Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/r9o6ZxDdiu26GCruotdSP1JYTa4.roa
File: r9o6ZxDdiu26GCruotdSP1JYTa4.roa (raw, json)
Hash identifier: LwoVSoo9emQwTSkxELR0zVPzBceoMYxYcJX5uC4366U=
Subject key identifier: AF:DA:3A:67:10:DD:8A:ED:BA:18:2A:EE:A2:D7:52:3F:52:58:4D:AE
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA2E07379A9F6F816417BEC31ED19
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/r9o6ZxDdiu26GCruotdSP1JYTa4.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50058
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a2:e0:73:79:a9:f6:f8:16:41:7b:ec:31:ed:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afda3a6710dd8aedba182aeea2d7523f52584dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:8f:04:a3:2d:89:6e:20:a4:ca:01:5b:cd:
ad:2f:fa:24:e4:17:4e:92:f6:fb:d1:c3:cc:6b:fb:
c4:16:8a:a2:92:54:74:c9:90:7c:da:32:fb:da:7f:
5e:af:17:4a:fb:07:84:bb:95:83:9e:b5:8b:b9:86:
db:a0:8f:05:32:28:ca:27:e6:81:6c:db:d9:cd:ed:
1f:1c:f8:6f:8a:7e:76:1b:c5:aa:f7:cf:a3:15:51:
30:3c:30:3e:95:d2:eb:38:8a:46:d1:91:42:66:2e:
55:31:7c:8b:53:f7:53:23:bc:12:1f:80:19:6e:49:
68:4b:3e:e4:d4:36:57:12:b9:63:84:cd:77:6b:a0:
c0:4a:28:b2:5c:6d:7b:48:eb:75:38:5d:f2:2e:64:
08:bd:b8:f3:2f:5f:4f:de:07:86:01:84:75:d5:85:
a5:f3:ff:49:c6:73:84:15:dc:b6:f9:53:89:e5:2d:
91:2f:a2:3b:fe:b3:fa:b5:42:0f:04:3e:ad:1b:7d:
de:19:a8:3c:40:2c:17:a4:93:c5:ab:62:56:23:8d:
3a:99:1f:53:57:69:e3:d9:81:2b:ec:58:ce:df:a7:
52:73:37:9e:d3:61:58:d2:4f:52:79:d7:f8:14:0d:
d7:67:3a:cd:11:21:11:10:ae:b0:ce:7e:e1:95:89:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:3A:67:10:DD:8A:ED:BA:18:2A:EE:A2:D7:52:3F:52:58:4D:AE
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/r9o6ZxDdiu26GCruotdSP1JYTa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:78:64:56:6e:91:03:42:ba:1c:22:81:95:57:3e:81:56:
3d:e7:ee:f4:5a:00:e4:db:a5:98:c3:33:5e:ce:92:9f:1c:66:
a0:b5:60:20:67:bf:43:93:8a:9c:db:32:d1:15:bc:26:8c:ed:
2d:64:67:95:f7:8e:01:03:2b:63:16:08:b9:41:83:51:98:e5:
41:f8:80:e7:44:5d:eb:65:a9:7e:3e:9d:c8:8a:d2:05:a8:1b:
57:77:8b:41:dc:86:b7:17:48:0b:0b:26:94:22:16:96:32:d2:
6d:ad:37:4f:9a:b5:aa:87:44:bf:d5:ea:20:ec:75:cd:82:f7:
e0:0f:26:26:a6:27:5a:16:6a:77:26:aa:33:5b:3c:d1:4d:e2:
70:32:f5:0a:77:37:31:19:1b:4e:6b:ed:39:b0:46:3a:6a:cd:
ce:55:d9:a5:38:e7:6d:dc:54:19:46:13:6e:87:fe:f8:9c:0b:
54:c0:bf:f3:95:50:48:a0:ef:6b:45:b8:23:fb:84:d0:67:f9:
76:21:fb:35:54:3d:78:d9:1b:73:9c:12:a8:a3:16:64:1c:20:
2c:7a:33:89:0d:98:92:61:b2:d8:c8:a5:c2:08:e5:5b:e2:58:
98:b7:30:70:11:e4:0c:b3:34:b3:91:d2:14:7f:f3:50:0e:2d:
78:12:63:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrrqLgc3mp9vgWQXvsMe0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjMwMTAxMDQ1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmRhM2E2NzEwZGQ4YWVkYmExODJhZWVhMmQ3NTIzZjUyNTg0ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2CPBKMtiW4gpMoBW82tL/ok5BdO
kvb70cPMa/vEFoqiklR0yZB82jL72n9erxdK+weEu5WDnrWLuYbboI8FMijKJ+aB
bNvZze0fHPhvin52G8Wq98+jFVEwPDA+ldLrOIpG0ZFCZi5VMXyLU/dTI7wSH4AZ
bkloSz7k1DZXErljhM13a6DASiiyXG17SOt1OF3yLmQIvbjzL19P3geGAYR11YWl
8/9JxnOEFdy2+VOJ5S2RL6I7/rP6tUIPBD6tG33eGag8QCwXpJPFq2JWI406mR9T
V2nj2YEr7FjO36dSczee02FY0k9Sedf4FA3XZzrNESEREK6wzn7hlYkADQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/aOmcQ3Yrtuhgq7qLXUj9SWE2uMB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvcjlvNlp4RGRpdTI2R0NydW90ZFNQMUpZVGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYBMA0G
CSqGSIb3DQEBCwUAA4IBAQBi5HhkVm6RA0K6HCKBlVc+gVY95+70WgDk26WYwzNe
zpKfHGagtWAgZ79Dk4qc2zLRFbwmjO0tZGeV944BAytjFgi5QYNRmOVB+IDnRF3r
Zal+Pp3IitIFqBtXd4tB3Ia3F0gLCyaUIhaWMtJtrTdPmrWqh0S/1eog7HXNgvfg
DyYmpidaFmp3JqozWzzRTeJwMvUKdzcxGRtOa+05sEY6as3OVdmlOOdt3FQZRhNu
h/74nAtUwL/zlVBIoO9rRbgj+4TQZ/l2Ifs1VD142RtznBKooxZkHCAsejOJDZiS
YbLYyKXCCOVb4liYtzBwEeQMszSzkdIUf/NQDi14EmN9
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:41 2025 by rpki-client