Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa
File: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (raw, json)
Hash identifier: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=
Subject key identifier: AE:FC:9B:EC:A8:3B:54:79:8E:F5:79:E9:14:78:B5:AA:8C:25:09:EE
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 0194236A45218DFEE59280CCD62C8589A086
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49490
IP address blocks: 213.217.8.0/24 maxlen: 24
2a12:d980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:21:8d:fe:e5:92:80:cc:d6:2c:85:89:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aefc9beca83b54798ef579e91478b5aa8c2509ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:5d:3b:49:c4:2d:54:f2:78:2b:fd:95:66:
dd:7f:85:1c:56:b0:b6:6f:7f:c1:0b:e9:64:5d:29:
61:85:23:fd:fe:84:c1:56:14:ea:38:df:c5:56:b6:
df:e8:1b:58:90:25:2b:56:38:48:69:3c:24:6d:b3:
38:ce:2f:77:24:88:3a:9a:74:d2:97:ea:9e:ec:ae:
0d:bf:56:ed:8b:eb:ff:7a:10:23:cd:bc:fb:cd:64:
23:77:d2:0d:9a:bc:2c:30:44:76:3d:a6:f6:80:c5:
28:1e:f7:51:b7:89:ba:1c:67:7b:0d:4b:ad:1c:c5:
b6:a4:22:6e:9d:7a:8a:2e:36:d9:38:7f:27:4f:54:
0e:49:b3:8d:5b:c7:ce:ca:bf:77:af:99:43:f5:b4:
a8:11:c2:b9:86:f5:2c:66:61:d1:be:00:88:3f:ef:
43:9a:5e:94:66:4b:2e:87:83:fa:0d:a8:58:1a:02:
5d:de:5e:4e:d7:8a:1b:65:f2:a2:57:f6:48:fa:4a:
d7:be:35:a4:30:aa:e9:c0:cc:61:bb:68:c6:2d:fb:
db:95:10:8b:e2:38:ab:29:e4:4c:8f:b2:cf:ce:cb:
be:8d:8d:75:8a:f5:6d:e0:5c:95:3c:66:43:16:93:
d5:f9:4f:76:aa:05:f8:aa:cf:88:40:f8:ed:1d:cb:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:9B:EC:A8:3B:54:79:8E:F5:79:E9:14:78:B5:AA:8C:25:09:EE
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.8.0/24
IPv6:
2a12:d980::/32
Signature Algorithm: sha256WithRSAEncryption
12:4f:14:a9:12:18:b7:b1:ee:e9:67:ae:61:5f:d1:43:67:6b:
5f:bd:c4:2d:19:44:0e:41:f0:30:bc:b9:f7:35:c8:3e:36:73:
c3:67:62:30:89:c7:88:c3:ef:2c:80:f7:b3:17:57:3a:0f:f4:
d5:dc:1a:9a:53:36:fe:5f:87:ae:35:97:db:6f:ef:dd:6e:c5:
5d:19:df:11:06:a7:ff:74:2e:cf:93:de:78:df:b9:67:e6:bb:
6f:35:4e:b1:63:0e:cc:22:e0:fa:ae:80:28:c6:de:13:b4:ce:
6a:99:aa:0e:6f:70:ce:f3:67:15:6c:93:80:d7:3e:13:a0:99:
58:5d:2f:99:f9:f3:47:6b:3c:0d:11:e6:42:f0:17:3e:c3:6a:
fc:89:ff:2b:1e:47:ee:e7:b9:b0:9e:7a:4a:f2:42:9d:c8:8a:
e6:77:45:c6:68:00:e7:7a:bf:14:3e:42:d5:f3:33:8c:e0:19:
b3:78:ae:e4:86:d6:45:01:71:f2:13:a1:03:3a:41:36:ae:8b:
e7:2b:58:27:ce:ad:4c:53:d5:70:56:5f:42:bb:05:bf:f5:45:
06:e3:99:8b:22:21:0a:22:23:7e:9b:55:3b:cd:39:dc:fd:3f:
ab:99:f7:93:6e:34:93:fd:6d:66:d2:a7:4a:aa:e8:51:f0:5e:
82:c5:bd:20
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjakUhjf7lkoDM1iyFiaCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjUwMTAxMTk0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWZjOWJlY2E4M2I1NDc5OGVmNTc5ZTkxNDc4YjVhYThjMjUwOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EldO0nELVTyeCv9lWbdf4UcVrC2
b3/BC+lkXSlhhSP9/oTBVhTqON/FVrbf6BtYkCUrVjhIaTwkbbM4zi93JIg6mnTS
l+qe7K4Nv1bti+v/ehAjzbz7zWQjd9INmrwsMER2Pab2gMUoHvdRt4m6HGd7DUut
HMW2pCJunXqKLjbZOH8nT1QOSbONW8fOyr93r5lD9bSoEcK5hvUsZmHRvgCIP+9D
ml6UZksuh4P6DahYGgJd3l5O14obZfKiV/ZI+krXvjWkMKrpwMxhu2jGLfvblRCL
4jirKeRMj7LPzsu+jY11ivVt4FyVPGZDFpPV+U92qgX4qs+IQPjtHctdhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK78m+yoO1R5jvV56RR4taqMJQnuMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvcnZ5YjdLZzdWSG1POVhucEZIaTFxb3dsQ2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1dkIMA0E
AgACMAcDBQAqEtmAMA0GCSqGSIb3DQEBCwUAA4IBAQASTxSpEhi3se7pZ65hX9FD
Z2tfvcQtGUQOQfAwvLn3Ncg+NnPDZ2IwiceIw+8sgPezF1c6D/TV3BqaUzb+X4eu
NZfbb+/dbsVdGd8RBqf/dC7Pk95437ln5rtvNU6xYw7MIuD6roAoxt4TtM5qmaoO
b3DO82cVbJOA1z4ToJlYXS+Z+fNHazwNEeZC8Bc+w2r8if8rHkfu57mwnnpK8kKd
yIrmd0XGaADner8UPkLV8zOM4BmzeK7khtZFAXHyE6EDOkE2rovnK1gnzq1MU9Vw
Vl9CuwW/9UUG45mLIiEKIiN+m1U7zTnc/T+rmfeTbjST/W1m0qdKquhR8F6Cxb0g
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:25 2025 by rpki-client