Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bsrdJkZzVJwEY32tIaLKAwFcqi8.roa
File: bsrdJkZzVJwEY32tIaLKAwFcqi8.roa (raw, json)
Hash identifier: iCCwRn5F2KFUCmsY+CwNzVAHKpI1xSBsXFKvlbdYs2k=
Subject key identifier: 6E:CA:DD:26:46:73:54:9C:04:63:7D:AD:21:A2:CA:03:01:5C:AA:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225F0F8FF030CC4C5BAC98E0789D58
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bsrdJkZzVJwEY32tIaLKAwFcqi8.roa
Signing time: Thu 02 Jan 2025 03:49:57 +0000
ROA not before: Thu 02 Jan 2025 03:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212332
IP address blocks: 2a0e:b107:27b0::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:5f:0f:8f:f0:30:cc:4c:5b:ac:98:e0:78:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ecadd264673549c04637dad21a2ca03015caa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:5a:46:3d:5c:cd:7e:9f:ff:2b:6d:0c:71:
a7:fc:3e:27:8e:8a:99:2f:8a:0d:e8:93:df:6c:26:
18:16:07:3e:62:e8:b9:be:3d:bc:ce:61:14:7c:7c:
83:4b:0a:b2:ce:90:a5:6c:d8:17:17:bb:44:ce:9a:
49:98:27:8c:5b:f8:41:be:a8:73:75:5d:0d:37:9f:
18:54:be:3a:a0:1d:0e:e4:e7:a1:e6:32:ee:55:82:
dc:f1:16:da:31:3b:96:e6:11:ba:ca:98:43:91:93:
e3:7b:1c:65:cc:b8:5c:57:d4:4c:f3:f5:75:89:5d:
63:8a:4f:cc:92:f7:a8:a5:2c:76:27:8d:e4:df:8e:
95:31:26:b0:3a:60:e4:5a:16:20:3e:93:19:ee:b8:
10:94:80:b2:19:c1:4b:da:0a:e9:0f:4a:01:97:32:
99:13:91:14:e3:41:ef:1f:6a:a8:84:25:4f:d1:57:
00:37:c0:cb:9f:b2:44:cd:30:75:7f:ab:62:b5:57:
4c:22:d9:27:e9:46:e2:a0:33:f7:55:28:9c:03:7c:
42:34:5f:31:84:19:4f:36:39:05:33:35:3c:81:19:
42:b7:8b:a7:10:f2:4b:a8:e1:f9:a1:67:a5:5b:6d:
bb:3f:7c:4d:a7:8a:7d:d6:ce:bd:9a:4f:23:c9:19:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:DD:26:46:73:54:9C:04:63:7D:AD:21:A2:CA:03:01:5C:AA:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bsrdJkZzVJwEY32tIaLKAwFcqi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27b0::/45
Signature Algorithm: sha256WithRSAEncryption
24:9b:4c:42:65:32:8b:3a:10:01:b8:b1:d5:24:96:dd:27:5b:
79:be:a7:50:d7:1c:0a:87:ef:e7:48:33:e0:43:d9:e6:b1:70:
45:0e:1f:46:8d:0a:7a:a7:7c:7e:6d:42:5b:8a:21:a0:6b:3c:
a1:24:c7:8a:4c:b7:f6:09:93:73:a5:6f:eb:16:5b:30:55:f6:
d1:b7:b5:d1:9e:9d:b2:cf:bb:80:79:00:6d:28:93:c6:e6:6b:
38:fd:de:c7:b9:08:4e:7d:b0:2a:8c:47:2e:e2:92:1d:25:e1:
82:66:df:2d:c6:c0:8f:05:19:57:02:73:5a:b7:51:e8:ab:39:
b1:03:9a:91:fe:e8:5f:aa:58:5e:c1:f9:d4:ad:fe:ec:10:0a:
41:c1:43:15:be:50:8d:7d:a9:7b:64:94:78:50:40:a6:1d:23:
03:69:6a:f2:49:64:2e:a1:b2:4b:97:16:2b:69:30:ba:c7:dc:
d3:9b:5f:ff:f0:2d:8c:d9:fc:fe:14:2a:5c:30:8b:9b:27:9f:
15:ce:1e:56:ee:ce:79:e4:ed:0b:f2:ad:33:fa:82:f4:20:5b:
52:41:c9:90:90:8e:cf:d3:19:09:4e:af:c0:bb:88:78:22:bf:
8f:90:28:de:81:83:b8:b9:1f:e7:96:37:13:ca:72:32:2d:fd:
97:76:ed:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIl8Pj/AwzExbrJjgeJ1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWNhZGQyNjQ2NzM1NDljMDQ2MzdkYWQyMWEyY2EwMzAxNWNhYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh9aRj1czX6f/yttDHGn/D4njoqZ
L4oN6JPfbCYYFgc+Yui5vj28zmEUfHyDSwqyzpClbNgXF7tEzppJmCeMW/hBvqhz
dV0NN58YVL46oB0O5Oeh5jLuVYLc8RbaMTuW5hG6yphDkZPjexxlzLhcV9RM8/V1
iV1jik/MkveopSx2J43k346VMSawOmDkWhYgPpMZ7rgQlICyGcFL2grpD0oBlzKZ
E5EU40HvH2qohCVP0VcAN8DLn7JEzTB1f6titVdMItkn6UbioDP3VSicA3xCNF8x
hBlPNjkFMzU8gRlCt4unEPJLqOH5oWelW227P3xNp4p91s69mk8jyRn3iQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG7K3SZGc1ScBGN9rSGiygMBXKovMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYnNyZEprWnpWSndFWTMydElhTEtBd0ZjcWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByew
MA0GCSqGSIb3DQEBCwUAA4IBAQAkm0xCZTKLOhABuLHVJJbdJ1t5vqdQ1xwKh+/n
SDPgQ9nmsXBFDh9GjQp6p3x+bUJbiiGgazyhJMeKTLf2CZNzpW/rFlswVfbRt7XR
np2yz7uAeQBtKJPG5ms4/d7HuQhOfbAqjEcu4pIdJeGCZt8txsCPBRlXAnNat1Ho
qzmxA5qR/uhfqlhewfnUrf7sEApBwUMVvlCNfal7ZJR4UECmHSMDaWrySWQuobJL
lxYraTC6x9zTm1//8C2M2fz+FCpcMIubJ58Vzh5W7s555O0L8q0z+oL0IFtSQcmQ
kI7P0xkJTq/Au4h4Ir+PkCjegYO4uR/nljcTynIyLf2Xdu0L
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:48:09 2025 by rpki-client