Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rtgrjp3CRCAuP_vFuNf59NjUQaU.roa
File: rtgrjp3CRCAuP_vFuNf59NjUQaU.roa (raw, json)
Hash identifier: O4+adF32wwIoA7Pe88l39mWXkANu1YNVUGtxBITt4qc=
Subject key identifier: AE:D8:2B:8E:9D:C2:44:20:2E:3F:FB:C5:B8:D7:F9:F4:D8:D4:41:A5
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422202460D891510B05A0198C4C9AF59D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rtgrjp3CRCAuP_vFuNf59NjUQaU.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49192
IP address blocks: 2a0e:8f02:2200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:24:60:d8:91:51:0b:05:a0:19:8c:4c:9a:f5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aed82b8e9dc244202e3ffbc5b8d7f9f4d8d441a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:c4:07:16:74:14:96:18:a7:96:98:12:ae:
11:3e:40:8d:df:e5:db:e7:39:27:2f:39:2d:d2:ad:
b8:4f:46:c6:e2:7c:cd:73:e5:da:c3:5f:cf:8b:d9:
61:da:c7:6d:30:24:1c:84:5d:fb:40:32:e6:c0:49:
6b:b7:5e:84:f3:09:88:c4:c4:f6:b0:50:13:a3:4d:
7c:e2:b9:1a:17:bd:a4:6f:e6:86:ca:fe:22:d7:fe:
b5:9b:b4:91:19:aa:d7:ae:59:99:61:46:ab:89:86:
61:df:90:a4:b7:f7:6d:2d:f6:6f:54:4f:e1:46:5a:
25:0a:a5:17:d8:77:b9:75:6a:ac:08:92:23:42:34:
a6:ff:c2:75:08:f8:bf:51:9b:3b:13:8d:ed:f4:09:
a1:12:91:a6:f7:26:36:2d:6b:05:45:22:9f:e7:19:
e2:77:89:0f:e0:6f:8a:e5:f4:c4:b9:b9:59:0c:78:
c4:20:3b:9f:13:8a:6a:ed:dd:b6:13:fd:03:e1:75:
be:96:8f:c8:b0:ae:9b:8e:43:04:da:8c:12:52:ef:
89:07:8e:76:b4:e1:3c:79:48:bc:8f:3b:a7:3b:2b:
f8:8a:39:08:6b:a9:30:e1:38:bf:21:df:f4:4f:0e:
30:c2:32:e0:be:44:53:06:b5:b9:14:11:1e:e7:d3:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:2B:8E:9D:C2:44:20:2E:3F:FB:C5:B8:D7:F9:F4:D8:D4:41:A5
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rtgrjp3CRCAuP_vFuNf59NjUQaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2200::/44
Signature Algorithm: sha256WithRSAEncryption
95:0e:09:76:fe:bf:ab:c5:f7:1b:da:92:f4:e0:a7:fb:79:ab:
0d:32:9f:7d:c6:1f:3d:47:6a:16:7c:da:e3:a1:13:4e:5f:6e:
a1:67:f4:61:67:a1:c2:21:31:79:72:0b:ac:0e:b1:f9:cc:06:
aa:a2:f2:a5:b2:90:3c:67:42:a5:a2:44:5c:5f:18:54:71:ab:
9e:32:b8:cc:94:78:40:80:39:a2:0d:34:b4:8e:1a:8d:56:44:
59:be:e5:15:8e:8c:1d:a0:d9:3c:91:d9:37:9e:72:66:e3:ac:
7e:fe:cb:55:4d:21:2f:35:29:8c:a6:56:ed:b1:29:c2:69:81:
4a:b8:9e:87:34:5b:6f:71:72:0e:b2:df:64:c7:08:6a:37:a2:
61:b7:63:ef:3e:73:19:af:b0:26:e7:21:0f:47:0e:0e:9c:9e:
a2:a2:62:2c:c6:45:0b:6d:51:9b:42:8e:14:5e:f2:28:00:39:
6f:3c:b9:d7:cd:37:6c:ff:e2:cb:d8:7b:43:60:e1:a9:12:ff:
07:37:5a:e4:f1:24:82:79:33:eb:51:e3:86:d4:2e:db:be:ce:
cf:1d:80:f2:c2:6c:7c:9c:3b:61:d0:cf:3b:b4:7f:97:02:58:
0c:1e:e3:65:58:c1:2e:3b:e1:09:e1:5a:bd:1a:71:1c:70:c5:
88:73:b0:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiICRg2JFRCwWgGYxMmvWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWQ4MmI4ZTlkYzI0NDIwMmUzZmZiYzViOGQ3ZjlmNGQ4ZDQ0MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7jEBxZ0FJYYp5aYEq4RPkCN3+Xb
5zknLzkt0q24T0bG4nzNc+Xaw1/Pi9lh2sdtMCQchF37QDLmwElrt16E8wmIxMT2
sFATo0184rkaF72kb+aGyv4i1/61m7SRGarXrlmZYUariYZh35Ckt/dtLfZvVE/h
RlolCqUX2He5dWqsCJIjQjSm/8J1CPi/UZs7E43t9AmhEpGm9yY2LWsFRSKf5xni
d4kP4G+K5fTEublZDHjEIDufE4pq7d22E/0D4XW+lo/IsK6bjkME2owSUu+JB452
tOE8eUi8jzunOyv4ijkIa6kw4Ti/Id/0Tw4wwjLgvkRTBrW5FBEe59M2XwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK7YK46dwkQgLj/7xbjX+fTY1EGlMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvcnRncmpwM0NSQ0F1UF92RnVOZjU5TmpVUWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiIA
MA0GCSqGSIb3DQEBCwUAA4IBAQCVDgl2/r+rxfcb2pL04Kf7easNMp99xh89R2oW
fNrjoRNOX26hZ/RhZ6HCITF5cgusDrH5zAaqovKlspA8Z0KlokRcXxhUcaueMrjM
lHhAgDmiDTS0jhqNVkRZvuUVjowdoNk8kdk3nnJm46x+/stVTSEvNSmMplbtsSnC
aYFKuJ6HNFtvcXIOst9kxwhqN6Jht2PvPnMZr7Am5yEPRw4OnJ6iomIsxkULbVGb
Qo4UXvIoADlvPLnXzTds/+LL2HtDYOGpEv8HN1rk8SSCeTPrUeOG1C7bvs7PHYDy
wmx8nDth0M87tH+XAlgMHuNlWMEuO+EJ4Vq9GnEccMWIc7DG
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:55 2025 by rpki-client