Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9CjEL92KVQbBIKjAH6PWgI9d9kA.roa
File: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (raw, json)
Hash identifier: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=
Subject key identifier: F4:28:C4:2F:DD:8A:55:06:C1:20:A8:C0:1F:A3:D6:80:8F:5D:F6:40
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDF327EE72243FA55B4DB3B68D09C
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9CjEL92KVQbBIKjAH6PWgI9d9kA.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215544
IP address blocks: 2a04:5b81:2140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:32:7e:e7:22:43:fa:55:b4:db:3b:68:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f428c42fdd8a5506c120a8c01fa3d6808f5df640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:d0:14:69:d6:36:8e:70:f3:19:8f:9a:d8:
61:4b:3a:01:08:ce:fb:9d:18:0b:cd:41:66:9a:c4:
1a:8a:43:37:5f:49:bc:22:57:20:e2:4c:72:23:34:
aa:a7:40:50:e7:e7:87:5b:79:35:7d:f4:95:ff:44:
b3:5a:44:e9:89:4f:6e:3f:22:6c:7c:64:74:88:8f:
32:b1:3f:5c:41:81:9b:d8:31:63:b9:0d:9e:4e:26:
cd:1f:cd:47:df:d0:b5:ef:16:4e:da:c9:52:bd:13:
df:fb:a9:f6:25:05:9e:a8:8d:27:46:6f:17:a0:7e:
20:da:c0:22:96:94:54:f7:bc:07:82:c9:2b:7e:56:
0b:91:8c:15:af:80:82:d8:62:2d:33:26:e0:12:3c:
5a:49:b9:88:4c:a7:6e:d6:d0:47:61:72:c3:55:22:
bc:42:65:0f:74:03:ef:e3:fd:2f:f0:6f:b4:0c:88:
39:49:b5:4d:44:0e:7e:51:a2:ca:5c:09:56:23:be:
13:20:c9:80:0e:9b:72:55:fb:2b:41:f6:6d:a9:c7:
51:63:29:80:b9:52:ab:4e:3b:04:83:eb:0d:49:75:
b0:32:05:5a:75:11:ba:2a:7c:71:d9:17:b7:76:8e:
e9:e9:f8:a6:22:08:1c:b0:30:b2:db:95:31:02:63:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:C4:2F:DD:8A:55:06:C1:20:A8:C0:1F:A3:D6:80:8F:5D:F6:40
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9CjEL92KVQbBIKjAH6PWgI9d9kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2140::/44
Signature Algorithm: sha256WithRSAEncryption
b1:5c:32:13:1e:d1:58:e3:d3:a6:d6:8a:fb:16:79:af:76:d2:
84:e8:4d:6a:aa:e4:d5:10:15:8a:23:61:a1:a8:24:ef:51:be:
0c:00:5d:15:6b:49:19:54:66:a3:c9:27:86:0d:2a:49:9b:ce:
ac:9e:9f:b1:6f:d3:06:6c:9c:c2:77:aa:d2:a0:50:fb:13:c8:
bd:74:a3:05:76:72:cd:3d:bd:63:21:cb:1b:2c:bf:15:28:c8:
45:18:a4:10:da:d1:4a:bf:e8:eb:a8:24:ba:cd:dd:9b:bc:50:
d7:42:2d:2a:16:5c:e9:62:7f:5e:99:0d:7c:c7:9d:fa:f2:d2:
47:40:64:9e:0f:7c:a5:a4:cd:6c:fb:0d:d0:bf:38:cf:32:a0:
69:21:1d:e7:8b:67:9d:12:30:cb:2d:97:59:10:55:62:54:7b:
27:fc:70:14:54:a8:62:36:09:3a:e4:ee:c1:9f:3a:86:5a:f5:
c3:47:52:bc:7b:12:bd:e5:70:79:a9:01:7b:52:d5:97:46:85:
d3:0f:e5:f8:3e:30:c9:05:d4:b3:c4:12:c5:8d:a4:81:70:99:
ff:71:8c:81:35:b6:f5:b6:fb:a3:ee:34:e0:36:e1:ed:05:07:
bc:d3:a6:a5:10:00:c5:78:f7:54:56:09:1a:f5:db:fe:5b:1e:
2a:77:0a:c0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma98yfuciQ/pVtNs7aNCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjUwMTAyMDk0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDI4YzQyZmRkOGE1NTA2YzEyMGE4YzAxZmEzZDY4MDhmNWRmNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmnQFGnWNo5w8xmPmthhSzoBCM77
nRgLzUFmmsQaikM3X0m8Ilcg4kxyIzSqp0BQ5+eHW3k1ffSV/0SzWkTpiU9uPyJs
fGR0iI8ysT9cQYGb2DFjuQ2eTibNH81H39C17xZO2slSvRPf+6n2JQWeqI0nRm8X
oH4g2sAilpRU97wHgskrflYLkYwVr4CC2GItMybgEjxaSbmITKdu1tBHYXLDVSK8
QmUPdAPv4/0v8G+0DIg5SbVNRA5+UaLKXAlWI74TIMmADptyVfsrQfZtqcdRYymA
uVKrTjsEg+sNSXWwMgVadRG6Knxx2Re3do7p6fimIggcsDCy25UxAmNuqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPQoxC/dilUGwSCowB+j1oCPXfZAMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvOUNqRUw5MktWUWJCSUtqQUg2UFdnSTlkOWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSFA
MA0GCSqGSIb3DQEBCwUAA4IBAQCxXDITHtFY49Om1or7FnmvdtKE6E1qquTVEBWK
I2GhqCTvUb4MAF0Va0kZVGajySeGDSpJm86snp+xb9MGbJzCd6rSoFD7E8i9dKMF
dnLNPb1jIcsbLL8VKMhFGKQQ2tFKv+jrqCS6zd2bvFDXQi0qFlzpYn9emQ18x536
8tJHQGSeD3ylpM1s+w3QvzjPMqBpIR3ni2edEjDLLZdZEFViVHsn/HAUVKhiNgk6
5O7BnzqGWvXDR1K8exK95XB5qQF7UtWXRoXTD+X4PjDJBdSzxBLFjaSBcJn/cYyB
Nbb1tvuj7jTgNuHtBQe806alEADFePdUVgka9dv+Wx4qdwrA
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:14 2025 by rpki-client