Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa
File: C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa (raw, json)
Hash identifier: TuiyxpJbSDuJVA46q1OwVWDbQ+P+V9/ytlLI0YTziqM=
Subject key identifier: 0B:A5:89:F4:67:52:D0:3D:0C:BB:7B:79:19:6C:FE:F7:56:2A:26:BC
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0195CC72B5FD9C88D74BC33C90CAB70DFEAB
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa
Signing time: Tue 25 Mar 2025 08:37:04 +0000
ROA not before: Tue 25 Mar 2025 08:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31367
IP address blocks: 2a00:16f8:100::/40 maxlen: 56
2a00:16f8:200::/44 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:72:b5:fd:9c:88:d7:4b:c3:3c:90:ca:b7:0d:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Mar 25 08:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba589f46752d03d0cbb7b79196cfef7562a26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:33:21:6d:d0:e4:24:e1:c5:03:18:d4:03:
54:e4:76:6c:9b:46:f7:6c:70:f2:35:2d:18:d6:69:
2c:65:e4:c2:26:e9:14:62:43:3d:1f:05:b7:57:7c:
9c:80:2f:40:6a:d3:70:43:0c:11:f7:38:13:e2:66:
ec:c6:d3:73:fc:9f:da:88:42:9d:3c:6c:74:27:76:
a2:b0:2d:2f:97:3c:ea:18:8b:71:56:6a:33:c1:da:
d0:c2:20:21:da:55:5e:9a:93:0a:3c:b4:44:8f:20:
f1:16:3a:c9:16:11:91:94:79:53:9e:bf:25:c3:81:
0a:97:3c:e8:e5:28:ba:14:0c:cf:06:46:45:f6:77:
48:e1:53:a4:52:e0:67:79:97:fb:7b:fb:a3:d0:b8:
26:9a:87:13:15:5e:88:35:74:19:1f:68:90:39:7b:
f5:9c:8e:47:57:64:fe:8c:3c:0d:44:7a:3e:79:bc:
9c:83:e9:98:d2:8c:90:03:db:4f:34:1f:52:d9:15:
ae:0b:5a:ca:5e:79:9d:cd:50:36:dd:c9:54:7a:85:
cf:2c:ce:92:ca:22:f8:7c:41:ee:6d:3e:69:10:1d:
45:2f:8b:cc:f6:bd:ef:c5:84:2a:47:d3:81:68:b9:
73:72:48:ef:4b:30:25:e7:cb:63:bd:08:9b:22:17:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:89:F4:67:52:D0:3D:0C:BB:7B:79:19:6C:FE:F7:56:2A:26:BC
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:16f8:100::-2a00:16f8:20f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:97:ea:d5:ed:be:0d:dd:66:09:f8:cf:bc:49:e1:32:00:38:
99:32:1a:d3:0c:96:79:3d:ae:59:4b:1f:23:3b:03:5e:0b:97:
53:be:4e:75:68:19:aa:e5:0d:8f:f3:4e:15:4b:56:3b:7e:e5:
0f:53:fd:76:6a:fe:49:9d:8b:a2:83:26:19:d6:c6:15:02:5a:
7b:fd:99:c3:e4:c7:bd:e6:17:6b:40:5f:5b:d7:48:ba:80:b8:
b2:81:87:e4:1e:d8:e4:83:7d:2b:f2:e7:d1:d7:f7:df:64:cf:
0f:8b:94:00:c2:52:0b:da:6a:73:eb:91:e2:54:72:1e:ea:67:
f6:fe:79:74:ec:d5:e6:d9:ec:36:6c:74:d8:9b:ea:8b:92:0b:
fd:09:51:10:69:e7:a0:17:fd:63:0d:1b:a1:3f:06:69:0a:f6:
0c:a6:8e:5b:bb:30:7c:48:80:de:3a:f7:61:1d:86:b7:df:3e:
a4:6e:8f:d3:9e:12:49:e9:7d:ae:10:25:2e:54:bc:51:48:83:
e4:40:34:64:4b:fb:9b:27:5e:50:a0:b4:d5:47:fe:5b:d4:66:
51:68:1f:20:74:71:ab:00:a7:95:3d:78:b3:8d:2c:f7:7f:76:
43:fa:d4:f1:ac:aa:57:08:b1:45:6a:a0:f8:d4:d9:04:66:f8:
5f:0b:b2:15
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXMcrX9nIjXS8M8kMq3Df6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMzI1MDgzNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmE1ODlmNDY3NTJkMDNkMGNiYjdiNzkxOTZjZmVmNzU2MmEyNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT4zIW3Q5CThxQMY1ANU5HZsm0b3
bHDyNS0Y1mksZeTCJukUYkM9HwW3V3ycgC9AatNwQwwR9zgT4mbsxtNz/J/aiEKd
PGx0J3aisC0vlzzqGItxVmozwdrQwiAh2lVempMKPLREjyDxFjrJFhGRlHlTnr8l
w4EKlzzo5Si6FAzPBkZF9ndI4VOkUuBneZf7e/uj0LgmmocTFV6INXQZH2iQOXv1
nI5HV2T+jDwNRHo+ebycg+mY0oyQA9tPNB9S2RWuC1rKXnmdzVA23clUeoXPLM6S
yiL4fEHubT5pEB1FL4vM9r3vxYQqR9OBaLlzckjvSzAl58tjvQibIhdTewIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAulifRnUtA9DLt7eRls/vdWKia8MB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvQzZXSjlHZFMwRDBNdTN0NUdXei05MVlxSnJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgAqABb4
AQMHBCoAFvgCADANBgkqhkiG9w0BAQsFAAOCAQEAD5fq1e2+Dd1mCfjPvEnhMgA4
mTIa0wyWeT2uWUsfIzsDXguXU75OdWgZquUNj/NOFUtWO37lD1P9dmr+SZ2LooMm
GdbGFQJae/2Zw+THveYXa0BfW9dIuoC4soGH5B7Y5IN9K/Ln0df332TPD4uUAMJS
C9pqc+uR4lRyHupn9v55dOzV5tnsNmx02Jvqi5IL/QlREGnnoBf9Yw0boT8GaQr2
DKaOW7swfEiA3jr3YR2Gt98+pG6P054SSel9rhAlLlS8UUiD5EA0ZEv7mydeUKC0
1Uf+W9RmUWgfIHRxqwCnlT14s40s9392Q/rU8ayqVwixRWqg+NTZBGb4XwuyFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:41 2025 by rpki-client