Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa
File: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (raw, json)
Hash identifier: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=
Subject key identifier: B1:08:37:50:65:23:7D:29:0E:11:A0:9E:D0:DA:5D:81:0F:0A:BA:95
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA94C573FA2DA75D307C86039A19F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a0d:87c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:4c:57:3f:a2:da:75:d3:07:c8:60:39:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b108375065237d290e11a09ed0da5d810f0aba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:d6:1e:43:2a:65:c3:11:97:42:87:b6:f8:
e7:c3:cb:57:d7:43:6f:2a:21:02:bd:ba:d4:35:9b:
af:82:c2:50:48:3b:4a:fe:51:57:7b:e7:43:c2:ad:
86:f6:79:de:da:6e:75:ed:86:0f:bd:d9:66:28:20:
55:ec:c7:0d:31:e4:b5:a7:12:a4:14:37:33:51:05:
55:ea:8b:84:71:6c:1a:62:11:7e:ad:52:dc:cf:75:
40:b6:ca:3e:bd:6f:7a:54:95:7e:dc:04:8f:c1:08:
87:17:1a:ef:52:72:71:b7:5c:44:70:3b:09:6a:64:
2e:eb:df:da:6f:5d:58:e3:bf:59:40:f0:0a:05:48:
06:c0:d1:64:f8:48:fb:a5:d8:97:35:01:67:ed:ad:
cc:87:f8:9c:ec:28:91:8e:a4:4f:08:68:90:e2:a3:
31:0f:51:90:c4:33:00:78:64:39:86:c9:52:3f:58:
c2:41:48:d1:41:38:3b:18:27:1a:3d:db:98:7e:d5:
35:ff:11:25:93:69:b8:f3:58:4b:8b:33:a3:05:89:
c0:f5:cb:97:5e:a1:6b:9c:8f:7d:48:20:12:07:a1:
46:39:a7:49:22:11:eb:02:fd:b2:20:dd:83:d7:d7:
4f:ab:5b:68:d1:11:bf:93:36:81:aa:ac:7c:47:75:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:37:50:65:23:7D:29:0E:11:A0:9E:D0:DA:5D:81:0F:0A:BA:95
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:29:1e:95:93:5b:d8:8c:af:59:71:34:9f:36:f2:95:00:0f:
cd:74:27:47:f5:1f:35:f5:43:12:30:e7:83:df:b9:ec:21:f5:
d2:32:77:2b:5d:86:4b:8f:c6:8c:ba:36:ad:66:ea:67:2c:82:
d4:66:61:61:3b:dd:e9:d8:bd:a4:89:29:cf:a2:6b:05:bc:18:
5a:31:c6:e1:e0:e2:03:ac:1c:d9:1f:ca:1c:8d:be:8d:6d:bb:
3c:b9:5b:0f:59:61:3f:92:40:2e:20:1a:f8:73:ed:48:41:1b:
6c:40:a3:55:54:b4:d6:a3:60:ab:c5:2b:cb:47:28:a6:0c:1f:
d2:4c:e3:2c:16:5e:a6:82:6d:73:c3:9c:f7:d0:7e:aa:6b:4d:
e9:29:08:c3:9d:44:ec:2e:2d:ee:d5:5f:b8:7a:97:b7:e3:42:
54:05:5a:21:76:63:e3:a8:dc:17:74:c9:7e:ab:b4:6b:0f:46:
1d:df:db:94:40:3f:c3:65:c7:1c:78:da:2d:09:b6:a4:5a:8f:
71:6f:a4:8e:23:d0:4e:6d:5b:b2:06:d0:15:32:8c:ca:7a:e2:
d3:51:6c:ee:e3:1e:bb:0c:00:fe:8d:a7:90:a3:18:dc:4d:5f:
00:d4:63:67:bf:e4:e4:82:e6:5d:f8:1e:64:1e:23:85:43:3c:
f8:0e:29:7c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma6lMVz+i2nXTB8hgOaGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTA4Mzc1MDY1MjM3ZDI5MGUxMWEwOWVkMGRhNWQ4MTBmMGFiYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jfWHkMqZcMRl0KHtvjnw8tX10Nv
KiECvbrUNZuvgsJQSDtK/lFXe+dDwq2G9nne2m517YYPvdlmKCBV7McNMeS1pxKk
FDczUQVV6ouEcWwaYhF+rVLcz3VAtso+vW96VJV+3ASPwQiHFxrvUnJxt1xEcDsJ
amQu69/ab11Y479ZQPAKBUgGwNFk+Ej7pdiXNQFn7a3Mh/ic7CiRjqRPCGiQ4qMx
D1GQxDMAeGQ5hslSP1jCQUjRQTg7GCcaPduYftU1/xElk2m481hLizOjBYnA9cuX
XqFrnI99SCASB6FGOadJIhHrAv2yIN2D19dPq1to0RG/kzaBqqx8R3VbMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLEIN1BlI30pDhGgntDaXYEPCrqVMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvc1FnM1VHVWpmU2tPRWFDZTBOcGRnUThLdXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg2HwDAN
BgkqhkiG9w0BAQsFAAOCAQEAAikelZNb2IyvWXE0nzbylQAPzXQnR/UfNfVDEjDn
g9+57CH10jJ3K12GS4/GjLo2rWbqZyyC1GZhYTvd6di9pIkpz6JrBbwYWjHG4eDi
A6wc2R/KHI2+jW27PLlbD1lhP5JALiAa+HPtSEEbbECjVVS01qNgq8Ury0copgwf
0kzjLBZepoJtc8Oc99B+qmtN6SkIw51E7C4t7tVfuHqXt+NCVAVaIXZj46jcF3TJ
fqu0aw9GHd/blEA/w2XHHHjaLQm2pFqPcW+kjiPQTm1bsgbQFTKMynri01Fs7uMe
uwwA/o2nkKMY3E1fANRjZ7/k5ILmXfgeZB4jhUM8+A4pfA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:55 2025 by rpki-client