Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/6bKmElTtCrApAY9rRgCE9VG2_VI.roa
File: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (raw, json)
Hash identifier: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=
Subject key identifier: E9:B2:A6:12:54:ED:0A:B0:29:01:8F:6B:46:00:84:F5:51:B6:FD:52
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D49CFCCB90AC9E61E277F05BD1998
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/6bKmElTtCrApAY9rRgCE9VG2_VI.roa
Signing time: Wed 01 Jan 2025 15:47:52 +0000
ROA not before: Wed 01 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215787
IP address blocks: 2a0d:2146:bde0::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:49:cf:cc:b9:0a:c9:e6:1e:27:7f:05:bd:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b2a61254ed0ab029018f6b460084f551b6fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:55:04:5c:b7:5a:be:c4:75:cf:31:a3:da:
2a:9d:2f:bf:37:71:5c:43:1e:9a:e2:8d:39:31:8f:
1f:d7:20:ef:89:84:6f:82:54:07:0a:b6:f3:0d:a1:
b0:81:fa:fc:12:95:4c:59:e3:fa:8a:a0:56:de:f7:
34:b4:22:ab:1c:b8:60:0f:9b:d1:e4:79:ed:b8:11:
49:f2:99:e3:2e:c1:28:44:b0:21:ed:a2:d1:59:88:
ed:3c:81:d0:b6:de:22:55:42:05:34:cf:77:5d:b4:
97:e0:94:c2:db:a7:89:aa:e1:ec:64:90:88:39:68:
84:2f:cb:c2:d0:1d:da:d4:b1:94:14:9f:bd:fa:f6:
e4:49:90:1c:5f:2d:89:65:d5:4b:b7:fd:76:ac:64:
68:2b:31:47:21:e4:31:cc:2d:34:14:60:07:e1:9b:
93:35:db:77:1f:9a:f3:84:95:72:d5:af:69:9a:09:
58:41:fc:5a:85:92:d2:62:c8:04:64:93:03:4c:57:
8a:ca:52:78:fa:bd:3e:31:8d:4b:0d:b4:d9:2f:f2:
9f:08:b3:99:bc:77:a1:34:bd:31:bf:01:98:ce:fa:
49:17:91:e6:19:d5:79:89:ba:8f:16:0f:84:7c:60:
e4:69:79:64:62:53:12:1a:b6:20:f1:94:53:76:4d:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:A6:12:54:ED:0A:B0:29:01:8F:6B:46:00:84:F5:51:B6:FD:52
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/6bKmElTtCrApAY9rRgCE9VG2_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:bde0::/43
Signature Algorithm: sha256WithRSAEncryption
07:ff:5c:4b:e7:0d:60:ad:70:dc:5f:60:ac:9f:d2:a5:51:41:
33:4e:e0:cb:79:49:a5:87:2b:37:0d:42:e9:9f:a3:a6:79:3f:
92:f8:44:d1:cc:9d:33:ef:f3:f6:66:e0:1f:fd:6d:de:6f:10:
8e:7b:a8:2a:04:ec:dd:bb:f4:8c:33:b9:c8:3c:37:02:5e:3d:
69:64:00:6e:20:2f:65:be:04:4d:42:dd:76:80:9b:54:c9:42:
83:b4:c9:ab:8b:a9:71:80:4e:d5:3f:b4:96:ab:e2:60:a6:61:
10:65:ac:fe:19:a3:4f:31:3c:99:f4:5c:0f:5e:73:fd:87:fa:
76:04:e7:f9:ca:de:a1:b2:36:57:ce:36:de:85:ee:2a:6b:25:
9c:a5:19:97:c0:d7:16:d6:5d:e0:6d:a4:7b:a1:0a:21:2c:71:
11:d3:92:56:12:60:90:b6:b6:23:1a:3b:07:8f:ae:78:20:5c:
9c:2e:4d:26:73:51:e0:50:f9:39:cc:ac:45:37:cc:49:d4:37:
27:86:3d:fc:a0:b3:86:3f:d5:69:3e:f9:37:b6:ea:7e:c9:df:
19:9c:65:09:e0:c5:fa:c1:b6:8e:ab:52:e9:db:de:46:d4:bf:
78:75:14:1e:c2:d5:74:47:52:5e:0a:4e:5b:7d:6c:fe:1d:5d:
6f:56:bc:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQijUnPzLkKyeYeJ38FvRmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjUwMTAxMTU0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWIyYTYxMjU0ZWQwYWIwMjkwMThmNmI0NjAwODRmNTUxYjZmZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPFVBFy3Wr7Edc8xo9oqnS+/N3Fc
Qx6a4o05MY8f1yDviYRvglQHCrbzDaGwgfr8EpVMWeP6iqBW3vc0tCKrHLhgD5vR
5HntuBFJ8pnjLsEoRLAh7aLRWYjtPIHQtt4iVUIFNM93XbSX4JTC26eJquHsZJCI
OWiEL8vC0B3a1LGUFJ+9+vbkSZAcXy2JZdVLt/12rGRoKzFHIeQxzC00FGAH4ZuT
Ndt3H5rzhJVy1a9pmglYQfxahZLSYsgEZJMDTFeKylJ4+r0+MY1LDbTZL/KfCLOZ
vHehNL0xvwGYzvpJF5HmGdV5ibqPFg+EfGDkaXlkYlMSGrYg8ZRTdk2nFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOmyphJU7QqwKQGPa0YAhPVRtv1SMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvNmJLbUVsVHRDckFwQVk5clJnQ0U5VkcyX1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKg0hRr3g
MA0GCSqGSIb3DQEBCwUAA4IBAQAH/1xL5w1grXDcX2Csn9KlUUEzTuDLeUmlhys3
DULpn6OmeT+S+ETRzJ0z7/P2ZuAf/W3ebxCOe6gqBOzdu/SMM7nIPDcCXj1pZABu
IC9lvgRNQt12gJtUyUKDtMmri6lxgE7VP7SWq+JgpmEQZaz+GaNPMTyZ9FwPXnP9
h/p2BOf5yt6hsjZXzjbehe4qayWcpRmXwNcW1l3gbaR7oQohLHER05JWEmCQtrYj
GjsHj654IFycLk0mc1HgUPk5zKxFN8xJ1Dcnhj38oLOGP9VpPvk3tup+yd8ZnGUJ
4MX6wbaOq1Lp295G1L94dRQewtV0R1JeCk5bfWz+HV1vVrwH
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:53 2025 by rpki-client