Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa
File: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (raw, json)
Hash identifier: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=
Subject key identifier: 39:F8:07:22:62:1C:3D:4D:6A:A9:F0:6C:23:D3:79:65:7B:22:3C:D1
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219BA263A8CFE1B9A7E885D19194D4
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142551
IP address blocks: 2a13:a5c7:1200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9b:a2:63:a8:cf:e1:b9:a7:e8:85:d1:91:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39f80722621c3d4d6aa9f06c23d379657b223cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:c9:95:62:e3:3b:86:13:28:84:c4:d6:a4:
ba:ed:d8:6f:da:3f:8c:08:36:25:71:35:28:48:a0:
61:8f:f3:fb:a9:08:03:8c:ae:84:02:08:5d:e3:ff:
a7:c8:65:52:32:33:03:4a:3a:56:b2:4a:cf:e7:57:
a3:02:ab:12:7e:ae:5b:4a:ae:4a:ec:a2:2b:e5:0c:
66:f8:59:f3:75:e8:ee:be:45:2a:1d:67:49:01:69:
c7:0c:d1:34:b5:04:4e:d4:a0:ef:dd:ca:26:5e:8a:
9f:bc:27:87:2a:54:93:f3:96:de:ab:2f:67:07:e9:
06:8c:ee:99:8c:6a:76:4c:6f:be:f5:8f:a1:bb:ed:
95:53:50:b1:d4:2d:3f:cc:ea:43:57:53:5e:d8:b4:
bb:f6:1b:2d:44:b2:e8:72:09:03:88:78:db:9d:6b:
eb:75:f3:a3:c3:c4:d5:de:10:5d:ca:0b:34:af:6e:
1d:03:16:f4:18:b5:6d:90:6f:9a:d3:37:65:16:d1:
66:43:b5:5f:ec:aa:1e:a5:43:5b:21:35:52:ef:fe:
61:db:5b:19:e8:38:38:5d:33:ca:40:27:1b:73:d8:
84:23:39:06:07:57:1d:7c:9c:f6:52:ff:b4:e9:23:
c0:e6:56:97:d5:72:47:3b:08:51:17:bc:81:e9:af:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:07:22:62:1C:3D:4D:6A:A9:F0:6C:23:D3:79:65:7B:22:3C:D1
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1200::/40
Signature Algorithm: sha256WithRSAEncryption
76:b8:5f:0c:f0:1d:18:78:a7:e5:6a:b0:4f:42:04:e0:3a:45:
d7:f8:ce:91:78:05:fd:5f:ab:ba:2f:95:a3:0c:bc:a1:32:eb:
38:b3:10:b8:11:d4:da:ec:fd:1d:ed:b5:3b:bb:38:f4:e1:d6:
fb:43:80:90:ef:91:6b:75:95:50:c6:13:52:2c:d8:6e:27:2a:
f2:6a:07:6a:97:c4:3f:30:22:bb:be:22:df:e3:81:e2:25:b7:
8c:a7:b5:d9:5e:07:b3:0d:45:df:d4:cd:93:91:83:e7:2f:3f:
4c:51:3b:ca:13:a3:16:a9:f1:71:3f:7c:57:1e:af:64:bf:4f:
a0:af:c2:96:b4:89:56:c9:59:f3:6c:a9:3d:f9:c6:d6:88:65:
73:1b:07:d1:ca:15:39:06:48:9c:3a:7b:be:bb:6a:83:95:aa:
c4:62:57:6e:17:b2:7c:27:10:a8:42:88:60:b3:b7:38:ba:16:
64:a6:85:e0:27:f7:f7:10:f6:27:de:d1:9f:2b:a4:eb:4a:36:
e8:9a:d4:43:ad:ac:99:7a:47:5e:38:79:58:ad:35:08:c9:87:
93:f2:b6:f4:0f:e3:22:c3:c0:28:82:48:22:1b:56:e4:7c:76:
dd:c1:4a:7e:a9:f6:3e:e0:5d:c1:8f:65:02:72:73:b2:ec:53:
20:74:49:e8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlIZuiY6jP4bmn6IXRkZTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWY4MDcyMjYyMWMzZDRkNmFhOWYwNmMyM2QzNzk2NTdiMjIzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/vJlWLjO4YTKITE1qS67dhv2j+M
CDYlcTUoSKBhj/P7qQgDjK6EAghd4/+nyGVSMjMDSjpWskrP51ejAqsSfq5bSq5K
7KIr5Qxm+FnzdejuvkUqHWdJAWnHDNE0tQRO1KDv3comXoqfvCeHKlST85beqy9n
B+kGjO6ZjGp2TG++9Y+hu+2VU1Cx1C0/zOpDV1Ne2LS79hstRLLocgkDiHjbnWvr
dfOjw8TV3hBdygs0r24dAxb0GLVtkG+a0zdlFtFmQ7Vf7KoepUNbITVS7/5h21sZ
6Dg4XTPKQCcbc9iEIzkGB1cdfJz2Uv+06SPA5laX1XJHOwhRF7yB6a9K/QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDn4ByJiHD1NaqnwbCPTeWV7IjzRMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvT2ZnSEltSWNQVTFxcWZCc0k5TjVaWHNpUE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxIw
DQYJKoZIhvcNAQELBQADggEBAHa4XwzwHRh4p+VqsE9CBOA6Rdf4zpF4Bf1fq7ov
laMMvKEy6zizELgR1Nrs/R3ttTu7OPTh1vtDgJDvkWt1lVDGE1Is2G4nKvJqB2qX
xD8wIru+It/jgeIlt4yntdleB7MNRd/UzZORg+cvP0xRO8oToxap8XE/fFcer2S/
T6Cvwpa0iVbJWfNsqT35xtaIZXMbB9HKFTkGSJw6e767aoOVqsRiV24XsnwnEKhC
iGCztzi6FmSmheAn9/cQ9ife0Z8rpOtKNuia1EOtrJl6R144eVitNQjJh5PytvQP
4yLDwCiCSCIbVuR8dt3BSn6p9j7gXcGPZQJyc7LsUyB0Seg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:36 2025 by rpki-client