Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dY-nQhTpBROyN0Ws92F6jGaX9wo.roa
File: dY-nQhTpBROyN0Ws92F6jGaX9wo.roa (raw, json)
Hash identifier: 210DXES29RD3oz3k3lGR4dFbNyfI9SzQEYOitbPOwYk=
Subject key identifier: 75:8F:A7:42:14:E9:05:13:B2:37:45:AC:F7:61:7A:8C:66:97:F7:0A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAE15EE127A5E13759C2C87CB9395
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dY-nQhTpBROyN0Ws92F6jGaX9wo.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214049
IP address blocks: 2a0c:b641:d20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:15:ee:12:7a:5e:13:75:9c:2c:87:cb:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758fa74214e90513b23745acf7617a8c6697f70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:f1:d7:37:b8:10:24:09:93:9d:9f:41:4f:
31:64:82:ea:9a:c9:1e:9d:90:ab:97:a4:ca:b8:df:
5a:94:9e:ab:a6:2e:c8:40:63:74:56:a2:3a:21:e8:
cb:22:d0:7c:88:b9:36:a6:77:68:01:6c:87:08:4d:
23:02:1c:4d:e9:e0:1e:69:5d:a9:cc:c9:25:b6:0e:
b7:8c:d7:24:6b:36:7a:52:31:0d:ef:3a:86:b4:47:
4a:93:60:2d:3e:ed:3a:40:3f:d3:88:4d:b2:c8:9c:
41:d1:27:37:6e:d6:dc:d4:ca:7a:5e:d4:75:81:67:
1f:f1:2d:48:1d:6d:c2:79:e8:59:d7:5d:17:aa:6d:
d4:95:7c:eb:6b:97:ec:c5:44:e6:70:2a:e3:f3:16:
84:5b:87:7f:ce:18:f1:be:c6:52:18:37:ba:fd:e8:
cd:52:a3:72:c4:9e:d2:d1:f5:7f:f2:6f:ac:a3:ed:
bf:a3:a8:d4:05:21:b2:e5:ef:2c:f6:c9:5b:80:8a:
8d:f1:78:d8:23:2b:a0:74:4d:d7:10:fb:cb:df:ba:
e7:2b:de:f9:06:97:27:8e:8d:38:e2:47:5d:0b:22:
a3:46:86:02:a3:eb:e3:8d:0b:c5:c9:d5:19:69:9b:
44:d9:1e:02:0e:b2:55:6f:22:0c:36:c2:a3:7f:28:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8F:A7:42:14:E9:05:13:B2:37:45:AC:F7:61:7A:8C:66:97:F7:0A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dY-nQhTpBROyN0Ws92F6jGaX9wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d20::/44
Signature Algorithm: sha256WithRSAEncryption
86:a9:c5:e8:09:b8:b9:88:e4:56:7e:53:7a:40:af:2f:3f:fa:
4c:3e:d7:cf:29:36:fd:9d:16:a6:9f:26:55:a6:31:76:86:a4:
56:50:d9:45:f9:a4:7f:59:52:7d:65:28:86:68:7b:83:0b:b4:
5e:4e:d7:5f:da:44:e4:81:45:23:fd:b6:8c:ae:c0:e2:5d:4e:
6e:a4:f5:ec:f7:39:7a:3b:2b:d1:7e:bc:6d:04:2f:fd:87:46:
91:c6:3e:78:26:96:bf:62:be:5b:12:59:01:59:bc:41:af:88:
3a:2f:16:ba:c0:b4:f2:8b:2b:72:8e:2a:3a:89:97:57:7f:02:
b2:55:9c:cb:2c:c2:08:7f:10:23:4b:8f:12:7f:b3:2d:33:b6:
6c:28:c2:79:fe:70:15:b3:10:c5:a2:05:e3:03:96:26:f0:7c:
54:23:67:23:d8:a8:ff:c7:1f:75:c8:69:f0:47:0d:74:c7:7d:
9b:f7:d4:60:25:59:c8:26:31:bc:ea:ad:9f:b9:ca:be:1e:15:
04:0e:d2:a9:75:e6:66:e5:9f:6a:09:7c:8d:5c:64:db:f2:86:
bc:8e:d3:ba:21:ca:35:34:1e:c3:4e:cc:e4:52:d5:07:a6:3e:
9b:90:42:71:de:ff:f5:e2:6b:3c:d7:a2:fd:41:c2:b4:93:72:
27:ff:48:16
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+q4V7hJ6XhN1nCyHy5OVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NThmYTc0MjE0ZTkwNTEzYjIzNzQ1YWNmNzYxN2E4YzY2OTdmNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmTx1ze4ECQJk52fQU8xZILqmske
nZCrl6TKuN9alJ6rpi7IQGN0VqI6IejLItB8iLk2pndoAWyHCE0jAhxN6eAeaV2p
zMkltg63jNckazZ6UjEN7zqGtEdKk2AtPu06QD/TiE2yyJxB0Sc3btbc1Mp6XtR1
gWcf8S1IHW3CeehZ110Xqm3UlXzra5fsxUTmcCrj8xaEW4d/zhjxvsZSGDe6/ejN
UqNyxJ7S0fV/8m+so+2/o6jUBSGy5e8s9slbgIqN8XjYIyugdE3XEPvL37rnK975
Bpcnjo044kddCyKjRoYCo+vjjQvFydUZaZtE2R4CDrJVbyIMNsKjfyjltQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHWPp0IU6QUTsjdFrPdheoxml/cKMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvZFktblFoVHBCUk95TjBXczkyRjZqR2FYOXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ0g
MA0GCSqGSIb3DQEBCwUAA4IBAQCGqcXoCbi5iORWflN6QK8vP/pMPtfPKTb9nRam
nyZVpjF2hqRWUNlF+aR/WVJ9ZSiGaHuDC7ReTtdf2kTkgUUj/baMrsDiXU5upPXs
9zl6OyvRfrxtBC/9h0aRxj54Jpa/Yr5bElkBWbxBr4g6Lxa6wLTyiytyjio6iZdX
fwKyVZzLLMIIfxAjS48Sf7MtM7ZsKMJ5/nAVsxDFogXjA5Ym8HxUI2cj2Kj/xx91
yGnwRw10x32b99RgJVnIJjG86q2fucq+HhUEDtKpdeZm5Z9qCXyNXGTb8oa8jtO6
Ico1NB7DTszkUtUHpj6bkEJx3v/14ms816L9QcK0k3In/0gW
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:44 2025 by rpki-client