Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ly596nB5gcPhODOGKO690v6Uos.roa
File: 1Ly596nB5gcPhODOGKO690v6Uos.roa (raw, json)
Hash identifier: FYD24lI2NfmshC/3tFlon1eYkUcp3RiimuOzDEt7oQw=
Subject key identifier: D4:BC:B9:F7:A9:C1:E6:07:0F:84:E0:CE:18:A3:BA:F7:4B:FA:52:8B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0196D00FADA62989591496B0A6BC1127D07D
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ly596nB5gcPhODOGKO690v6Uos.roa
Signing time: Wed 14 May 2025 18:30:10 +0000
ROA not before: Wed 14 May 2025 18:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a09:d703::/32 maxlen: 32
2a09:dd06::/32 maxlen: 32
2a09:e704::/32 maxlen: 32
2a0e:3f43::/32 maxlen: 32
2a0e:5884::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:0f:ad:a6:29:89:59:14:96:b0:a6:bc:11:27:d0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 14 18:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4bcb9f7a9c1e6070f84e0ce18a3baf74bfa528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:4c:bc:b9:19:e4:b6:ea:e0:b2:96:3f:30:
57:5c:82:18:ec:c0:8a:61:48:2d:e8:cf:a7:bb:15:
dc:4a:9f:45:c2:18:75:bf:18:5b:80:b5:fb:e0:6c:
9c:3f:a3:ae:57:45:32:ec:16:73:af:cb:16:11:4b:
9f:32:42:36:92:ca:07:29:81:97:81:bd:ad:3e:36:
bc:e0:53:5c:11:05:cd:4c:b7:2d:0b:e4:8a:b8:a9:
cc:29:b3:b4:f9:a0:df:11:82:b2:2d:63:ab:a6:cb:
6b:95:52:c0:30:c7:0b:d1:ef:e9:d4:b8:e1:d5:10:
05:7e:30:19:33:50:a4:8f:4a:0b:a0:d2:53:f2:b5:
0a:84:82:a4:48:9e:34:3f:93:01:8f:23:d4:b1:65:
e9:af:8c:53:da:fa:81:47:80:60:6a:3c:1d:12:99:
23:2d:7f:2e:60:06:17:66:14:9e:81:05:d7:84:42:
04:5d:d7:65:1a:6b:65:e3:50:56:ed:13:79:d6:56:
4e:84:6e:b1:f4:a2:b1:66:10:b8:cc:44:94:35:0b:
ef:5f:6a:7b:28:e6:05:f2:e2:09:0e:3a:f0:d7:fd:
5e:e9:76:26:48:d5:b7:71:52:0a:f8:9a:37:1f:7f:
82:b5:07:c4:ff:63:45:23:35:d9:f2:f2:e2:8d:29:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:B9:F7:A9:C1:E6:07:0F:84:E0:CE:18:A3:BA:F7:4B:FA:52:8B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ly596nB5gcPhODOGKO690v6Uos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d703::/32
2a09:dd06::/32
2a09:e704::/32
2a0e:3f43::/32
2a0e:5884::/32
Signature Algorithm: sha256WithRSAEncryption
55:d9:30:08:70:57:3f:60:10:f9:78:29:62:e6:43:a0:dd:78:
b7:14:7a:df:1c:64:3f:b4:15:1c:72:5b:69:d2:fe:0f:3e:31:
ad:4c:6f:f0:09:cb:fc:85:3a:f7:a2:ce:7d:69:a4:58:1f:ff:
a5:56:fd:fd:14:38:50:f8:ed:57:0b:48:f0:53:37:cd:83:90:
ca:05:99:b0:b4:6e:7c:81:b0:ca:6d:40:37:92:5d:0b:87:9b:
8a:43:d4:bd:48:2c:59:23:59:eb:5f:55:26:bc:db:70:e7:f5:
60:91:8f:0f:b4:c0:7f:07:58:e1:ab:7e:70:c0:a4:37:98:c6:
52:e3:3e:1c:b8:56:d2:0e:76:ec:50:71:47:57:6e:7c:05:bb:
af:a2:d6:ea:f5:64:18:aa:b7:0b:e4:7a:88:7f:f2:04:81:6f:
65:cf:11:91:dc:eb:bd:5a:ad:03:bd:1c:69:29:ac:1d:75:c6:
45:49:3d:a3:29:75:1f:b1:f8:19:06:c3:e8:78:ff:74:2f:f8:
f0:3a:c6:dd:8b:39:df:78:96:04:4a:a6:d6:35:4d:82:ba:b0:
cf:cc:06:45:97:53:88:28:8a:79:95:3a:99:27:a4:c6:1d:32:
92:b4:dc:7d:a6:97:8d:d0:f6:25:3c:7b:e4:ae:af:20:2f:75:
2d:9a:d0:ff
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZbQD62mKYlZFJawprwRJ9B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwNTE0MTgzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJjYjlmN2E5YzFlNjA3MGY4NGUwY2UxOGEzYmFmNzRiZmE1MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvchMvLkZ5Lbq4LKWPzBXXIIY7MCK
YUgt6M+nuxXcSp9Fwhh1vxhbgLX74GycP6OuV0Uy7BZzr8sWEUufMkI2ksoHKYGX
gb2tPja84FNcEQXNTLctC+SKuKnMKbO0+aDfEYKyLWOrpstrlVLAMMcL0e/p1Ljh
1RAFfjAZM1Ckj0oLoNJT8rUKhIKkSJ40P5MBjyPUsWXpr4xT2vqBR4BgajwdEpkj
LX8uYAYXZhSegQXXhEIEXddlGmtl41BW7RN51lZOhG6x9KKxZhC4zESUNQvvX2p7
KOYF8uIJDjrw1/1e6XYmSNW3cVIK+Jo3H3+CtQfE/2NFIzXZ8vLijSknzQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNS8ufepweYHD4TgzhijuvdL+lKLMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvMUx5NTk2bkI1Z2NQaE9ET0dLTzY5MHY2VW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKgnXAwMF
ACoJ3QYDBQAqCecEAwUAKg4/QwMFACoOWIQwDQYJKoZIhvcNAQELBQADggEBAFXZ
MAhwVz9gEPl4KWLmQ6DdeLcUet8cZD+0FRxyW2nS/g8+Ma1Mb/AJy/yFOveizn1p
pFgf/6VW/f0UOFD47VcLSPBTN82DkMoFmbC0bnyBsMptQDeSXQuHm4pD1L1ILFkj
WetfVSa823Dn9WCRjw+0wH8HWOGrfnDApDeYxlLjPhy4VtIOduxQcUdXbnwFu6+i
1ur1ZBiqtwvkeoh/8gSBb2XPEZHc671arQO9HGkprB11xkVJPaMpdR+x+BkGw+h4
/3Qv+PA6xt2LOd94lgRKptY1TYK6sM/MBkWXU4goinmVOpknpMYdMpK03H2ml43Q
9iU8e+SuryAvdS2a0P8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:24 2025 by rpki-client