Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CODh7lCtXPX6fZdx0AW7IKHA_dM.roa
File: CODh7lCtXPX6fZdx0AW7IKHA_dM.roa (raw, json)
Hash identifier: XalY9xYk9J2Ban6cmRWTVmIyYdZ3q/JG8O1V3EPNutw=
Subject key identifier: 08:E0:E1:EE:50:AD:5C:F5:FA:7D:97:71:D0:05:BB:20:A1:C0:FD:D3
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203775231FA6938618D3D6AC3835AB
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CODh7lCtXPX6fZdx0AW7IKHA_dM.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210826
IP address blocks: 2a0e:8f02:f039::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:75:23:1f:a6:93:86:18:d3:d6:ac:38:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e0e1ee50ad5cf5fa7d9771d005bb20a1c0fdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:86:9a:39:64:66:0e:76:07:bb:29:75:3e:10:
70:93:fc:cd:43:94:e3:d5:e9:5c:38:1f:05:0c:9a:
c9:f5:b5:58:04:11:17:50:13:f4:f2:c8:0e:f9:41:
ba:9d:db:8c:d4:52:e4:a0:a4:94:21:61:89:a0:d2:
91:bb:98:e4:45:ee:7f:d3:78:89:68:a7:ab:e9:ee:
24:cc:13:95:d6:f5:a0:3e:e6:ad:a8:9e:f6:73:64:
fc:f6:a0:6a:7b:fd:59:1e:4e:20:18:41:fe:b0:fd:
e4:25:99:65:42:ff:0f:59:8c:4f:d6:2f:81:2f:7f:
52:03:92:1c:a3:c2:d2:6b:d0:5b:eb:dc:fb:59:8a:
c5:43:9e:2a:89:9f:58:4f:80:38:e0:eb:03:0c:6d:
16:a1:6b:51:8d:12:94:d4:1f:d2:35:1a:81:6b:65:
7c:b0:ac:17:a4:db:1b:6a:ae:96:65:ee:c2:ec:5f:
56:cb:2f:1d:8f:0c:b2:60:0b:30:2c:1c:60:ca:59:
ec:72:36:56:97:3a:cf:a1:5d:b2:d8:65:92:4d:92:
79:35:6d:43:4b:1a:25:bb:bd:6f:35:b8:81:77:a5:
de:18:3f:3b:1a:34:15:69:5d:23:ab:85:37:0c:46:
1b:e4:fa:43:1c:02:af:90:47:2f:5f:22:3e:20:b6:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:E1:EE:50:AD:5C:F5:FA:7D:97:71:D0:05:BB:20:A1:C0:FD:D3
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CODh7lCtXPX6fZdx0AW7IKHA_dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f039::/48
Signature Algorithm: sha256WithRSAEncryption
80:7a:68:5d:83:16:f9:29:0a:ea:2b:d1:5b:76:61:fc:ca:bf:
69:ab:e2:7c:fb:1d:a3:9b:35:b2:86:d0:c3:c4:20:55:c8:83:
01:ba:63:1b:7c:39:af:27:2d:38:f4:16:05:be:0f:9c:3c:da:
26:7a:4f:13:62:28:00:fb:d6:70:60:84:7f:ea:a4:75:06:53:
7e:0f:18:35:71:46:dd:85:3e:4b:d9:ee:d6:43:12:b2:b0:89:
74:ce:69:c7:f7:72:76:d4:17:7c:5f:cb:8f:0d:58:4d:13:a8:
63:2a:bd:fb:42:4a:d8:ce:6b:d2:8a:ad:ce:9a:70:c9:ac:0a:
d2:a7:4a:7e:d4:a4:5d:b4:cc:71:97:58:d2:30:68:2c:38:4f:
93:42:30:c1:40:b3:8f:27:c9:46:36:1b:fc:db:8a:57:a6:29:
6d:83:f1:32:48:70:c5:74:94:2d:35:06:51:eb:ea:67:27:5a:
f8:49:4f:05:40:43:b9:06:2a:35:9b:a5:12:57:1d:8d:09:a6:
38:28:63:53:85:e8:1f:01:12:aa:05:0c:21:bf:06:84:92:fa:
ed:dc:d0:cd:f4:f7:2a:e4:d9:b7:09:42:af:b0:7e:32:f2:0e:
42:06:54:b5:73:ec:f7:ca:d3:3f:05:81:b1:42:1c:11:ca:83:
78:4d:2f:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIDd1Ix+mk4YY09asODWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGUwZTFlZTUwYWQ1Y2Y1ZmE3ZDk3NzFkMDA1YmIyMGExYzBmZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4aaOWRmDnYHuyl1PhBwk/zNQ5Tj
1elcOB8FDJrJ9bVYBBEXUBP08sgO+UG6nduM1FLkoKSUIWGJoNKRu5jkRe5/03iJ
aKer6e4kzBOV1vWgPuatqJ72c2T89qBqe/1ZHk4gGEH+sP3kJZllQv8PWYxP1i+B
L39SA5Ico8LSa9Bb69z7WYrFQ54qiZ9YT4A44OsDDG0WoWtRjRKU1B/SNRqBa2V8
sKwXpNsbaq6WZe7C7F9Wyy8djwyyYAswLBxgylnscjZWlzrPoV2y2GWSTZJ5NW1D
Sxolu71vNbiBd6XeGD87GjQVaV0jq4U3DEYb5PpDHAKvkEcvXyI+ILYdJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAjg4e5QrVz1+n2XcdAFuyChwP3TMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvQ09EaDdsQ3RYUFg2ZlpkeDBBVzdJS0hBX2RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvA5
MA0GCSqGSIb3DQEBCwUAA4IBAQCAemhdgxb5KQrqK9FbdmH8yr9pq+J8+x2jmzWy
htDDxCBVyIMBumMbfDmvJy049BYFvg+cPNomek8TYigA+9ZwYIR/6qR1BlN+Dxg1
cUbdhT5L2e7WQxKysIl0zmnH93J21Bd8X8uPDVhNE6hjKr37QkrYzmvSiq3OmnDJ
rArSp0p+1KRdtMxxl1jSMGgsOE+TQjDBQLOPJ8lGNhv824pXpiltg/EySHDFdJQt
NQZR6+pnJ1r4SU8FQEO5Bio1m6USVx2NCaY4KGNThegfARKqBQwhvwaEkvrt3NDN
9Pcq5Nm3CUKvsH4y8g5CBlS1c+z3ytM/BYGxQhwRyoN4TS9v
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:31 2025 by rpki-client