Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/cf7e0SKU5zKQjZTR2nGI1Thb0j4.roa
File: cf7e0SKU5zKQjZTR2nGI1Thb0j4.roa (raw, json)
Hash identifier: peH0VlIZkwHHAE687UxxaOI0qoAnGgB223Nd/WWMODw=
Subject key identifier: 71:FE:DE:D1:22:94:E7:32:90:8D:94:D1:DA:71:88:D5:38:5B:D2:3E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222052F62934482D3D7DDD1349A3F0BB
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/cf7e0SKU5zKQjZTR2nGI1Thb0j4.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215507
IP address blocks: 2a0e:8f02:f067::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:52:f6:29:34:48:2d:3d:7d:dd:13:49:a3:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71feded12294e732908d94d1da7188d5385bd23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:91:07:c1:ce:dc:b0:68:bd:bb:f0:c7:9a:
15:10:90:21:21:cc:13:4a:81:0f:bb:23:7a:bf:60:
3d:cf:49:2d:f1:be:bd:67:6b:eb:64:ef:c7:26:75:
b1:9c:a2:ff:83:2e:5a:f5:ef:c1:f7:19:bc:61:39:
3a:99:97:d1:91:52:ec:f1:19:02:9b:8d:da:b2:76:
a3:7c:58:80:09:82:61:62:36:06:f5:e3:eb:7b:c0:
e3:ba:f4:7c:bf:f1:6d:d9:e4:d0:b2:8c:fd:76:b3:
d1:09:2f:f2:7d:e3:63:68:91:40:bd:ff:07:f1:4c:
2e:06:16:47:7e:fa:bf:36:e4:bb:86:7b:5b:b1:a7:
af:e1:db:5c:75:61:59:ce:65:19:69:90:2b:9c:9b:
a6:57:2a:9c:a0:64:ba:7c:d9:d6:70:54:f8:e1:f3:
ce:3e:97:78:be:e6:b3:cd:09:51:86:e2:a5:b6:2d:
8d:8a:88:85:ef:c6:33:14:b6:12:ad:ee:6f:ae:b6:
2e:41:cb:1a:a7:8f:6c:7f:88:0d:3c:a0:a7:7c:8b:
ba:22:e8:00:3c:8f:fc:6a:4c:df:1d:bf:ce:c3:d4:
48:a7:51:6a:f0:dc:03:2a:55:8e:29:b4:46:9e:50:
7c:e9:99:77:62:81:8a:c1:00:8a:6d:62:27:53:a1:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:DE:D1:22:94:E7:32:90:8D:94:D1:DA:71:88:D5:38:5B:D2:3E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/cf7e0SKU5zKQjZTR2nGI1Thb0j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f067::/48
Signature Algorithm: sha256WithRSAEncryption
a9:1f:88:bd:7f:e9:86:92:b3:08:19:ff:ea:1d:33:15:e8:b1:
d6:19:ba:15:48:ce:76:c3:da:da:a3:fa:38:ee:f4:51:a3:9a:
4b:6d:bd:28:10:99:35:4c:01:15:ae:51:36:70:a1:b5:65:15:
da:17:ed:56:3d:a1:50:54:32:a8:19:70:54:39:7e:6f:fa:a6:
4b:14:4a:e8:45:56:47:5a:5f:13:5e:46:77:a5:cc:17:e1:5b:
ec:8f:74:a4:47:93:a0:c4:e9:38:c1:f6:57:e1:c7:4b:aa:34:
69:ed:21:2c:ba:fb:b6:da:5c:5d:f9:28:44:a4:ca:2b:aa:96:
bf:14:07:f4:e3:27:eb:f1:b1:88:be:d8:3d:a1:61:97:ee:67:
8e:d6:f9:54:09:d5:ac:eb:43:20:22:c3:c7:b4:29:54:db:91:
6e:c2:1b:d4:d2:90:33:52:75:47:43:9f:9a:a4:ad:7e:79:fb:
62:7e:51:e6:8f:38:f2:03:af:9f:55:7b:19:4b:19:35:93:a6:
05:f4:5c:fb:18:6d:02:56:d7:02:45:da:0e:57:ab:e5:36:4c:
69:8b:7a:cd:85:79:dc:fa:e2:0f:4a:e4:8e:ee:d2:c5:0b:e4:
41:29:f5:1a:b6:29:83:b4:bc:b1:8d:95:b0:d8:cc:10:ab:3d:
a8:18:91:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIFL2KTRILT193RNJo/C7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZlZGVkMTIyOTRlNzMyOTA4ZDk0ZDFkYTcxODhkNTM4NWJkMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC2RB8HO3LBovbvwx5oVEJAhIcwT
SoEPuyN6v2A9z0kt8b69Z2vrZO/HJnWxnKL/gy5a9e/B9xm8YTk6mZfRkVLs8RkC
m43asnajfFiACYJhYjYG9ePre8DjuvR8v/Ft2eTQsoz9drPRCS/yfeNjaJFAvf8H
8UwuBhZHfvq/NuS7hntbsaev4dtcdWFZzmUZaZArnJumVyqcoGS6fNnWcFT44fPO
Ppd4vuazzQlRhuKlti2NioiF78YzFLYSre5vrrYuQcsap49sf4gNPKCnfIu6IugA
PI/8akzfHb/Ow9RIp1Fq8NwDKlWOKbRGnlB86Zl3YoGKwQCKbWInU6F8wwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHH+3tEilOcykI2U0dpxiNU4W9I+MB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvY2Y3ZTBTS1U1ektRalpUUjJuR0kxVGhiMGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBn
MA0GCSqGSIb3DQEBCwUAA4IBAQCpH4i9f+mGkrMIGf/qHTMV6LHWGboVSM52w9ra
o/o47vRRo5pLbb0oEJk1TAEVrlE2cKG1ZRXaF+1WPaFQVDKoGXBUOX5v+qZLFEro
RVZHWl8TXkZ3pcwX4Vvsj3SkR5OgxOk4wfZX4cdLqjRp7SEsuvu22lxd+ShEpMor
qpa/FAf04yfr8bGIvtg9oWGX7meO1vlUCdWs60MgIsPHtClU25FuwhvU0pAzUnVH
Q5+apK1+eftiflHmjzjyA6+fVXsZSxk1k6YF9Fz7GG0CVtcCRdoOV6vlNkxpi3rN
hXnc+uIPSuSO7tLFC+RBKfUatimDtLyxjZWw2MwQqz2oGJEZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:19 2025 by rpki-client