Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/m186KC31bgKlEMWGFAobzWCuMU0.roa
File: m186KC31bgKlEMWGFAobzWCuMU0.roa (raw, json)
Hash identifier: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=
Subject key identifier: 9B:5F:3A:28:2D:F5:6E:02:A5:10:C5:86:14:0A:1B:CD:60:AE:31:4D
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C17EF30821C93BC8F04D8E7CA878D
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/m186KC31bgKlEMWGFAobzWCuMU0.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 2a01:3e0:2003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:ef:30:82:1c:93:bc:8f:04:d8:e7:ca:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5f3a282df56e02a510c586140a1bcd60ae314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:41:df:63:db:74:b7:df:0b:b6:40:a8:d8:
4d:16:96:8c:06:60:d3:9c:71:2c:08:e6:5c:ac:02:
77:40:08:dd:ee:73:09:c3:f7:7c:1a:d6:b9:2b:bb:
1b:05:a8:b3:3f:e4:83:e9:27:7d:e9:80:63:df:75:
84:f4:38:0d:f4:44:a9:39:9c:59:06:a9:ce:89:95:
ed:d7:aa:59:c5:1f:aa:ce:51:1a:a0:23:21:ec:3a:
f7:dd:a6:92:13:6a:57:7a:04:d1:fb:11:02:40:d1:
e2:63:df:e0:71:ef:bd:ed:54:0b:38:48:63:8c:38:
6a:4f:5b:a7:96:c7:ba:0e:6e:45:94:8e:ed:57:12:
1e:c1:64:cf:a5:da:ad:f0:ef:36:a2:42:50:34:be:
f5:4f:76:68:a9:3c:83:bc:ec:0c:82:59:7f:57:aa:
d6:e7:9f:4a:ab:1d:67:30:ef:51:82:d8:70:35:02:
8a:e2:fb:7e:ae:0f:bf:5b:aa:c8:28:59:0b:05:6c:
0c:8b:bc:91:5a:18:e1:e2:be:9c:b4:c5:4e:74:8f:
98:01:2c:ba:87:fd:54:71:a4:57:df:5b:ee:0a:a6:
e7:a3:3b:8d:e7:b4:a8:ee:bc:64:ea:78:22:2a:6a:
0a:e6:79:c7:85:3c:1d:90:2e:f4:eb:8c:de:0b:02:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:3A:28:2D:F5:6E:02:A5:10:C5:86:14:0A:1B:CD:60:AE:31:4D
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/m186KC31bgKlEMWGFAobzWCuMU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:3e0:2003::/48
Signature Algorithm: sha256WithRSAEncryption
77:ec:4b:d0:c9:aa:1f:3f:98:84:29:ea:61:75:ca:5f:a2:45:
b6:89:5d:2e:a8:4f:d7:5a:04:91:80:e5:ec:af:1b:74:8b:3e:
74:88:65:6e:a3:31:6b:e8:0d:15:15:40:61:bf:8d:20:1f:8b:
d3:07:6e:a1:4c:09:da:1b:c2:41:6a:8c:0c:68:f9:b0:cb:ae:
45:b7:65:f6:57:fa:b8:db:d6:5b:1b:4e:e2:85:93:a4:55:20:
30:10:b2:91:ed:fb:53:cb:fd:8f:f6:d7:70:6e:ec:ff:56:a3:
61:72:cc:94:6b:a8:09:6a:69:05:8f:d8:ed:20:d7:13:d4:40:
18:49:7d:e6:90:6d:b2:4d:a1:e8:9b:3a:6e:cb:45:d2:f3:a5:
36:be:c4:97:70:0a:f7:13:ce:b4:9d:c7:85:64:a3:97:bf:c4:
ff:7d:9c:20:01:72:ee:17:bb:99:3e:32:22:32:49:07:bf:7e:
6a:a5:60:ba:49:ed:eb:54:bc:9a:10:3f:75:96:3a:22:83:93:
34:7e:69:b3:f4:9b:68:8b:b6:fa:11:14:a3:e4:71:a9:7a:db:
57:4e:47:9b:32:66:be:79:a5:23:52:5d:5b:f1:ee:43:7b:dd:
2b:ed:b1:d6:3f:c2:19:fd:31:c0:d4:e9:92:de:43:44:aa:a1:
5a:b9:b3:4a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQmbBfvMIIck7yPBNjnyoeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz
MTU4OGMwHhcNMjUwMTAyMDk1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjVmM2EyODJkZjU2ZTAyYTUxMGM1ODYxNDBhMWJjZDYwYWUzMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzglB32PbdLffC7ZAqNhNFpaMBmDT
nHEsCOZcrAJ3QAjd7nMJw/d8Gta5K7sbBaizP+SD6Sd96YBj33WE9DgN9ESpOZxZ
BqnOiZXt16pZxR+qzlEaoCMh7Dr33aaSE2pXegTR+xECQNHiY9/gce+97VQLOEhj
jDhqT1unlse6Dm5FlI7tVxIewWTPpdqt8O82okJQNL71T3ZoqTyDvOwMgll/V6rW
559Kqx1nMO9RgthwNQKK4vt+rg+/W6rIKFkLBWwMi7yRWhjh4r6ctMVOdI+YASy6
h/1UcaRX31vuCqbnozuN57So7rxk6ngiKmoK5nnHhTwdkC7064zeCwLQCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJtfOigt9W4CpRDFhhQKG81grjFNMB8GA1UdIwQY
MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt
ZGI0NjNjNWZiMGI0LzEvbTE4NktDMzFiZ0tsRU1XR0ZBb2J6V0N1TVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0
LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgED4CAD
MA0GCSqGSIb3DQEBCwUAA4IBAQB37EvQyaofP5iEKephdcpfokW2iV0uqE/XWgSR
gOXsrxt0iz50iGVuozFr6A0VFUBhv40gH4vTB26hTAnaG8JBaowMaPmwy65Ft2X2
V/q429ZbG07ihZOkVSAwELKR7ftTy/2P9tdwbuz/VqNhcsyUa6gJamkFj9jtINcT
1EAYSX3mkG2yTaHomzpuy0XS86U2vsSXcAr3E860nceFZKOXv8T/fZwgAXLuF7uZ
PjIiMkkHv35qpWC6Se3rVLyaED91ljoig5M0fmmz9Jtoi7b6ERSj5HGpettXTkeb
Mma+eaUjUl1b8e5De90r7bHWP8IZ/THA1OmS3kNEqqFaubNK
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:46 2025 by rpki-client