Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/r63zZTk3NM6rM8CUSxPLW8gpiDQ.roa
File: r63zZTk3NM6rM8CUSxPLW8gpiDQ.roa (raw, json)
Hash identifier: ieNt8t/4Zn7DldkUC2Uz44VGpNpA+N8K7lCzRz6sFGc=
Subject key identifier: AF:AD:F3:65:39:37:34:CE:AB:33:C0:94:4B:13:CB:5B:C8:29:88:34
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA880344982BBC525001B85B512F48
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/r63zZTk3NM6rM8CUSxPLW8gpiDQ.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205591
IP address blocks: 2a0c:b642::/36 maxlen: 48
2a0c:b642:1a09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:03:44:98:2b:bc:52:50:01:b8:5b:51:2f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afadf365393734ceab33c0944b13cb5bc8298834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:11:61:bf:ed:25:20:0c:3d:16:4d:3f:05:
ff:56:c8:30:e2:b7:85:9e:fc:fc:de:39:c2:53:fc:
a7:85:4b:4e:16:0d:eb:20:cb:3e:b4:0f:e9:37:e0:
2f:aa:13:1f:6a:1f:2f:14:8a:d9:d7:15:22:19:34:
a7:ae:65:ce:ce:83:f4:86:f1:e6:23:2e:8b:34:05:
75:42:50:11:97:f4:07:88:97:da:83:83:8c:22:72:
46:a3:b6:02:c3:70:3e:3b:ad:d6:d2:d3:d0:60:4c:
68:e1:fc:00:9b:e9:6e:21:f0:5b:1e:dd:76:cc:e9:
b2:f0:d5:44:66:78:e3:3b:4f:a5:e3:b1:e1:e9:49:
6c:a5:fd:1a:2a:6d:3a:75:a2:7e:0b:34:65:f7:91:
5d:db:53:dc:64:66:e6:ee:2f:ac:e5:b4:c0:80:f6:
52:d9:a5:11:8e:8a:65:02:a2:1c:e8:46:4f:e7:7c:
88:d7:24:d2:67:c2:c5:d3:28:81:e4:61:12:f1:5c:
1b:6b:69:ca:15:b1:86:f0:f7:90:d5:89:ce:40:01:
23:e1:b9:fb:92:66:59:d9:84:3f:a4:a7:63:1b:1b:
71:44:6a:87:bc:8b:1e:a6:24:13:1c:95:5f:2e:5e:
2b:bf:3b:56:70:1a:fc:71:6b:8b:22:ec:37:3f:01:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:F3:65:39:37:34:CE:AB:33:C0:94:4B:13:CB:5B:C8:29:88:34
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/r63zZTk3NM6rM8CUSxPLW8gpiDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642::/36
2a0c:b642:1a09::/48
Signature Algorithm: sha256WithRSAEncryption
04:f5:a4:40:34:9e:78:7d:eb:9e:e5:4d:2d:f7:76:82:47:8d:
eb:fb:d9:6c:7c:20:42:6b:49:fa:f6:a9:29:7f:3f:c1:48:d2:
db:4f:68:1b:cf:f9:af:22:b8:7e:bf:e7:1b:83:2a:81:ed:c4:
9b:f7:74:dd:4c:d7:63:a1:48:c8:b5:45:75:a1:58:15:97:95:
5b:f8:06:8e:56:58:e4:e0:69:7e:6e:8c:4d:7a:c0:fc:81:f2:
ae:ec:e9:32:31:ec:95:19:a1:8e:06:49:da:89:24:72:78:5c:
80:17:67:46:6d:bc:dc:73:5d:40:99:77:60:2d:45:41:96:27:
a7:18:bc:44:e3:f7:a3:37:72:86:ca:45:5f:fd:77:f4:c2:c4:
dd:e1:0b:5b:d5:0d:de:8c:15:c2:40:10:af:95:fc:75:22:95:
ce:7a:87:62:99:52:0e:a8:1b:e6:ca:82:2c:ec:f6:7d:03:ae:
99:30:4e:1f:86:05:83:ef:4c:2d:37:8c:29:7a:51:5a:9e:aa:
5c:12:68:fa:50:e0:58:a3:9e:c4:fe:f1:70:18:5f:7b:10:2a:
59:77:06:63:6f:d5:12:a4:e4:f8:3b:22:1a:b9:af:d9:5c:5f:
13:27:05:d4:12:04:10:23:9a:b2:80:b2:7d:43:67:d6:b4:0f:
24:d3:1d:b8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZQf+ogDRJgrvFJQAbhbUS9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmFkZjM2NTM5MzczNGNlYWIzM2MwOTQ0YjEzY2I1YmM4Mjk4ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkERYb/tJSAMPRZNPwX/Vsgw4reF
nvz83jnCU/ynhUtOFg3rIMs+tA/pN+AvqhMfah8vFIrZ1xUiGTSnrmXOzoP0hvHm
Iy6LNAV1QlARl/QHiJfag4OMInJGo7YCw3A+O63W0tPQYExo4fwAm+luIfBbHt12
zOmy8NVEZnjjO0+l47Hh6Ulspf0aKm06daJ+CzRl95Fd21PcZGbm7i+s5bTAgPZS
2aURjoplAqIc6EZP53yI1yTSZ8LF0yiB5GES8Vwba2nKFbGG8PeQ1YnOQAEj4bn7
kmZZ2YQ/pKdjGxtxRGqHvIsepiQTHJVfLl4rvztWcBr8cWuLIuw3PwE4IQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFK+t82U5NzTOqzPAlEsTy1vIKYg0MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvcjYzelpUazNOTTZyTThDVVN4UExXOGdwaURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYEKgy2QgAD
BwAqDLZCGgkwDQYJKoZIhvcNAQELBQADggEBAAT1pEA0nnh9657lTS33doJHjev7
2Wx8IEJrSfr2qSl/P8FI0ttPaBvP+a8iuH6/5xuDKoHtxJv3dN1M12OhSMi1RXWh
WBWXlVv4Bo5WWOTgaX5ujE16wPyB8q7s6TIx7JUZoY4GSdqJJHJ4XIAXZ0ZtvNxz
XUCZd2AtRUGWJ6cYvETj96M3cobKRV/9d/TCxN3hC1vVDd6MFcJAEK+V/HUilc56
h2KZUg6oG+bKgizs9n0DrpkwTh+GBYPvTC03jCl6UVqeqlwSaPpQ4FijnsT+8XAY
X3sQKll3BmNv1RKk5Pg7Ihq5r9lcXxMnBdQSBBAjmrKAsn1DZ9a0DyTTHbg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:16 2025 by rpki-client