Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iolIQJihdHVRpe-2wwPT8MvBCbY.roa
File: iolIQJihdHVRpe-2wwPT8MvBCbY.roa (raw, json)
Hash identifier: ubevm1zXvYGD8qLnOHvyjQo+tEIGZm0sjLjpgtOOfeM=
Subject key identifier: 8A:89:48:40:98:A1:74:75:51:A5:EF:B6:C3:03:D3:F0:CB:C1:09:B6
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A795B8CF7F610BC28FD42B6807FD
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iolIQJihdHVRpe-2wwPT8MvBCbY.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216243
IP address blocks: 2a13:a5c4::/32 maxlen: 48
2a13:a5c7:1500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a7:95:b8:cf:7f:61:0b:c2:8f:d4:2b:68:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a89484098a1747551a5efb6c303d3f0cbc109b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:ac:c4:bd:5c:ba:25:48:d2:da:f0:4a:0c:
32:1b:fe:5a:f7:29:fa:c3:05:6a:9b:d9:58:0e:57:
ba:f1:f3:9e:d1:59:37:be:02:30:4b:e3:c4:83:55:
29:7e:14:8e:0b:34:72:c2:9e:c7:e7:e9:f5:fc:9d:
15:b8:68:0e:1f:a8:1f:59:ca:dc:45:3d:2d:d1:ee:
c7:df:90:8a:10:38:fb:cd:5f:82:2d:1f:0e:de:78:
85:67:a4:aa:ff:7d:43:b4:42:8a:20:93:3a:e5:0a:
93:04:a0:c6:52:5a:22:91:5e:28:d1:2a:f3:12:16:
86:48:34:fb:d6:e0:8f:c4:c8:5a:72:ae:79:e4:c7:
69:6b:6f:eb:33:22:ef:0e:c0:c7:b7:0b:5f:ca:2d:
85:91:4f:8e:04:ea:81:dd:87:6b:87:43:08:28:80:
23:e3:ca:8d:24:aa:f1:93:86:50:d1:68:fc:4e:22:
2e:7c:d7:c4:b9:6b:42:e6:90:15:94:d4:a3:33:d0:
83:6c:a3:9c:4f:fe:27:78:b0:d8:47:8d:4d:c5:9e:
f7:74:a9:ef:92:16:fd:c0:c3:2c:5b:10:9e:c3:92:
8a:ce:10:66:fc:3b:4f:07:f8:f4:b3:4e:f8:1d:60:
31:04:42:e1:ba:a5:2c:8b:47:de:50:ff:b8:43:c6:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:48:40:98:A1:74:75:51:A5:EF:B6:C3:03:D3:F0:CB:C1:09:B6
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iolIQJihdHVRpe-2wwPT8MvBCbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c4::/32
2a13:a5c7:1500::/40
Signature Algorithm: sha256WithRSAEncryption
59:cd:58:7a:2e:e2:60:fd:70:f3:78:33:dd:41:51:67:a6:a1:
3f:e6:b5:12:0a:98:0a:b9:74:a9:4f:2f:ba:69:67:0b:86:33:
cd:dd:78:e9:58:44:eb:c6:66:e0:e4:27:95:63:79:53:f6:9e:
f9:60:be:73:8d:85:40:cb:33:4c:35:2f:a4:6b:91:ec:5a:df:
a2:48:69:9b:67:d6:d4:2e:89:66:3b:22:64:a9:fd:82:35:71:
b8:b3:90:bf:dd:17:dc:a2:c4:fd:aa:7e:b1:c0:59:2b:a0:a9:
57:ec:26:f3:d0:c3:25:8f:16:ec:07:cf:c0:cf:14:68:0c:53:
23:aa:0a:12:a3:05:ca:11:d6:fc:56:22:04:83:f9:8f:1e:70:
93:a7:bd:17:61:09:18:ae:ee:db:2f:12:8a:f7:82:de:b5:9b:
65:97:61:c4:52:01:f9:d6:21:1e:ad:e5:67:42:42:ee:a9:46:
c1:9d:56:6e:d6:e4:b9:49:4e:87:9d:bd:09:b5:19:46:7a:b0:
fd:b5:0e:05:20:ec:fc:26:4f:d9:5f:1f:e0:ff:75:50:ab:71:
51:94:37:a0:00:ab:a8:a8:48:fc:a8:c6:32:b3:ee:26:34:e6:
96:9d:b2:7f:af:14:ce:73:28:17:b2:2f:da:c6:6d:37:05:16:
4e:76:cc:36
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZQlIaeVuM9/YQvCj9QraAf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTg5NDg0MDk4YTE3NDc1NTFhNWVmYjZjMzAzZDNmMGNiYzEwOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr+sxL1cuiVI0trwSgwyG/5a9yn6
wwVqm9lYDle68fOe0Vk3vgIwS+PEg1UpfhSOCzRywp7H5+n1/J0VuGgOH6gfWcrc
RT0t0e7H35CKEDj7zV+CLR8O3niFZ6Sq/31DtEKKIJM65QqTBKDGUloikV4o0Srz
EhaGSDT71uCPxMhacq555Mdpa2/rMyLvDsDHtwtfyi2FkU+OBOqB3Ydrh0MIKIAj
48qNJKrxk4ZQ0Wj8TiIufNfEuWtC5pAVlNSjM9CDbKOcT/4neLDYR41NxZ73dKnv
khb9wMMsWxCew5KKzhBm/DtPB/j0s074HWAxBELhuqUsi0feUP+4Q8aREQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFIqJSECYoXR1UaXvtsMD0/DLwQm2MB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvaW9sSVFKaWhkSFZScGUtMnd3UFQ4TXZCQ2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAKhOlxAMG
ACoTpccVMA0GCSqGSIb3DQEBCwUAA4IBAQBZzVh6LuJg/XDzeDPdQVFnpqE/5rUS
CpgKuXSpTy+6aWcLhjPN3XjpWETrxmbg5CeVY3lT9p75YL5zjYVAyzNMNS+ka5Hs
Wt+iSGmbZ9bULolmOyJkqf2CNXG4s5C/3RfcosT9qn6xwFkroKlX7Cbz0MMljxbs
B8/AzxRoDFMjqgoSowXKEdb8ViIEg/mPHnCTp70XYQkYru7bLxKK94LetZtll2HE
UgH51iEereVnQkLuqUbBnVZu1uS5SU6Hnb0JtRlGerD9tQ4FIOz8Jk/ZXx/g/3VQ
q3FRlDegAKuoqEj8qMYys+4mNOaWnbJ/rxTOcygXsi/axm03BRZOdsw2
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:55 2025 by rpki-client