Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa
File: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (raw, json)
Hash identifier: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=
Subject key identifier: 48:46:57:E5:F5:21:26:15:BB:93:5A:97:BC:45:40:60:33:5B:D1:B2
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DB88D2B871DE77098FF51EFA6993E
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21738
IP address blocks: 2a01:e286::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b8:8d:2b:87:1d:e7:70:98:ff:51:ef:a6:99:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484657e5f5212615bb935a97bc454060335bd1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:04:97:cc:0f:c0:ea:e5:63:e6:84:ee:fe:
1a:a1:4b:69:48:6e:46:65:82:bf:71:9e:03:ab:d1:
42:0a:64:b4:e8:57:d9:57:20:20:09:e8:47:63:8b:
9a:53:d9:2c:76:10:c1:12:9b:2f:dd:08:48:f4:18:
b2:ec:90:b3:6b:92:17:62:40:a7:9a:c0:db:7b:01:
2c:65:6a:7f:6a:3f:3d:ca:f2:10:69:02:f5:17:9d:
0c:50:97:f8:5a:56:41:68:3c:7d:fc:ea:43:96:b3:
7e:00:eb:d3:8a:7c:e9:85:1c:e2:1f:5b:24:41:57:
d1:85:07:c6:17:55:e9:59:89:08:83:5c:70:db:fd:
dd:e3:9c:7c:54:46:ff:34:7b:7f:f1:94:68:c3:39:
d9:1a:6a:7e:47:1a:15:c3:12:9d:ee:f7:4d:d2:77:
d5:8a:c5:fb:c5:67:17:90:0e:7f:2c:6a:08:24:bc:
a5:6c:72:da:e9:1c:3b:89:51:9e:e3:9d:02:e7:f6:
92:3e:91:df:31:2d:82:21:5a:bf:3c:c3:2c:4b:0e:
de:5f:83:1d:b3:ed:ae:b2:45:f1:bd:52:d5:c2:fe:
46:09:92:5b:94:d4:30:45:13:e6:a7:98:f3:11:41:
60:7f:07:31:49:34:28:1c:f2:bf:b8:e7:ff:bd:a6:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:57:E5:F5:21:26:15:BB:93:5A:97:BC:45:40:60:33:5B:D1:B2
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e286::/32
Signature Algorithm: sha256WithRSAEncryption
72:9e:14:f2:10:9a:fe:b6:42:1b:0e:a8:53:99:cd:36:b2:0d:
ad:c6:d4:b5:02:47:0e:51:7b:db:74:0c:89:13:36:d6:9d:c5:
ce:1c:a6:0a:25:30:89:95:51:9e:43:cb:fa:11:02:00:87:36:
e9:a7:9f:18:e0:df:a4:38:33:d5:e4:a5:a6:7b:d2:8b:cd:38:
ba:57:b8:b3:e5:e2:43:7b:c1:c4:50:04:b4:b3:98:2f:52:81:
b6:92:6b:88:2d:4f:ed:ec:74:0f:bf:46:c5:3a:4b:f9:20:db:
f8:51:47:0a:09:64:2f:d2:39:80:8b:ca:2b:8c:8e:04:c3:f5:
cf:ab:68:1c:b7:fb:ce:19:14:74:27:c3:fa:b9:ad:a5:91:4d:
52:d6:a0:80:d6:82:b3:e0:2f:fa:06:b5:bc:1f:41:8f:45:21:
54:f2:10:02:ba:98:fb:55:6e:20:2a:f7:d9:21:f1:8e:7c:88:
85:57:28:03:6a:10:da:1f:04:e6:f1:43:cb:b8:4c:7e:3e:b1:
aa:83:fb:85:1f:47:44:e3:6d:db:e0:89:4b:07:67:ab:c6:51:
15:21:b0:26:08:7a:73:0e:dc:f7:a5:f8:bf:e6:f6:73:99:c5:
51:f1:1c:ec:22:22:1b:35:2f:65:7f:39:b4:e7:2e:0d:97:c6:
79:d0:30:ae
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijbiNK4cd53CY/1Hvppk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwMTAxMTU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ2NTdlNWY1MjEyNjE1YmI5MzVhOTdiYzQ1NDA2MDMzNWJkMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHEEl8wPwOrlY+aE7v4aoUtpSG5G
ZYK/cZ4Dq9FCCmS06FfZVyAgCehHY4uaU9ksdhDBEpsv3QhI9Biy7JCza5IXYkCn
msDbewEsZWp/aj89yvIQaQL1F50MUJf4WlZBaDx9/OpDlrN+AOvTinzphRziH1sk
QVfRhQfGF1XpWYkIg1xw2/3d45x8VEb/NHt/8ZRowznZGmp+RxoVwxKd7vdN0nfV
isX7xWcXkA5/LGoIJLylbHLa6Rw7iVGe450C5/aSPpHfMS2CIVq/PMMsSw7eX4Md
s+2uskXxvVLVwv5GCZJblNQwRRPmp5jzEUFgfwcxSTQoHPK/uOf/vaZZmwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEhGV+X1ISYVu5Nal7xFQGAzW9GyMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEvU0VaWDVmVWhKaFc3azFxWHZFVkFZRE5iMGJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHihjAN
BgkqhkiG9w0BAQsFAAOCAQEAcp4U8hCa/rZCGw6oU5nNNrINrcbUtQJHDlF723QM
iRM21p3FzhymCiUwiZVRnkPL+hECAIc26aefGODfpDgz1eSlpnvSi804ule4s+Xi
Q3vBxFAEtLOYL1KBtpJriC1P7ex0D79GxTpL+SDb+FFHCglkL9I5gIvKK4yOBMP1
z6toHLf7zhkUdCfD+rmtpZFNUtaggNaCs+Av+ga1vB9Bj0UhVPIQArqY+1VuICr3
2SHxjnyIhVcoA2oQ2h8E5vFDy7hMfj6xqoP7hR9HRONt2+CJSwdnq8ZRFSGwJgh6
cw7c96X4v+b2c5nFUfEc7CIiGzUvZX85tOcuDZfGedAwrg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:18:32 2025 by rpki-client