Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8xiDrwOI5Z18nTp02T4ykezkgS8.roa
File: 8xiDrwOI5Z18nTp02T4ykezkgS8.roa (raw, json)
Hash identifier: fktr6sndh0VpuN+CO58u4iOAQf+ruD3D0lcLJ2iZaTo=
Subject key identifier: F3:18:83:AF:03:88:E5:9D:7C:9D:3A:74:D9:3E:32:91:EC:E4:81:2F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAA19C9976DDAB7258087F5B0F545D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8xiDrwOI5Z18nTp02T4ykezkgS8.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212715
IP address blocks: 2a0c:b641:4e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:9c:99:76:dd:ab:72:58:08:7f:5b:0f:54:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f31883af0388e59d7c9d3a74d93e3291ece4812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:05:14:9b:79:2f:b8:40:cf:78:6f:4c:a2:
9a:01:7b:20:2f:64:f1:04:11:c1:38:9d:73:72:31:
b3:01:0c:ff:00:54:77:6c:39:a7:8a:eb:6d:c7:a2:
b0:8b:ea:cb:f0:09:c1:32:b3:9d:4f:6e:e7:14:38:
47:36:a9:2d:9d:44:30:11:6e:85:57:ca:0e:a0:c8:
b8:75:62:de:a6:10:79:fd:43:e3:31:0b:8d:68:42:
19:20:90:81:77:04:b2:de:9e:70:bb:29:c9:05:00:
49:04:2b:e5:12:3d:9a:b0:fd:f4:bf:8a:31:8e:dc:
2e:4a:80:cc:34:93:2f:db:9e:01:3a:18:d8:9e:56:
ea:3c:84:73:42:e6:98:5a:29:c1:50:d3:5a:a9:7e:
6f:88:c8:10:32:88:7f:3c:ee:a0:72:2b:5b:e0:f0:
b2:ae:71:58:a3:78:cd:ea:a3:0f:e6:a7:1e:e6:3e:
0f:9c:d7:e9:2d:f4:03:77:c7:c2:21:11:16:5b:a5:
7f:65:72:ef:c9:6c:4b:f4:c2:aa:8b:5f:02:a0:9c:
d2:99:99:fa:c8:0b:40:bf:0a:ef:42:f3:10:92:fa:
ed:0f:8a:16:40:52:fb:93:c2:da:96:54:1f:ce:07:
2c:41:31:01:55:e8:03:13:8a:75:e1:08:50:c2:f1:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:83:AF:03:88:E5:9D:7C:9D:3A:74:D9:3E:32:91:EC:E4:81:2F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8xiDrwOI5Z18nTp02T4ykezkgS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
07:6f:2d:73:f9:96:db:d4:55:ba:c4:9b:7b:de:25:43:a4:e9:
a1:52:78:d9:98:f1:c1:b7:45:a3:b6:97:94:39:40:fb:f3:cf:
ed:f5:f4:1c:5d:1e:ca:ab:a2:4d:cb:6e:3a:57:2a:18:25:eb:
bc:d3:3b:3b:4e:ad:e8:de:9e:6e:4a:8d:ae:49:12:fa:6c:82:
3e:9a:dc:e8:35:e1:be:ff:2d:e6:ab:ae:ba:af:4b:5f:8e:15:
9b:0f:78:19:6c:1b:1f:4b:9a:d4:cf:f5:a8:0c:69:b5:52:4a:
57:dc:48:48:22:77:87:3e:95:44:81:68:01:4c:72:d6:60:a5:
ce:5b:80:d2:2a:7b:a0:31:fa:40:4e:cd:5d:82:f5:e7:38:b0:
b7:aa:37:68:13:61:ce:21:17:d4:79:e5:7c:1c:a1:fb:02:d7:
d8:a0:19:af:3a:94:96:15:ad:36:c6:58:71:f8:1d:79:3e:ef:
74:70:78:66:cb:79:08:75:62:da:bc:96:34:b6:c5:8f:b0:88:
6c:21:dd:54:a6:5b:ad:e3:24:17:d4:c1:89:3e:a2:7e:dd:85:
7f:f7:84:a6:eb:cb:5b:6c:5e:37:2d:ee:70:91:36:b5:25:13:
cf:ca:22:c2:7d:44:37:d5:62:ef:b9:ef:4b:d8:6b:fa:59:34:
f3:bd:af:10
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+qGcmXbdq3JYCH9bD1RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE4ODNhZjAzODhlNTlkN2M5ZDNhNzRkOTNlMzI5MWVjZTQ4MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW8FFJt5L7hAz3hvTKKaAXsgL2Tx
BBHBOJ1zcjGzAQz/AFR3bDmniuttx6Kwi+rL8AnBMrOdT27nFDhHNqktnUQwEW6F
V8oOoMi4dWLephB5/UPjMQuNaEIZIJCBdwSy3p5wuynJBQBJBCvlEj2asP30v4ox
jtwuSoDMNJMv254BOhjYnlbqPIRzQuaYWinBUNNaqX5viMgQMoh/PO6gcitb4PCy
rnFYo3jN6qMP5qce5j4PnNfpLfQDd8fCIREWW6V/ZXLvyWxL9MKqi18CoJzSmZn6
yAtAvwrvQvMQkvrtD4oWQFL7k8LallQfzgcsQTEBVegDE4p14QhQwvEuXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPMYg68DiOWdfJ06dNk+MpHs5IEvMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvOHhpRHJ3T0k1WjE4blRwMDJUNHlrZXprZ1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQTg
MA0GCSqGSIb3DQEBCwUAA4IBAQAHby1z+Zbb1FW6xJt73iVDpOmhUnjZmPHBt0Wj
tpeUOUD788/t9fQcXR7Kq6JNy246VyoYJeu80zs7Tq3o3p5uSo2uSRL6bII+mtzo
NeG+/y3mq666r0tfjhWbD3gZbBsfS5rUz/WoDGm1UkpX3EhIIneHPpVEgWgBTHLW
YKXOW4DSKnugMfpATs1dgvXnOLC3qjdoE2HOIRfUeeV8HKH7AtfYoBmvOpSWFa02
xlhx+B15Pu90cHhmy3kIdWLavJY0tsWPsIhsId1Uplut4yQX1MGJPqJ+3YV/94Sm
68tbbF43Le5wkTa1JRPPyiLCfUQ31WLvue9L2Gv6WTTzva8Q
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:26:54 2025 by rpki-client