Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa
File: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (raw, json)
Hash identifier: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=
Subject key identifier: 10:C9:F1:0B:03:84:5A:18:4F:BA:08:EB:71:9D:E3:B5:80:1B:88:97
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01941F8C3F780FDDF5E620FB0E769E9E076D
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46407
IP address blocks: 2a05:f480:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:78:0f:dd:f5:e6:20:fb:0e:76:9e:9e:07:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c9f10b03845a184fba08eb719de3b5801b8897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:f4:be:64:5f:b0:f8:a3:3e:8c:ee:cf:3e:
3e:c9:d3:f1:c3:3a:48:97:c4:93:86:09:14:ce:7e:
df:6b:81:84:63:97:6e:09:1e:31:7d:4e:67:c7:b9:
e5:f0:dc:a6:a7:e7:af:89:9f:9d:92:81:2c:31:0f:
bf:0f:9d:b2:50:5c:90:41:3a:0c:ef:f0:e2:4c:14:
db:f5:de:6e:59:69:f4:89:5d:af:a8:f3:0d:38:55:
98:5a:46:c2:80:cd:a6:b9:85:fa:5c:5d:ad:97:0e:
6d:4d:d3:00:34:e0:f0:ee:70:d8:c2:84:a4:20:a6:
49:b6:be:01:4c:e7:1c:b0:a8:15:62:ff:30:0c:d1:
04:f2:0d:28:be:b8:e2:42:78:44:68:5b:92:cf:e1:
43:d2:d7:eb:1e:b6:8c:5d:5a:f9:ae:5f:b4:ca:75:
8a:3f:1f:93:bb:3e:9c:84:4c:7c:d0:a3:b0:c4:43:
fe:82:39:72:a5:08:02:e8:5e:76:68:be:74:c5:be:
24:32:b0:cf:c2:9a:54:64:a7:04:04:77:2a:51:c7:
1a:a2:75:f2:d9:a0:f6:4b:ce:3c:c6:d8:a7:7f:19:
86:61:04:a1:cd:7d:76:fe:34:46:72:1f:a5:cd:20:
40:b1:64:ee:77:6a:1a:88:1e:b2:74:78:19:70:a0:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:F1:0B:03:84:5A:18:4F:BA:08:EB:71:9D:E3:B5:80:1B:88:97
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f480:10::/48
Signature Algorithm: sha256WithRSAEncryption
8c:bc:23:79:ad:a0:d3:94:78:8d:2d:a6:18:16:6d:91:56:21:
8a:8c:0f:f5:5b:3f:e5:3f:6f:26:7e:7f:dc:c8:3e:15:63:86:
8e:71:6b:67:ab:b2:a6:25:8d:9f:99:c1:ff:67:79:4a:cf:71:
50:54:8d:56:24:fe:6c:e9:05:ee:32:db:eb:36:26:41:99:ac:
68:44:40:f5:01:88:c8:c7:c7:59:e2:6c:18:2d:41:c4:fa:d6:
e9:4e:a1:89:72:45:43:2f:fe:bc:90:71:93:6a:39:5b:59:ce:
3f:cc:33:1b:d9:71:83:a1:f4:05:d6:87:0f:85:f2:f7:a2:86:
6b:b7:26:8f:86:94:64:56:6f:cf:ac:63:19:3d:7b:dd:66:f0:
65:7f:da:53:d9:20:ba:9d:fd:3c:cc:3b:3e:86:75:d7:1b:2f:
cb:34:53:d6:75:3d:d9:ca:ed:1c:08:75:c3:87:55:7d:f3:65:
37:a5:ee:27:ae:b6:aa:6f:3b:a1:d4:be:c4:e3:d4:ca:49:e9:
4c:3c:40:68:2b:62:74:f3:67:27:16:43:22:ed:2e:c7:9c:4d:
0f:df:25:47:9c:5b:21:60:cc:99:00:1e:bb:ae:12:05:8d:76:
47:e0:0f:c1:3b:4b:37:06:96:fb:21:36:db:36:cf:dc:2f:26:
fb:ae:3a:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjD94D9315iD7DnaengdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2I3NjY5Njg3MTYyOTZlNWJiYTBiY2U4Mzg1NmFlNzE2
NWI4YjgwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM5ZjEwYjAzODQ1YTE4NGZiYTA4ZWI3MTlkZTNiNTgwMWI4ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaf0vmRfsPijPozuzz4+ydPxwzpI
l8SThgkUzn7fa4GEY5duCR4xfU5nx7nl8Nymp+eviZ+dkoEsMQ+/D52yUFyQQToM
7/DiTBTb9d5uWWn0iV2vqPMNOFWYWkbCgM2muYX6XF2tlw5tTdMANODw7nDYwoSk
IKZJtr4BTOccsKgVYv8wDNEE8g0ovrjiQnhEaFuSz+FD0tfrHraMXVr5rl+0ynWK
Px+Tuz6chEx80KOwxEP+gjlypQgC6F52aL50xb4kMrDPwppUZKcEBHcqUccaonXy
2aD2S848xtinfxmGYQShzX12/jRGch+lzSBAsWTud2oaiB6ydHgZcKCMYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBDJ8QsDhFoYT7oI63Gd47WAG4iXMB8GA1UdIwQY
MBaAFLh7dmlocWKW5bugvOg4Vq5xZbi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMt
M2Q2MTJmMzI0OTk2LzEvRU1ueEN3T0VXaGhQdWdqcmNaM2p0WUFiaUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMtM2Q2MTJmMzI0OTk2
LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgX0gAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCMvCN5raDTlHiNLaYYFm2RViGKjA/1Wz/lP28m
fn/cyD4VY4aOcWtnq7KmJY2fmcH/Z3lKz3FQVI1WJP5s6QXuMtvrNiZBmaxoRED1
AYjIx8dZ4mwYLUHE+tbpTqGJckVDL/68kHGTajlbWc4/zDMb2XGDofQF1ocPhfL3
ooZrtyaPhpRkVm/PrGMZPXvdZvBlf9pT2SC6nf08zDs+hnXXGy/LNFPWdT3Zyu0c
CHXDh1V982U3pe4nrraqbzuh1L7E49TKSelMPEBoK2J082cnFkMi7S7HnE0P3yVH
nFshYMyZAB67rhIFjXZH4A/BO0s3Bpb7ITbbNs/cLyb7rjqL
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:56:34 2025 by rpki-client