Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/c_BvljorzCC91xKN9SXmWQ8PZtY.roa
File: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (raw, json)
Hash identifier: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=
Subject key identifier: 73:F0:6F:96:3A:2B:CC:20:BD:D7:12:8D:F5:25:E6:59:0F:0F:66:D6
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0195DCAFE5C101288FBA23480B33CF7491B9
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/c_BvljorzCC91xKN9SXmWQ8PZtY.roa
Signing time: Fri 28 Mar 2025 12:17:49 +0000
ROA not before: Fri 28 Mar 2025 12:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 2a0e:d785::/32 maxlen: 48
2a0e:d786::/32 maxlen: 48
2a11:f881::/32 maxlen: 48
2a11:f882::/32 maxlen: 48
2a11:f885::/32 maxlen: 48
2a11:f886::/32 maxlen: 48
2a11:f887::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:af:e5:c1:01:28:8f:ba:23:48:0b:33:cf:74:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Mar 28 12:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f06f963a2bcc20bdd7128df525e6590f0f66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:35:23:54:7e:b9:1a:6b:ba:d7:a9:90:2d:
72:42:cb:23:47:0d:12:70:cb:f2:53:64:55:28:be:
6f:18:96:ac:42:57:90:30:f1:d9:59:6a:e9:88:d0:
90:99:9b:08:81:f6:e6:ee:42:4a:a1:98:ee:00:51:
ac:0a:c2:8d:42:31:86:17:5c:84:51:71:1b:73:64:
76:4d:48:7c:cc:87:38:02:a5:3d:59:ab:84:13:d4:
1a:44:83:ad:cc:f1:65:f2:50:a3:e9:e6:4f:94:40:
b4:9a:6d:84:45:84:37:81:57:e1:1a:cc:10:58:44:
de:f0:b9:b4:37:eb:ce:9e:3b:df:3a:df:e2:f3:ad:
36:8f:80:f1:a4:fc:01:dd:3e:5f:b2:d8:e0:77:5d:
c0:b1:7a:bc:4a:6a:57:ec:e8:7a:7b:f2:8f:04:64:
46:b2:2d:bd:d5:df:50:9f:e8:5d:c2:b1:a1:f9:63:
1f:75:8f:e8:5e:59:0a:fc:7a:7e:31:14:11:fd:80:
3c:81:f7:39:9f:c8:c2:4e:68:87:dc:12:30:ea:6c:
3a:af:86:7a:3c:79:1a:dc:03:d3:f6:6e:b7:f4:7a:
49:c9:02:66:39:e1:ed:d4:0c:3e:96:ab:1d:47:ea:
55:56:39:54:6f:22:d8:4e:a0:14:c0:ab:57:f7:fb:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:6F:96:3A:2B:CC:20:BD:D7:12:8D:F5:25:E6:59:0F:0F:66:D6
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/c_BvljorzCC91xKN9SXmWQ8PZtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d785::-2a0e:d786:ffff:ffff:ffff:ffff:ffff:ffff
2a11:f881::-2a11:f882:ffff:ffff:ffff:ffff:ffff:ffff
2a11:f885::-2a11:f887:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
32:05:a5:47:cc:cb:de:6e:ad:d9:18:e3:14:38:21:65:d7:73:
01:e3:b6:d7:95:c9:a2:24:fa:6e:36:2c:f2:00:90:05:5b:93:
3c:c6:ae:23:2a:c0:9b:ed:99:0c:11:92:18:a6:71:43:db:72:
2d:24:65:32:83:34:19:6c:0c:74:0e:fd:85:ce:71:bf:9a:9a:
aa:e6:36:bf:8b:52:28:f7:2c:2d:e4:30:de:9e:38:10:93:2a:
47:6c:37:50:69:01:ba:8d:cc:2f:da:5f:6a:a1:5a:df:5a:7a:
62:85:b5:ea:95:8e:cd:de:04:9b:14:78:c9:f4:43:c6:77:b7:
d7:e7:12:08:7c:33:90:af:6c:ba:a4:a6:69:4e:32:13:17:e7:
98:b5:48:a2:60:e7:60:81:95:51:b0:60:81:1b:be:72:8d:c9:
7f:ea:21:29:d0:b7:18:e6:24:9d:fe:2f:b6:eb:ac:74:e3:1d:
fb:0f:51:ff:b8:cc:b2:6e:11:0a:65:fb:03:80:1d:a7:9c:d9:
27:18:2b:09:35:ad:bb:b2:5b:19:d9:2c:af:61:56:d3:0d:a6:
2e:4e:8d:c9:79:dd:08:e6:5a:bb:44:d9:0a:fb:9f:60:5f:19:
12:7f:99:6c:38:8c:84:db:f5:db:8c:09:f0:e4:b6:a0:8a:57:
e5:60:9a:bf
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZXcr+XBASiPuiNICzPPdJG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjUwMzI4MTIxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2YwNmY5NjNhMmJjYzIwYmRkNzEyOGRmNTI1ZTY1OTBmMGY2NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10s1I1R+uRprutepkC1yQssjRw0S
cMvyU2RVKL5vGJasQleQMPHZWWrpiNCQmZsIgfbm7kJKoZjuAFGsCsKNQjGGF1yE
UXEbc2R2TUh8zIc4AqU9WauEE9QaRIOtzPFl8lCj6eZPlEC0mm2ERYQ3gVfhGswQ
WETe8Lm0N+vOnjvfOt/i8602j4DxpPwB3T5fstjgd13AsXq8SmpX7Oh6e/KPBGRG
si291d9Qn+hdwrGh+WMfdY/oXlkK/Hp+MRQR/YA8gfc5n8jCTmiH3BIw6mw6r4Z6
PHka3APT9m639HpJyQJmOeHt1Aw+lqsdR+pVVjlUbyLYTqAUwKtX9/tZ6wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFHPwb5Y6K8wgvdcSjfUl5lkPD2bWMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvY19Cdmxqb3J6Q0M5MXhLTjlTWG1XUThQWnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAAjAwMA4DBQAqDteF
AwUAKg7XhjAOAwUAKhH4gQMFACoR+IIwDgMFACoR+IUDBQMqEfiAMA0GCSqGSIb3
DQEBCwUAA4IBAQAyBaVHzMvebq3ZGOMUOCFl13MB47bXlcmiJPpuNizyAJAFW5M8
xq4jKsCb7ZkMEZIYpnFD23ItJGUygzQZbAx0Dv2FznG/mpqq5ja/i1Io9ywt5DDe
njgQkypHbDdQaQG6jcwv2l9qoVrfWnpihbXqlY7N3gSbFHjJ9EPGd7fX5xIIfDOQ
r2y6pKZpTjITF+eYtUiiYOdggZVRsGCBG75yjcl/6iEp0LcY5iSd/i+266x04x37
D1H/uMyybhEKZfsDgB2nnNknGCsJNa27slsZ2SyvYVbTDaYuTo3Jed0I5lq7RNkK
+59gXxkSf5lsOIyE2/XbjAnw5LagilflYJq/
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:27 2025 by rpki-client