Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/awP_9rkml_sm7zeUyIk-hWOcaNM.roa
File: awP_9rkml_sm7zeUyIk-hWOcaNM.roa (raw, json)
Hash identifier: /WFwmRIxgInGSPEa5mh27hc+5dvYTjv7SOciwYm7Yqo=
Subject key identifier: 6B:03:FF:F6:B9:26:97:FB:26:EF:37:94:C8:89:3E:85:63:9C:68:D3
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BFDD811CF2D453992495E3ED79AB
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/awP_9rkml_sm7zeUyIk-hWOcaNM.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a05:b0c4:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bf:dd:81:1c:f2:d4:53:99:24:95:e3:ed:79:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b03fff6b92697fb26ef3794c8893e85639c68d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:68:6e:c8:03:3f:08:8f:35:3d:4c:08:43:
50:7e:07:13:c3:9e:26:8d:00:fc:57:1c:18:87:bc:
97:a5:7e:00:f4:8d:ba:da:88:66:66:b2:d7:67:59:
08:e4:33:41:f8:4b:3d:b2:4d:c3:c6:b9:38:60:c7:
f4:d9:de:a9:76:da:60:d8:37:5c:8c:38:08:25:69:
38:1f:dd:b7:86:74:8e:21:b3:c5:c7:c0:08:1a:a5:
65:59:21:3a:72:b2:1e:e4:f5:02:d9:af:39:74:4c:
35:91:6e:8b:a8:80:ef:12:55:1a:80:f3:2a:c9:41:
1f:53:76:4b:bd:c4:05:49:f4:49:ea:6f:5a:58:eb:
00:bb:3a:b1:0e:17:e5:9e:82:02:d0:02:35:ed:52:
46:33:e0:a0:f7:b6:d0:83:c6:90:50:03:70:0a:bf:
a9:52:d7:ae:0d:18:2e:dc:7f:7f:5d:d3:41:a9:d1:
37:bc:5a:11:c4:58:d1:d1:9c:5b:93:47:ec:a1:21:
81:c2:23:ac:dd:d9:c9:b6:68:ce:99:ff:20:5d:e1:
f2:34:93:68:1c:67:d3:01:e3:99:09:3a:f3:d1:76:
16:dd:6d:71:be:68:77:8f:a6:d0:ad:f2:d9:b8:44:
35:f7:8a:a2:7f:03:94:49:81:b5:8a:f9:23:60:34:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:FF:F6:B9:26:97:FB:26:EF:37:94:C8:89:3E:85:63:9C:68:D3
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/awP_9rkml_sm7zeUyIk-hWOcaNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c4:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:92:20:73:c7:e4:cc:8a:c8:b1:6b:f5:00:16:e6:0e:ca:bf:
c3:ad:0c:06:cc:fb:94:4a:55:9e:de:bc:cd:65:0a:d5:ba:45:
1c:61:1f:27:13:a7:44:89:58:01:7b:73:f8:75:43:67:ac:a4:
3b:fb:ae:fc:29:2c:f6:1b:90:49:f7:03:b5:9a:36:96:29:04:
a3:93:de:b3:e0:24:7c:0f:c3:5d:d8:76:29:9c:2c:e4:69:c7:
14:82:12:a1:44:82:44:94:ea:27:9a:f0:90:95:ad:44:d1:e1:
61:95:f3:2c:0d:59:f9:a9:72:e5:c9:11:d3:dc:68:ac:12:33:
b2:db:31:64:37:4c:79:48:3a:3d:95:d9:48:f4:20:ea:e9:62:
a5:80:c0:53:ec:66:d6:30:25:d0:72:e0:b4:2a:d7:e9:bd:ae:
35:a1:ed:f2:5f:a4:d0:00:bf:53:e6:ca:1f:d2:49:4a:b3:c3:
48:d4:84:83:81:2f:b1:26:2b:31:d2:da:ed:5c:cb:25:40:db:
a6:6b:ca:25:a7:d4:d3:b4:64:a9:b0:f3:f7:f0:20:65:32:ec:
69:20:28:68:96:9a:3c:ae:c0:fd:3f:f2:7b:c7:d3:90:ba:72:
5b:ca:28:10:7c:84:14:b5:04:4e:37:53:72:a8:e8:68:90:0b:
e4:24:13:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR7/dgRzy1FOZJJXj7XmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwMTAyMTM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjAzZmZmNmI5MjY5N2ZiMjZlZjM3OTRjODg5M2U4NTYzOWM2OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDZobsgDPwiPNT1MCENQfgcTw54m
jQD8VxwYh7yXpX4A9I262ohmZrLXZ1kI5DNB+Es9sk3Dxrk4YMf02d6pdtpg2Ddc
jDgIJWk4H923hnSOIbPFx8AIGqVlWSE6crIe5PUC2a85dEw1kW6LqIDvElUagPMq
yUEfU3ZLvcQFSfRJ6m9aWOsAuzqxDhflnoIC0AI17VJGM+Cg97bQg8aQUANwCr+p
UteuDRgu3H9/XdNBqdE3vFoRxFjR0Zxbk0fsoSGBwiOs3dnJtmjOmf8gXeHyNJNo
HGfTAeOZCTrz0XYW3W1xvmh3j6bQrfLZuEQ194qifwOUSYG1ivkjYDQJeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGsD//a5Jpf7Ju83lMiJPoVjnGjTMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvYXdQXzlya21sX3NtN3plVXlJay1oV09jYU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWwxAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQASkiBzx+TMisixa/UAFuYOyr/DrQwGzPuUSlWe
3rzNZQrVukUcYR8nE6dEiVgBe3P4dUNnrKQ7+678KSz2G5BJ9wO1mjaWKQSjk96z
4CR8D8Nd2HYpnCzkaccUghKhRIJElOonmvCQla1E0eFhlfMsDVn5qXLlyRHT3Gis
EjOy2zFkN0x5SDo9ldlI9CDq6WKlgMBT7GbWMCXQcuC0Ktfpva41oe3yX6TQAL9T
5sof0klKs8NI1ISDgS+xJisx0trtXMslQNuma8olp9TTtGSpsPP38CBlMuxpICho
lpo8rsD9P/J7x9OQunJbyigQfIQUtQRON1NyqOhokAvkJBPI
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:23:41 2025 by rpki-client