Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EswWK13u7UJf1Xm-aJ2Imfit29g.roa
File: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (raw, json)
Hash identifier: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=
Subject key identifier: 12:CC:16:2B:5D:EE:ED:42:5F:D5:79:BE:68:9D:88:99:F8:AD:DB:D8
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D43D94AA57CF7E0640F2F40DAD95A
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EswWK13u7UJf1Xm-aJ2Imfit29g.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39702
IP address blocks: 2a0d:2146:bf00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:43:d9:4a:a5:7c:f7:e0:64:0f:2f:40:da:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12cc162b5deeed425fd579be689d8899f8addbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:f6:46:34:4b:46:7c:6c:9b:63:71:10:b0:
a0:5f:e3:77:2a:96:3a:bb:98:35:bc:fd:b0:d5:02:
26:6d:15:85:11:59:a3:1f:39:0f:a8:1b:fe:00:f3:
39:da:87:53:b9:62:a0:71:8a:3b:24:22:e8:87:f2:
71:ae:ca:08:b7:a2:bc:7d:db:aa:43:e7:1c:14:89:
35:a8:40:52:bc:4d:68:1f:88:e3:90:b4:b6:b9:68:
1c:fb:d7:25:ae:49:9e:ce:27:9e:0a:22:3d:ea:fd:
21:36:61:8f:f9:95:eb:f7:cb:8e:e1:b0:c7:b1:56:
37:56:3b:6a:7e:b4:d7:1c:a3:86:0d:c4:78:6a:5f:
68:e1:8e:ea:20:7f:7c:cf:6a:eb:83:ae:9c:5a:b5:
0b:75:96:72:ba:8b:7f:6d:03:95:4d:6f:a5:ad:e0:
eb:47:fc:c7:2e:cc:54:d7:c3:af:be:bb:0d:9f:61:
46:02:8b:02:08:2c:b5:4b:5f:5c:15:38:c6:1b:47:
f5:55:d7:61:96:01:20:06:72:d7:ea:9f:9f:ba:59:
2b:9f:41:48:70:69:52:b0:b7:b4:10:45:5b:46:a6:
b0:c6:ac:fe:65:00:19:ef:e0:ce:da:bb:d0:df:f0:
23:2c:d0:51:73:ae:e6:b5:1b:4e:82:61:fb:7c:18:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CC:16:2B:5D:EE:ED:42:5F:D5:79:BE:68:9D:88:99:F8:AD:DB:D8
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EswWK13u7UJf1Xm-aJ2Imfit29g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:bf00::/40
Signature Algorithm: sha256WithRSAEncryption
99:e5:3a:28:55:e2:c7:cd:88:34:8c:7f:97:03:f2:71:a3:ed:
25:82:2f:2a:62:7a:d0:50:07:c5:6c:de:0d:34:a0:2a:2f:5b:
21:33:3e:46:2c:8a:ba:92:84:0a:c6:d6:b8:83:aa:6c:cb:73:
bc:e6:82:a5:5b:be:dd:7c:61:ce:18:59:e7:d5:d5:7f:02:a8:
75:c3:c4:94:6a:13:a3:07:5b:26:23:9d:30:e6:8a:ae:5d:a3:
e1:0c:ed:ea:aa:46:e0:5f:07:16:72:c7:82:5d:ab:87:60:bc:
f5:37:8a:45:7d:09:9a:8c:2d:f6:8a:c5:7a:79:ec:1b:db:de:
ee:45:c1:51:48:ca:8c:d2:ca:e2:9d:dd:c4:02:70:41:57:4f:
79:dc:a3:34:d7:11:b7:42:66:e1:42:42:ed:60:14:1c:31:0d:
ba:40:71:9f:c0:5f:b7:87:45:14:13:6d:1f:55:80:6a:57:ac:
0d:53:75:b5:a9:c9:c1:ad:1c:ef:ec:c2:2c:85:a0:74:f5:21:
cf:f8:24:ed:c2:e9:78:e4:d4:b5:8f:5c:a9:77:9d:64:1d:5d:
2d:d8:f2:23:93:a9:38:a7:79:c1:59:a9:51:70:0c:26:06:35:
5e:ae:b1:fa:66:20:45:76:6c:c6:06:8e:2f:8a:56:5e:1d:ba:
6a:12:0e:5e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijUPZSqV89+BkDy9A2tlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjUwMTAxMTU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmNjMTYyYjVkZWVlZDQyNWZkNTc5YmU2ODlkODg5OWY4YWRkYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmND2RjRLRnxsm2NxELCgX+N3KpY6
u5g1vP2w1QImbRWFEVmjHzkPqBv+APM52odTuWKgcYo7JCLoh/JxrsoIt6K8fduq
Q+ccFIk1qEBSvE1oH4jjkLS2uWgc+9clrkmezieeCiI96v0hNmGP+ZXr98uO4bDH
sVY3VjtqfrTXHKOGDcR4al9o4Y7qIH98z2rrg66cWrULdZZyuot/bQOVTW+lreDr
R/zHLsxU18OvvrsNn2FGAosCCCy1S19cFTjGG0f1VddhlgEgBnLX6p+fulkrn0FI
cGlSsLe0EEVbRqawxqz+ZQAZ7+DO2rvQ3/AjLNBRc67mtRtOgmH7fBhBlwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBLMFitd7u1CX9V5vmidiJn4rdvYMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvRXN3V0sxM3U3VUpmMVhtLWFKMkltZml0MjlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg0hRr8w
DQYJKoZIhvcNAQELBQADggEBAJnlOihV4sfNiDSMf5cD8nGj7SWCLypietBQB8Vs
3g00oCovWyEzPkYsirqShArG1riDqmzLc7zmgqVbvt18Yc4YWefV1X8CqHXDxJRq
E6MHWyYjnTDmiq5do+EM7eqqRuBfBxZyx4Jdq4dgvPU3ikV9CZqMLfaKxXp57Bvb
3u5FwVFIyozSyuKd3cQCcEFXT3ncozTXEbdCZuFCQu1gFBwxDbpAcZ/AX7eHRRQT
bR9VgGpXrA1TdbWpycGtHO/swiyFoHT1Ic/4JO3C6Xjk1LWPXKl3nWQdXS3Y8iOT
qTinecFZqVFwDCYGNV6usfpmIEV2bMYGji+KVl4dumoSDl4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:29 2025 by rpki-client