Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EGWoYQ7eLiW7yUtgGrbV1CkKflg.roa
File: EGWoYQ7eLiW7yUtgGrbV1CkKflg.roa (raw, json)
Hash identifier: zMwtJ+E/eNm7PwOaWAdCyEndRh/CsCap4tx91XhcXgE=
Subject key identifier: 10:65:A8:61:0E:DE:2E:25:BB:C9:4B:60:1A:B6:D5:D4:29:0A:7E:58
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA912F94CF5ADFBE9D148B31245FB0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EGWoYQ7eLiW7yUtgGrbV1CkKflg.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209295
IP address blocks: 2a0c:b641:580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:2f:94:cf:5a:df:be:9d:14:8b:31:24:5f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1065a8610ede2e25bbc94b601ab6d5d4290a7e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:14:df:dd:7c:14:86:fe:e4:d3:01:4f:39:
5f:5a:6c:87:71:1b:8f:90:bd:8b:42:3d:7e:9f:cc:
f6:32:a9:1b:11:75:82:7f:d2:e5:62:bc:ac:0a:2c:
4c:d3:7e:5c:a8:5b:7e:e3:88:80:34:1b:81:e1:62:
7e:65:6e:e6:51:4b:65:da:a2:f1:fa:94:ec:15:a8:
d6:18:43:dc:ec:41:1d:3b:32:0f:e3:e7:96:ff:e1:
5a:4b:26:07:b7:42:7e:df:fd:c1:04:1a:63:05:aa:
18:39:e7:9c:21:0e:1d:61:21:4f:36:c4:75:dc:5f:
a8:4d:6a:07:2d:2a:f8:ee:9f:5b:3d:f4:37:14:71:
e9:6f:84:fc:5a:c7:88:4e:6f:f8:ed:56:e8:76:5d:
86:de:16:d8:15:e3:f3:25:ec:02:27:af:eb:d6:e8:
c8:bd:61:5d:50:7a:5f:5c:cb:14:79:96:67:db:5f:
8c:4b:ba:cd:14:64:e6:31:e0:21:b8:90:c2:c0:ad:
1a:a2:64:c3:bb:58:93:a6:de:b0:64:f1:0b:ed:b3:
8a:20:88:1a:ee:3d:b7:b9:a3:be:ac:81:00:7b:3a:
72:ee:0c:6a:e1:63:31:ac:b6:cc:70:94:6e:bf:70:
20:b2:64:c5:ac:bc:92:11:5e:08:db:ea:07:b9:b7:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:A8:61:0E:DE:2E:25:BB:C9:4B:60:1A:B6:D5:D4:29:0A:7E:58
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EGWoYQ7eLiW7yUtgGrbV1CkKflg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:580::/44
Signature Algorithm: sha256WithRSAEncryption
0f:60:54:4c:e7:54:b8:50:42:a9:a3:d1:de:51:fc:9a:43:99:
86:bd:e2:6f:61:0b:1e:2b:be:84:25:ba:99:01:ae:4a:10:65:
cb:4c:a3:b8:1d:cb:ce:1a:6d:93:79:af:ce:f5:b8:f5:ba:37:
0e:8e:6f:ec:b6:79:20:47:e1:83:68:03:0d:13:24:e1:e5:b9:
61:4a:90:02:63:f1:a7:3b:a4:14:1a:08:61:83:9c:80:6b:b6:
77:b3:9c:a0:1a:81:07:3f:fa:96:62:b2:3e:4f:0f:da:80:ab:
86:ac:b4:1a:2c:60:8a:b0:76:f4:44:a4:bd:5d:b7:73:f7:4d:
11:fe:47:ca:62:ab:69:ab:26:2b:eb:f0:69:ba:15:59:2e:12:
b3:f1:4a:90:cc:d9:25:a2:77:d0:62:1d:08:00:e7:c9:e7:e9:
87:4f:49:e9:57:e5:3c:45:78:df:fb:54:8f:5f:5d:b6:96:ac:
b0:d0:ea:04:e5:a0:fa:05:05:fb:36:4e:b4:44:69:60:84:bd:
51:3a:61:fc:f6:7a:96:6b:e2:20:58:3c:ad:1a:bf:19:d7:45:
26:4f:22:34:14:72:7f:46:8c:d3:dd:3b:dd:da:03:cb:ae:2e:
4e:d1:f6:7c:61:05:28:89:4b:13:b1:de:fd:86:0b:e4:4d:54:
3a:51:b0:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+pEvlM9a376dFIsxJF+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDY1YTg2MTBlZGUyZTI1YmJjOTRiNjAxYWI2ZDVkNDI5MGE3ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHIU3918FIb+5NMBTzlfWmyHcRuP
kL2LQj1+n8z2MqkbEXWCf9LlYrysCixM035cqFt+44iANBuB4WJ+ZW7mUUtl2qLx
+pTsFajWGEPc7EEdOzIP4+eW/+FaSyYHt0J+3/3BBBpjBaoYOeecIQ4dYSFPNsR1
3F+oTWoHLSr47p9bPfQ3FHHpb4T8WseITm/47Vbodl2G3hbYFePzJewCJ6/r1ujI
vWFdUHpfXMsUeZZn21+MS7rNFGTmMeAhuJDCwK0aomTDu1iTpt6wZPEL7bOKIIga
7j23uaO+rIEAezpy7gxq4WMxrLbMcJRuv3AgsmTFrLySEV4I2+oHubdefQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBBlqGEO3i4lu8lLYBq21dQpCn5YMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvRUdXb1lRN2VMaVc3eVV0Z0dyYlYxQ2tLZmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQWA
MA0GCSqGSIb3DQEBCwUAA4IBAQAPYFRM51S4UEKpo9HeUfyaQ5mGveJvYQseK76E
JbqZAa5KEGXLTKO4HcvOGm2Tea/O9bj1ujcOjm/stnkgR+GDaAMNEyTh5blhSpAC
Y/GnO6QUGghhg5yAa7Z3s5ygGoEHP/qWYrI+Tw/agKuGrLQaLGCKsHb0RKS9Xbdz
900R/kfKYqtpqyYr6/BpuhVZLhKz8UqQzNklonfQYh0IAOfJ5+mHT0npV+U8RXjf
+1SPX122lqyw0OoE5aD6BQX7Nk60RGlghL1ROmH89nqWa+IgWDytGr8Z10UmTyI0
FHJ/RozT3Tvd2gPLri5O0fZ8YQUoiUsTsd79hgvkTVQ6UbBl
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:08:23 2025 by rpki-client