Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ORkDnFu9haGsvXxUzxgSYJReVpA.roa
File: ORkDnFu9haGsvXxUzxgSYJReVpA.roa (raw, json)
Hash identifier: lJqGWWDFvgJNRbqFP62aOCg98ifMo1PkFKdGxu4H2TY=
Subject key identifier: 39:19:03:9C:5B:BD:85:A1:AC:BD:7C:54:CF:18:12:60:94:5E:56:90
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFABC210D0AF63B5ABBDB7887AEEDFF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ORkDnFu9haGsvXxUzxgSYJReVpA.roa
Signing time: Wed 01 Jan 2025 03:48:33 +0000
ROA not before: Wed 01 Jan 2025 03:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216424
IP address blocks: 2a0c:b641:ac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:bc:21:0d:0a:f6:3b:5a:bb:db:78:87:ae:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3919039c5bbd85a1acbd7c54cf181260945e5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:dd:eb:5a:b1:88:1f:bd:e6:e2:3b:19:53:
72:69:4b:86:15:95:9d:a1:8c:e8:a0:09:d5:5d:8a:
d3:d7:a7:f7:31:b0:16:44:8b:b7:05:b8:24:01:55:
eb:20:ba:96:ee:09:26:e9:e1:38:cc:f7:fb:60:45:
91:91:16:1b:bf:19:c4:b6:80:53:de:22:fd:1a:61:
f1:20:a5:7b:02:8b:f9:7f:25:80:c3:8c:6d:f3:2e:
f4:60:04:3a:f8:36:29:ec:9c:86:b0:8f:6c:2a:ca:
f8:ab:21:9f:5d:19:d4:ea:af:ba:b6:e2:c5:d5:9c:
00:22:af:e6:23:5b:a5:fd:34:29:8d:d9:15:47:10:
e2:8f:52:b2:d4:e8:91:af:f4:69:0a:0e:8c:d7:ee:
de:e5:e6:7b:91:21:85:31:b8:b8:4d:40:48:f3:11:
ff:49:69:eb:64:42:e3:7f:31:54:9f:50:f4:7f:eb:
e8:bd:ab:21:0c:25:fd:49:f7:95:a7:f5:c5:1f:f4:
3d:38:04:f4:87:1b:a7:b3:70:e3:bf:4c:24:e3:23:
06:84:92:ea:1c:36:d4:63:8b:17:de:0a:bb:e6:0f:
d0:7e:22:62:71:61:19:eb:8b:68:6b:87:b5:df:96:
95:e8:cd:12:00:67:81:35:e1:8a:56:31:66:34:b3:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:03:9C:5B:BD:85:A1:AC:BD:7C:54:CF:18:12:60:94:5E:56:90
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ORkDnFu9haGsvXxUzxgSYJReVpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ac0::/44
Signature Algorithm: sha256WithRSAEncryption
5f:5e:43:d1:06:9e:49:8c:49:77:f8:d9:e2:41:8e:29:b2:ae:
95:84:d8:82:14:aa:f0:b2:b9:6d:64:76:6f:f1:1a:c0:db:ec:
7c:6d:61:11:9d:8e:3c:a8:2c:67:e9:0d:09:01:bf:d1:be:c1:
44:df:57:9c:c2:00:b0:b0:c0:e8:2a:a0:d0:33:08:cd:e2:3c:
d2:8b:a9:98:32:9d:c2:ee:f3:1e:02:86:72:7f:37:15:89:f9:
b6:b1:71:c9:b7:62:fa:42:32:4f:db:d4:75:d5:f6:88:58:e9:
01:be:ad:b7:77:11:5d:a6:dc:20:9c:ae:dc:29:d9:3c:31:d9:
dc:36:67:54:bf:15:2a:8d:5b:0a:49:1e:b5:97:0a:2d:73:09:
aa:c8:53:56:22:0f:7b:12:3b:a9:1d:44:b4:0d:74:9d:71:2f:
d2:41:74:1c:c4:57:06:69:ab:55:c1:e0:80:9f:38:d8:59:2b:
00:80:e6:4b:ae:6f:2b:1a:b1:2b:76:15:34:f6:e3:34:ab:e6:
47:85:4b:9a:2c:5d:56:00:d5:15:f3:4b:8a:5f:bf:12:09:c0:
f1:80:5a:6f:19:2d:26:09:54:47:e8:b6:14:4c:21:36:ec:f0:
49:39:8b:58:ed:5d:ee:ad:8a:70:31:1d:f9:e0:22:f8:17:52:
a9:46:50:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+rwhDQr2O1q723iHru3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE5MDM5YzViYmQ4NWExYWNiZDdjNTRjZjE4MTI2MDk0NWU1NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocjd61qxiB+95uI7GVNyaUuGFZWd
oYzooAnVXYrT16f3MbAWRIu3BbgkAVXrILqW7gkm6eE4zPf7YEWRkRYbvxnEtoBT
3iL9GmHxIKV7Aov5fyWAw4xt8y70YAQ6+DYp7JyGsI9sKsr4qyGfXRnU6q+6tuLF
1ZwAIq/mI1ul/TQpjdkVRxDij1Ky1OiRr/RpCg6M1+7e5eZ7kSGFMbi4TUBI8xH/
SWnrZELjfzFUn1D0f+vovashDCX9SfeVp/XFH/Q9OAT0hxuns3Djv0wk4yMGhJLq
HDbUY4sX3gq75g/QfiJicWEZ64toa4e135aV6M0SAGeBNeGKVjFmNLMIHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDkZA5xbvYWhrL18VM8YEmCUXlaQMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvT1JrRG5GdTloYUdzdlh4VXp4Z1NZSlJlVnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQrA
MA0GCSqGSIb3DQEBCwUAA4IBAQBfXkPRBp5JjEl3+NniQY4psq6VhNiCFKrwsrlt
ZHZv8RrA2+x8bWERnY48qCxn6Q0JAb/RvsFE31ecwgCwsMDoKqDQMwjN4jzSi6mY
Mp3C7vMeAoZyfzcVifm2sXHJt2L6QjJP29R11faIWOkBvq23dxFdptwgnK7cKdk8
MdncNmdUvxUqjVsKSR61lwotcwmqyFNWIg97EjupHUS0DXSdcS/SQXQcxFcGaatV
weCAnzjYWSsAgOZLrm8rGrErdhU09uM0q+ZHhUuaLF1WANUV80uKX78SCcDxgFpv
GS0mCVRH6LYUTCE27PBJOYtY7V3urYpwMR354CL4F1KpRlCE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:50 2025 by rpki-client