Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/eJ1JUPisPyGRK8rwksI89SjAgW8.roa
File: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (raw, json)
Hash identifier: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=
Subject key identifier: 78:9D:49:50:F8:AC:3F:21:91:2B:CA:F0:92:C2:3C:F5:28:C0:81:6F
Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial: 0194266BF7987BFD4709B87CA0C98FF89AAF
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/eJ1JUPisPyGRK8rwksI89SjAgW8.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3549
IP address blocks: 2a05:6744::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f7:98:7b:fd:47:09:b8:7c:a0:c9:8f:f8:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789d4950f8ac3f21912bcaf092c23cf528c0816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:40:46:b6:17:8d:36:d3:6e:c3:cf:ae:ca:
96:95:9e:d6:f6:27:af:de:47:25:fb:f9:f9:b6:8a:
77:25:4b:19:02:c6:c4:ba:e2:ba:c3:c1:d2:da:a7:
c9:db:8f:63:d8:59:c6:90:1f:28:13:f9:e7:21:05:
5d:12:6c:c8:38:29:fd:08:85:91:24:09:4a:bf:ac:
56:44:4d:50:49:d5:13:98:aa:59:df:3f:1a:02:8b:
7a:19:a4:4b:cc:6e:be:73:8b:f3:37:bb:aa:59:5f:
29:13:87:92:6d:da:4f:5b:0f:71:f8:30:a6:a6:7c:
97:0b:c0:2b:66:b0:38:df:26:39:77:72:54:8c:14:
86:25:f8:8b:aa:82:ea:a3:43:05:37:59:32:4a:40:
d1:1a:ae:72:0f:89:3c:18:d1:6e:07:2e:2a:80:9f:
98:ef:84:64:7b:3b:c6:bf:14:21:ea:9c:e4:d3:01:
96:e7:ee:c7:86:ed:06:41:47:d5:d7:cb:93:03:2b:
2e:59:3d:80:cd:2b:85:0d:b0:f7:b6:ca:39:3c:19:
bb:30:62:08:17:39:13:f2:99:37:b0:62:64:d7:fe:
c2:19:94:62:e0:af:9a:18:66:b4:d7:82:ae:7a:e3:
bf:09:b2:6f:a0:6b:a2:81:5a:0d:a5:d6:9b:da:60:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:49:50:F8:AC:3F:21:91:2B:CA:F0:92:C2:3C:F5:28:C0:81:6F
X509v3 Authority Key Identifier:
keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/eJ1JUPisPyGRK8rwksI89SjAgW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6744::/46
Signature Algorithm: sha256WithRSAEncryption
31:1a:2f:12:cd:0e:f9:71:10:f6:ab:68:b6:7e:31:06:8a:e9:
e3:49:14:20:5f:44:99:ff:c5:78:61:e9:36:5e:87:d2:20:5a:
c1:02:5a:62:fd:23:65:53:99:81:ea:c4:0a:55:af:eb:1a:14:
d4:63:7f:91:09:52:07:40:97:dc:e3:a7:11:94:7b:2e:92:4a:
31:f5:0d:f6:83:21:a2:00:09:12:51:23:78:bc:ee:97:02:60:
39:e8:c2:4f:35:dd:01:74:aa:89:77:cb:fe:3d:a2:a4:38:f7:
e8:90:b2:e5:b1:6f:bb:1f:79:e0:c6:d0:ed:d0:bd:d3:23:7c:
e9:56:26:be:69:5a:91:cb:62:68:af:51:c1:b4:50:dc:17:5d:
df:d7:c5:e3:b1:1b:6b:e4:86:9d:32:0a:d7:bc:02:09:2f:26:
e5:06:1d:8b:5c:8e:91:4d:c4:2d:26:6e:44:f7:14:47:8a:52:
ee:d8:85:37:30:c6:47:bf:0a:7b:2f:b5:5c:ed:e2:d2:c0:d2:
f4:a2:0c:d0:0b:b1:f9:b5:f1:f8:16:e7:6f:89:e1:dc:76:84:
fb:f2:aa:24:4a:a0:f0:d0:aa:a5:f5:c8:3c:45:aa:a2:97:5f:
9f:68:3b:64:eb:f8:40:82:1b:82:98:5b:28:0e:19:bf:7a:51:
16:c6:4a:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma/eYe/1HCbh8oMmP+JqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjUwMTAyMDk0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODlkNDk1MGY4YWMzZjIxOTEyYmNhZjA5MmMyM2NmNTI4YzA4MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA549ARrYXjTbTbsPPrsqWlZ7W9iev
3kcl+/n5top3JUsZAsbEuuK6w8HS2qfJ249j2FnGkB8oE/nnIQVdEmzIOCn9CIWR
JAlKv6xWRE1QSdUTmKpZ3z8aAot6GaRLzG6+c4vzN7uqWV8pE4eSbdpPWw9x+DCm
pnyXC8ArZrA43yY5d3JUjBSGJfiLqoLqo0MFN1kySkDRGq5yD4k8GNFuBy4qgJ+Y
74RkezvGvxQh6pzk0wGW5+7Hhu0GQUfV18uTAysuWT2AzSuFDbD3tso5PBm7MGII
FzkT8pk3sGJk1/7CGZRi4K+aGGa014KueuO/CbJvoGuigVoNpdab2mBriQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHidSVD4rD8hkSvK8JLCPPUowIFvMB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvZUoxSlVQaXNQeUdSSzhyd2tzSTg5U2pBZ1c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgVnRAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxGi8SzQ75cRD2q2i2fjEGiunjSRQgX0SZ/8V4
Yek2XofSIFrBAlpi/SNlU5mB6sQKVa/rGhTUY3+RCVIHQJfc46cRlHsukkox9Q32
gyGiAAkSUSN4vO6XAmA56MJPNd0BdKqJd8v+PaKkOPfokLLlsW+7H3ngxtDt0L3T
I3zpVia+aVqRy2Jor1HBtFDcF13f18XjsRtr5IadMgrXvAIJLyblBh2LXI6RTcQt
Jm5E9xRHilLu2IU3MMZHvwp7L7Vc7eLSwNL0ogzQC7H5tfH4FudvieHcdoT78qok
SqDw0Kql9cg8Raqil1+faDtk6/hAghuCmFsoDhm/elEWxkqr
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:47:21 2025 by rpki-client