Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2k-SCEYrG2EDmCgjJ8QHRXQuS54.roa
File: 2k-SCEYrG2EDmCgjJ8QHRXQuS54.roa (raw, json)
Hash identifier: ZliHuX9fl0TrB+jDacNRDh43k9mXZLeDlPr01hR5CQs=
Subject key identifier: DA:4F:92:08:46:2B:1B:61:03:98:28:23:27:C4:07:45:74:2E:4B:9E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204173C5006CBFF4CD5D4554434908
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2k-SCEYrG2EDmCgjJ8QHRXQuS54.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212154
IP address blocks: 2a0e:8f02:f047::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:41:73:c5:00:6c:bf:f4:cd:5d:45:54:43:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da4f9208462b1b610398282327c40745742e4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:79:ea:29:79:f3:50:05:25:ff:49:a4:81:
3b:ea:35:b8:43:5b:9f:8b:7b:06:6a:58:52:43:bd:
9c:cf:2a:8d:69:44:8b:ab:f8:26:75:5f:ab:fe:f2:
ec:7c:9f:d8:65:9e:bc:aa:80:fc:f4:fe:69:67:da:
95:b4:73:f6:4c:8a:a7:0b:8f:c9:3d:a1:5b:ca:6a:
80:af:9b:2f:c6:d6:d2:4d:00:33:93:03:71:fc:0d:
a7:68:cb:b5:3a:a0:78:96:ed:81:08:18:7a:38:2b:
db:ab:c8:b4:f5:e3:e5:7a:f3:32:0f:82:3e:8e:44:
4d:d1:92:b9:a6:8c:03:7a:30:7f:9d:f7:47:98:e7:
40:cf:b7:3e:4c:ec:87:eb:1a:1b:9d:2a:70:8f:06:
c6:c3:47:b6:fb:59:88:38:26:d2:ac:6a:2d:04:eb:
9d:5e:9a:2e:fa:38:73:b5:fe:11:ee:e8:b6:86:37:
76:a2:a5:4e:6e:fa:c4:75:64:9b:89:47:a0:94:1e:
65:80:a1:09:bf:78:34:4d:cf:17:d7:a7:75:45:48:
e1:33:71:68:fb:8d:7f:06:5a:ac:fe:96:bc:cb:93:
8c:76:61:ce:3d:c8:64:f7:1c:9d:b2:40:d4:e4:66:
c3:8a:a1:33:05:0d:a5:40:60:7d:e5:07:3a:ce:5b:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:92:08:46:2B:1B:61:03:98:28:23:27:C4:07:45:74:2E:4B:9E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2k-SCEYrG2EDmCgjJ8QHRXQuS54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f047::/48
Signature Algorithm: sha256WithRSAEncryption
42:59:07:c8:f9:1a:22:be:27:07:47:fa:df:55:5e:95:8a:a2:
f7:b4:87:52:aa:10:d0:78:34:d9:c6:cc:09:22:83:f4:11:5c:
53:89:0d:61:b8:35:13:bd:51:d5:7d:c7:0f:bf:85:92:ac:8d:
0d:2f:c5:28:14:fc:23:55:53:97:74:96:8d:c7:81:01:42:30:
88:90:10:b0:94:50:60:c3:86:96:66:c4:34:05:b3:dd:51:83:
74:0e:8a:88:94:a9:4d:71:44:bd:ef:87:09:c8:c0:77:e2:df:
3f:ba:36:f7:bf:ad:d0:ca:03:d1:50:d1:c9:81:1e:33:07:47:
d8:ca:82:6f:1a:1c:f4:47:42:72:fa:83:38:8c:48:00:dd:3a:
05:3d:6f:78:62:e3:5c:d8:95:c3:a6:c5:a0:c5:9e:80:89:b6:
9f:ce:65:c1:0f:36:08:4f:37:dc:9c:38:7f:8f:09:00:2f:6e:
ea:2e:0c:4b:cf:d4:1e:16:92:14:e5:3a:e0:5e:88:ce:b0:f6:
17:e5:7c:a5:8f:5d:45:d4:c2:4e:27:42:24:87:6b:92:43:c0:
76:88:e8:35:3c:d6:97:66:49:4b:37:6e:34:14:c7:c6:3e:79:
68:6f:5f:9a:b6:a3:e2:95:21:2f:5a:d2:37:42:fe:9a:5c:2b:
e2:00:c3:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIEFzxQBsv/TNXUVUQ0kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTRmOTIwODQ2MmIxYjYxMDM5ODI4MjMyN2M0MDc0NTc0MmU0YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9h56il581AFJf9JpIE76jW4Q1uf
i3sGalhSQ72czyqNaUSLq/gmdV+r/vLsfJ/YZZ68qoD89P5pZ9qVtHP2TIqnC4/J
PaFbymqAr5svxtbSTQAzkwNx/A2naMu1OqB4lu2BCBh6OCvbq8i09ePlevMyD4I+
jkRN0ZK5powDejB/nfdHmOdAz7c+TOyH6xobnSpwjwbGw0e2+1mIOCbSrGotBOud
Xpou+jhztf4R7ui2hjd2oqVObvrEdWSbiUeglB5lgKEJv3g0Tc8X16d1RUjhM3Fo
+41/Blqs/pa8y5OMdmHOPchk9xydskDU5GbDiqEzBQ2lQGB95Qc6zlsBxwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNpPkghGKxthA5goIyfEB0V0LkueMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvMmstU0NFWXJHMkVEbUNnako4UUhSWFF1UzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBH
MA0GCSqGSIb3DQEBCwUAA4IBAQBCWQfI+RoivicHR/rfVV6ViqL3tIdSqhDQeDTZ
xswJIoP0EVxTiQ1huDUTvVHVfccPv4WSrI0NL8UoFPwjVVOXdJaNx4EBQjCIkBCw
lFBgw4aWZsQ0BbPdUYN0DoqIlKlNcUS974cJyMB34t8/ujb3v63QygPRUNHJgR4z
B0fYyoJvGhz0R0Jy+oM4jEgA3ToFPW94YuNc2JXDpsWgxZ6AibafzmXBDzYITzfc
nDh/jwkAL27qLgxLz9QeFpIU5TrgXojOsPYX5Xylj11F1MJOJ0Ikh2uSQ8B2iOg1
PNaXZklLN240FMfGPnlob1+atqPilSEvWtI3Qv6aXCviAMN4
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:47 2025 by rpki-client