Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nhZZ-p_oPEqorDSzpXiauKNozNw.roa
File: nhZZ-p_oPEqorDSzpXiauKNozNw.roa (raw, json)
Hash identifier: f/UMQOfuvOr9fYtHbZ6kYj1ispV+S6y/DmAWiOCaqLI=
Subject key identifier: 9E:16:59:FA:9F:E8:3C:4A:A8:AC:34:B3:A5:78:9A:B8:A3:68:CC:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223B2D8BE1020CDE9F8AEA47E82381
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nhZZ-p_oPEqorDSzpXiauKNozNw.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209949
IP address blocks: 2a0e:97c0:d20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:2d:8b:e1:02:0c:de:9f:8a:ea:47:e8:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e1659fa9fe83c4aa8ac34b3a5789ab8a368ccdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:b7:72:20:94:98:28:45:df:2c:b6:f7:54:
1e:f9:84:77:0e:a3:32:64:e8:67:37:bf:d4:a2:71:
d1:0d:5a:c9:7f:55:6e:0b:44:d3:54:7b:d4:11:15:
38:b1:5c:65:1d:f7:64:24:6a:bc:e6:bc:8c:2a:99:
f2:74:b0:6d:17:47:e1:16:ac:ae:de:98:42:7d:0f:
a4:37:5c:49:b9:6d:c1:cc:ba:9c:b7:be:50:c1:4b:
31:fb:43:a0:7c:fe:80:d8:6c:81:41:cc:c5:bb:12:
5d:06:af:bb:66:7b:4f:6a:a1:02:55:58:f4:0c:61:
8a:a5:c9:21:b6:18:b4:3a:2f:3f:16:fc:0e:88:db:
c0:c4:a7:56:fc:c1:03:4e:e8:56:91:15:a9:ed:5e:
03:7c:ff:c3:dd:92:e9:cc:91:17:ff:8e:e8:3a:d3:
68:7e:50:c4:97:42:a8:ec:bc:53:2d:18:4d:eb:91:
27:6f:75:49:b1:e5:54:10:d1:4f:a9:2f:8b:ce:59:
a3:dd:df:c0:73:f8:e2:56:4a:1c:25:ce:5e:88:f6:
d8:0a:91:d2:76:b2:aa:03:cb:7c:8c:24:12:30:ab:
9c:32:30:65:63:d9:48:6f:7e:76:88:20:a5:c6:c9:
60:b0:02:49:90:86:ba:56:c4:6e:c7:52:4a:70:46:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:16:59:FA:9F:E8:3C:4A:A8:AC:34:B3:A5:78:9A:B8:A3:68:CC:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nhZZ-p_oPEqorDSzpXiauKNozNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d20::/44
Signature Algorithm: sha256WithRSAEncryption
b7:72:5a:10:41:47:9c:3d:61:8f:82:b4:51:ac:03:10:0d:b9:
2f:88:32:9c:2e:98:e2:80:08:f2:90:f9:5f:16:70:c5:64:d5:
81:64:f7:c2:d9:72:d0:d9:1b:15:18:53:01:fc:bd:34:51:c7:
c2:11:5d:90:2a:af:24:74:2a:98:d7:e8:8f:da:35:05:9d:ba:
bc:a1:41:20:14:04:82:97:f2:87:4d:f6:5a:78:4b:89:97:73:
6c:03:d6:e8:a0:7b:64:19:30:04:e6:8d:be:bb:ab:9a:e9:7f:
f6:c0:74:23:9d:02:1b:8c:ed:86:f1:a9:70:19:79:d1:f6:72:
56:50:fc:fe:fb:97:39:f9:2f:e8:95:de:c5:80:25:39:b7:ac:
56:ca:47:0c:4c:f3:81:2a:ee:d7:f5:ac:7a:0e:ec:db:cf:0d:
b6:2a:d2:1f:78:c0:dc:21:9a:d3:be:b1:0a:56:dc:bf:28:16:
0e:8c:a9:cf:1d:52:3c:fa:6b:05:d9:26:4d:7c:90:80:8a:c4:
ba:80:90:65:e2:90:5d:71:0d:a2:01:5f:4d:87:f5:1a:79:dc:
cf:b4:c9:b5:d7:7f:c0:17:c3:d3:29:c1:6e:fd:e3:9f:06:8c:
a6:8c:76:03:5e:36:e5:87:03:47:5e:3a:a4:34:c2:17:33:81:
7c:be:4b:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIjsti+ECDN6fiupH6COBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTE2NTlmYTlmZTgzYzRhYThhYzM0YjNhNTc4OWFiOGEzNjhjY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfa3ciCUmChF3yy291Qe+YR3DqMy
ZOhnN7/UonHRDVrJf1VuC0TTVHvUERU4sVxlHfdkJGq85ryMKpnydLBtF0fhFqyu
3phCfQ+kN1xJuW3BzLqct75QwUsx+0OgfP6A2GyBQczFuxJdBq+7ZntPaqECVVj0
DGGKpckhthi0Oi8/FvwOiNvAxKdW/MEDTuhWkRWp7V4DfP/D3ZLpzJEX/47oOtNo
flDEl0Ko7LxTLRhN65Enb3VJseVUENFPqS+Lzlmj3d/Ac/jiVkocJc5eiPbYCpHS
drKqA8t8jCQSMKucMjBlY9lIb352iCClxslgsAJJkIa6VsRux1JKcEYL7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ4WWfqf6DxKqKw0s6V4mrijaMzcMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbmhaWi1wX29QRXFvckRTenBYaWF1S05vek53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA0g
MA0GCSqGSIb3DQEBCwUAA4IBAQC3cloQQUecPWGPgrRRrAMQDbkviDKcLpjigAjy
kPlfFnDFZNWBZPfC2XLQ2RsVGFMB/L00UcfCEV2QKq8kdCqY1+iP2jUFnbq8oUEg
FASCl/KHTfZaeEuJl3NsA9booHtkGTAE5o2+u6ua6X/2wHQjnQIbjO2G8alwGXnR
9nJWUPz++5c5+S/old7FgCU5t6xWykcMTPOBKu7X9ax6Duzbzw22KtIfeMDcIZrT
vrEKVty/KBYOjKnPHVI8+msF2SZNfJCAisS6gJBl4pBdcQ2iAV9Nh/UaedzPtMm1
13/AF8PTKcFu/eOfBoymjHYDXjblhwNHXjqkNMIXM4F8vkve
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:32 2025 by rpki-client