu4R2zP0auefTAl5TBUkSrRNXEuMVPbSeCfHDk
/bS9IuethuS/OXSvNkOwdlD+GvMLzNPMhFOhx5vJPLP7nuc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:06:20 2025 by rpki-client