Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zBS75qyrWkPpg2bq3WUn4RLeSrE.roa
File: zBS75qyrWkPpg2bq3WUn4RLeSrE.roa (raw, json)
Hash identifier: GPXdsP9R1d78C0nj4BWj92E9mmMkD3MEya9oKoIKoVo=
Subject key identifier: CC:14:BB:E6:AC:AB:5A:43:E9:83:66:EA:DD:65:27:E1:12:DE:4A:B1
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0194B75C9995A5DFCAFB9966EA1659B0D4BA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zBS75qyrWkPpg2bq3WUn4RLeSrE.roa
Signing time: Thu 30 Jan 2025 13:18:06 +0000
ROA not before: Thu 30 Jan 2025 13:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213485
IP address blocks: 2a0c:b641:240::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:5c:99:95:a5:df:ca:fb:99:66:ea:16:59:b0:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 30 13:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc14bbe6acab5a43e98366eadd6527e112de4ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:f8:25:17:a1:5f:d4:e6:ef:2c:1e:04:73:
1c:df:cc:f5:99:b0:98:e8:b7:92:b2:a9:fa:70:b5:
d7:e1:98:6b:3e:c2:d7:f6:52:11:ee:44:dc:3d:d1:
fa:18:66:9e:2d:db:57:49:20:73:1d:b1:91:86:33:
34:25:9d:71:46:01:3f:a6:8d:70:e5:8a:b1:2b:7a:
f4:59:7a:4d:57:88:86:a7:d5:2e:a8:03:f3:fa:06:
ed:86:e0:4d:9b:69:30:4c:1c:f0:60:5c:2f:0d:57:
ee:c8:13:8d:14:2a:e6:b3:11:b9:a7:ab:0a:63:17:
9e:40:19:48:02:6e:a8:49:d3:96:15:86:72:5c:e7:
ab:d5:93:df:84:34:b1:d9:8e:9c:99:e2:80:e2:3d:
e6:78:e1:71:b2:ff:5f:56:a8:a3:24:a8:be:44:fc:
18:b4:b0:61:34:99:52:dd:43:48:8f:b8:7d:5e:51:
48:16:a8:38:42:b4:29:05:5f:17:19:03:69:c5:87:
6a:e4:77:d5:46:5d:86:23:bb:62:5f:19:84:c3:3c:
ef:b6:68:6e:e9:f4:c0:a2:0e:5b:ab:22:7a:ef:27:
01:ca:d8:46:dd:58:ee:63:58:8d:3c:4f:65:4a:af:
f7:24:ea:ed:b1:50:eb:5d:0d:bc:b5:b7:fc:09:31:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:BB:E6:AC:AB:5A:43:E9:83:66:EA:DD:65:27:E1:12:DE:4A:B1
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zBS75qyrWkPpg2bq3WUn4RLeSrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:240::/44
Signature Algorithm: sha256WithRSAEncryption
74:ce:e0:cb:d3:35:90:1c:51:49:15:92:e7:1e:92:2f:40:40:
cc:f1:62:0f:62:2b:46:bf:d4:b8:e2:e9:d9:7b:f5:aa:71:8d:
75:10:3c:4e:fd:39:f1:1a:7d:72:70:1f:0c:2d:b7:47:cc:61:
ed:ba:60:6e:4b:6a:65:36:9d:49:6f:bb:33:90:08:4a:c3:a5:
f8:25:0e:0a:43:8e:b0:dd:ed:e1:7d:0c:a8:d9:41:c9:70:df:
fd:79:03:05:e2:f0:a9:ac:41:49:23:df:5f:37:9c:46:df:59:
ae:53:a1:6b:de:af:13:6e:75:53:ec:ae:b2:76:0b:3f:8d:33:
1f:62:6e:b7:e2:36:ad:7a:6d:9a:30:c9:09:f1:29:cf:aa:00:
ba:ca:9a:05:6e:9a:88:bd:0f:7e:39:46:e0:5a:fc:9e:36:a2:
36:1f:4b:e1:46:77:2a:32:8b:ec:cb:26:4c:5d:cd:a3:f4:5e:
81:02:a4:c2:0a:e9:95:fa:49:81:99:28:c0:d2:c4:40:70:88:
59:9c:a2:8c:43:18:5d:20:94:8e:02:7f:8b:1c:c7:f4:3b:a0:
9b:76:3e:57:6a:4b:85:b3:70:3f:86:3b:e0:69:84:90:46:e7:
1b:0e:3f:c3:57:45:8c:e2:23:c3:78:1e:25:83:d6:34:6c:51:
53:25:a2:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZS3XJmVpd/K+5lm6hZZsNS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTMwMTMxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzE0YmJlNmFjYWI1YTQzZTk4MzY2ZWFkZDY1MjdlMTEyZGU0YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3v4JRehX9Tm7yweBHMc38z1mbCY
6LeSsqn6cLXX4ZhrPsLX9lIR7kTcPdH6GGaeLdtXSSBzHbGRhjM0JZ1xRgE/po1w
5YqxK3r0WXpNV4iGp9UuqAPz+gbthuBNm2kwTBzwYFwvDVfuyBONFCrmsxG5p6sK
YxeeQBlIAm6oSdOWFYZyXOer1ZPfhDSx2Y6cmeKA4j3meOFxsv9fVqijJKi+RPwY
tLBhNJlS3UNIj7h9XlFIFqg4QrQpBV8XGQNpxYdq5HfVRl2GI7tiXxmEwzzvtmhu
6fTAog5bqyJ67ycBythG3VjuY1iNPE9lSq/3JOrtsVDrXQ28tbf8CTGlXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMwUu+asq1pD6YNm6t1lJ+ES3kqxMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvekJTNzVxeXJXa1BwZzJicTNXVW40UkxlU3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQJA
MA0GCSqGSIb3DQEBCwUAA4IBAQB0zuDL0zWQHFFJFZLnHpIvQEDM8WIPYitGv9S4
4unZe/WqcY11EDxO/TnxGn1ycB8MLbdHzGHtumBuS2plNp1Jb7szkAhKw6X4JQ4K
Q46w3e3hfQyo2UHJcN/9eQMF4vCprEFJI99fN5xG31muU6Fr3q8TbnVT7K6ydgs/
jTMfYm634jatem2aMMkJ8SnPqgC6ypoFbpqIvQ9+OUbgWvyeNqI2H0vhRncqMovs
yyZMXc2j9F6BAqTCCumV+kmBmSjA0sRAcIhZnKKMQxhdIJSOAn+LHMf0O6Cbdj5X
akuFs3A/hjvgaYSQRucbDj/DV0WM4iPDeB4lg9Y0bFFTJaIf
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:54 2025 by rpki-client