Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7LCB7Igh3_RfperC0FtExgSW4rE.roa
File: 7LCB7Igh3_RfperC0FtExgSW4rE.roa (raw, json)
Hash identifier: 4hIP/bkpOqYCrAtzpX3uqHxnB2PY/ciUlJqBlVW7aRw=
Subject key identifier: EC:B0:81:EC:88:21:DF:F4:5F:A5:EA:C2:D0:5B:44:C6:04:96:E2:B1
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222032562464AC233B44290D6693B802
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7LCB7Igh3_RfperC0FtExgSW4rE.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205441
IP address blocks: 2a0e:8f02:21b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:56:24:64:ac:23:3b:44:29:0d:66:93:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb081ec8821dff45fa5eac2d05b44c60496e2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:da:0c:10:1e:a9:79:99:50:06:ab:33:14:
f2:fe:26:f3:95:0b:fa:82:89:a4:36:cf:ed:8d:21:
82:4e:30:5e:6d:6b:0a:27:78:80:fd:5a:ba:61:8f:
08:c9:47:56:3f:eb:f7:3a:c1:00:26:ad:8c:b2:b5:
ba:0e:f5:a3:2f:b2:85:2f:34:11:26:cb:74:88:dc:
ff:67:af:1e:d2:e0:9a:4d:84:45:e9:ac:b5:2d:3b:
8d:34:06:87:a9:77:8b:db:a2:fb:31:4e:50:65:8f:
1d:d7:f5:23:84:77:a7:95:57:54:a0:1e:56:29:f4:
72:80:e4:84:2d:f8:ba:a2:1b:f4:30:51:04:ed:ff:
db:9c:b3:65:25:83:f9:f5:4f:1f:63:3c:3d:4e:bd:
8f:83:05:8e:5b:7b:a7:50:01:19:6c:f1:c9:68:6a:
84:b4:a4:d3:dc:fc:9d:6e:00:a9:ce:4f:17:f8:1a:
18:90:16:6c:3c:3f:77:41:fd:74:27:ca:3c:97:22:
ef:c9:70:17:5c:67:bf:bd:06:3c:a9:70:3f:af:f2:
7c:7c:f1:e7:5a:43:7f:30:b6:23:59:fc:77:69:99:
96:c0:26:32:32:69:fa:7d:16:d5:ce:37:04:67:9d:
59:43:dd:fb:99:2e:e5:de:56:0b:d7:b9:a0:1f:b8:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:81:EC:88:21:DF:F4:5F:A5:EA:C2:D0:5B:44:C6:04:96:E2:B1
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7LCB7Igh3_RfperC0FtExgSW4rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21b0::/44
Signature Algorithm: sha256WithRSAEncryption
34:f7:af:40:6a:ad:6e:c2:91:ed:de:81:48:b8:d9:21:aa:86:
8f:a7:ea:fa:a2:11:cb:70:4e:ad:d3:06:42:7a:00:60:70:a7:
52:1d:11:26:a1:2d:24:7c:19:e4:28:6e:eb:de:47:d4:9d:63:
13:e4:9d:c3:e3:ab:57:52:12:66:58:3b:52:43:0b:84:b0:d9:
59:8e:b2:1c:b2:49:ae:dd:63:c7:17:cc:ee:73:8d:a1:98:f4:
f3:2b:6c:fa:3d:3a:22:e3:91:c4:31:53:40:de:e4:10:03:6f:
35:6a:9d:ce:d8:72:a9:be:24:b6:fc:a0:b9:a4:b1:4d:4e:c6:
cd:5e:5b:c3:5a:81:4c:d9:af:7d:cf:94:fe:31:b7:56:67:37:
5c:fa:7d:85:a8:26:60:82:48:15:70:df:c5:ce:f4:ff:56:f6:
1c:8d:2c:0d:ea:04:07:ad:6e:9e:33:4f:5e:d6:ad:54:df:83:
09:55:72:58:44:a8:e5:4e:45:fb:38:32:46:61:a5:cc:47:61:
8d:67:64:f5:46:55:03:9c:cd:41:7d:14:5f:f8:64:07:da:e0:
6f:0e:d1:7f:73:18:57:23:a7:e3:d5:d4:f4:21:81:b7:e4:2e:
e0:42:ef:bd:4e:c7:9e:1c:e6:89:71:a8:b7:b2:84:ba:d5:cf:
f5:59:cd:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIDJWJGSsIztEKQ1mk7gCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2IwODFlYzg4MjFkZmY0NWZhNWVhYzJkMDViNDRjNjA0OTZlMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAnaDBAeqXmZUAarMxTy/ibzlQv6
gomkNs/tjSGCTjBebWsKJ3iA/Vq6YY8IyUdWP+v3OsEAJq2MsrW6DvWjL7KFLzQR
Jst0iNz/Z68e0uCaTYRF6ay1LTuNNAaHqXeL26L7MU5QZY8d1/UjhHenlVdUoB5W
KfRygOSELfi6ohv0MFEE7f/bnLNlJYP59U8fYzw9Tr2PgwWOW3unUAEZbPHJaGqE
tKTT3PydbgCpzk8X+BoYkBZsPD93Qf10J8o8lyLvyXAXXGe/vQY8qXA/r/J8fPHn
WkN/MLYjWfx3aZmWwCYyMmn6fRbVzjcEZ51ZQ937mS7l3lYL17mgH7gWNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOywgeyIId/0X6XqwtBbRMYEluKxMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvN0xDQjdJZ2gzX1JmcGVyQzBGdEV4Z1NXNHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiGw
MA0GCSqGSIb3DQEBCwUAA4IBAQA0969Aaq1uwpHt3oFIuNkhqoaPp+r6ohHLcE6t
0wZCegBgcKdSHREmoS0kfBnkKG7r3kfUnWMT5J3D46tXUhJmWDtSQwuEsNlZjrIc
skmu3WPHF8zuc42hmPTzK2z6PToi45HEMVNA3uQQA281ap3O2HKpviS2/KC5pLFN
TsbNXlvDWoFM2a99z5T+MbdWZzdc+n2FqCZggkgVcN/FzvT/VvYcjSwN6gQHrW6e
M09e1q1U34MJVXJYRKjlTkX7ODJGYaXMR2GNZ2T1RlUDnM1BfRRf+GQH2uBvDtF/
cxhXI6fj1dT0IYG35C7gQu+9TseeHOaJcai3soS61c/1Wc3Y
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:40 2025 by rpki-client