Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJYgUjz23aZJwogoLC0X_MuWP-0.roa
File: ZJYgUjz23aZJwogoLC0X_MuWP-0.roa (raw, json)
Hash identifier: OP7VAcYi4fVMC+LYSwMc+9Fw7NrPk+O9JCAF7MrG7fM=
Subject key identifier: 64:96:20:52:3C:F6:DD:A6:49:C2:88:28:2C:2D:17:FC:CB:96:3F:ED
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226A2C8A5C836E95C8604C270D1CDE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJYgUjz23aZJwogoLC0X_MuWP-0.roa
Signing time: Thu 02 Jan 2025 03:49:59 +0000
ROA not before: Thu 02 Jan 2025 03:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212995
IP address blocks: 2a0e:b107:b80::/44 maxlen: 48
2a10:2f01:2a0::/44 maxlen: 48
2a10:cc44:180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6a:2c:8a:5c:83:6e:95:c8:60:4c:27:0d:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=649620523cf6dda649c288282c2d17fccb963fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:99:46:9c:b3:98:3e:d1:78:2d:f2:ab:72:
4f:1e:65:2f:dd:9d:01:7d:f4:c2:17:bf:3b:66:f2:
30:a1:ac:0e:a6:d5:ea:b4:bc:a4:70:d9:21:d0:d7:
99:d7:6c:cd:46:77:14:67:a1:9e:21:71:2d:c2:0f:
cd:9c:7f:aa:94:a3:1c:8c:ab:60:f3:4a:58:84:d0:
1f:a0:eb:7b:6e:08:ff:74:1e:99:0d:15:40:8f:84:
bc:20:6c:a1:11:5a:3e:2a:f5:aa:43:3e:8f:f9:11:
e8:e7:9a:07:d6:da:6e:98:96:bc:7d:71:f9:8d:e5:
6b:12:09:e5:89:e0:c3:fd:df:d5:52:e4:5a:72:a0:
5a:6a:bb:e0:8f:14:33:f6:a9:dc:ba:ab:de:54:6d:
7a:5b:10:57:51:65:26:9b:e7:67:fc:f3:e6:10:33:
ec:61:e0:ad:f5:84:a2:aa:74:90:44:7f:47:9d:16:
86:b8:f3:80:7b:1f:3e:a5:56:fc:9e:79:e4:7c:82:
e0:2a:b4:19:3d:00:06:74:1a:f4:44:7d:6b:72:a6:
28:08:75:82:44:7b:7b:b2:1f:bf:06:10:7e:9c:9d:
15:bb:7a:7c:bd:09:e1:7e:e7:94:f6:62:9a:4e:dd:
1a:32:e0:cc:dd:36:39:f6:0d:a6:c2:89:20:bd:7d:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:20:52:3C:F6:DD:A6:49:C2:88:28:2C:2D:17:FC:CB:96:3F:ED
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJYgUjz23aZJwogoLC0X_MuWP-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b80::/44
2a10:2f01:2a0::/44
2a10:cc44:180::/44
Signature Algorithm: sha256WithRSAEncryption
32:95:f0:2a:bb:82:68:5d:81:52:0b:e2:00:df:df:69:5d:18:
14:a4:81:7c:26:6a:61:03:47:e8:ac:87:9e:b3:ee:c4:8c:83:
db:06:c4:f9:29:c3:ed:ec:79:a4:ff:15:c1:f3:6b:9a:aa:6f:
b8:99:bb:a8:84:3d:6c:91:3d:42:f3:c1:39:41:00:3a:27:e8:
b4:f1:a0:24:69:eb:76:18:62:97:01:bb:50:db:96:43:a1:2e:
5e:7e:b8:37:3b:b4:25:78:f4:06:d6:f6:26:0b:e5:2e:65:df:
78:c7:9a:39:d4:90:4a:d1:ac:6a:d2:17:b0:54:5b:9e:3f:bf:
4a:8a:50:f0:f6:27:50:e0:9f:27:7b:fa:d9:92:3a:e2:d6:00:
a4:cf:92:6c:25:c6:76:20:24:c0:58:e7:de:62:dc:80:41:5a:
af:2c:a8:11:a9:ba:df:db:5e:bc:ab:8d:a4:22:47:d7:f4:58:
a8:16:8e:58:ff:7f:8f:78:6c:f1:ca:f1:87:11:a8:fe:45:bf:
f2:2a:5d:7c:7b:47:bd:88:76:57:13:90:5b:2c:45:eb:56:fd:
40:79:52:03:b9:87:a1:af:dc:28:ca:49:4f:4e:ba:e3:01:b6:
f6:3f:3a:c6:4a:4c:ac:bc:ef:cb:5b:28:53:c9:c3:1a:f9:b4:
7b:ea:d9:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlImosilyDbpXIYEwnDRzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDk2MjA1MjNjZjZkZGE2NDljMjg4MjgyYzJkMTdmY2NiOTYzZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq+ZRpyzmD7ReC3yq3JPHmUv3Z0B
ffTCF787ZvIwoawOptXqtLykcNkh0NeZ12zNRncUZ6GeIXEtwg/NnH+qlKMcjKtg
80pYhNAfoOt7bgj/dB6ZDRVAj4S8IGyhEVo+KvWqQz6P+RHo55oH1tpumJa8fXH5
jeVrEgnlieDD/d/VUuRacqBaarvgjxQz9qncuqveVG16WxBXUWUmm+dn/PPmEDPs
YeCt9YSiqnSQRH9HnRaGuPOAex8+pVb8nnnkfILgKrQZPQAGdBr0RH1rcqYoCHWC
RHt7sh+/BhB+nJ0Vu3p8vQnhfueU9mKaTt0aMuDM3TY59g2mwokgvX0C8wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGSWIFI89t2mScKIKCwtF/zLlj/tMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWkpZZ1VqejIzYVpKd29nb0xDMFhfTXVXUC0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6xBwuA
AwcEKhAvAQKgAwcEKhDMRAGAMA0GCSqGSIb3DQEBCwUAA4IBAQAylfAqu4JoXYFS
C+IA399pXRgUpIF8JmphA0forIees+7EjIPbBsT5KcPt7Hmk/xXB82uaqm+4mbuo
hD1skT1C88E5QQA6J+i08aAkaet2GGKXAbtQ25ZDoS5efrg3O7QlePQG1vYmC+Uu
Zd94x5o51JBK0axq0hewVFueP79KilDw9idQ4J8ne/rZkjri1gCkz5JsJcZ2ICTA
WOfeYtyAQVqvLKgRqbrf2168q42kIkfX9FioFo5Y/3+PeGzxyvGHEaj+Rb/yKl18
e0e9iHZXE5BbLEXrVv1AeVIDuYehr9woyklPTrrjAbb2PzrGSkysvO/LWyhTycMa
+bR76tlD
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:44 2025 by rpki-client