Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/L4zdfpQTMapiD2xjjc9b_8rVphY.roa
File: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (raw, json)
Hash identifier: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=
Subject key identifier: 2F:8C:DD:7E:94:13:31:AA:62:0F:6C:63:8D:CF:5B:FF:CA:D5:A6:16
Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial: 0194266B548D21C3928B4347E3D6F8C52B0E
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/L4zdfpQTMapiD2xjjc9b_8rVphY.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5524
IP address blocks: 2a14:6ec0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:54:8d:21:c3:92:8b:43:47:e3:d6:f8:c5:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8cdd7e941331aa620f6c638dcf5bffcad5a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:10:dd:e3:4e:fb:08:18:59:65:48:cd:17:
bb:64:11:34:03:fc:b7:0e:22:43:89:94:94:1e:67:
3b:8a:c3:14:0b:d2:16:38:34:57:66:8d:11:e0:d3:
35:d4:6d:c3:e6:a4:18:c0:fe:68:dc:ef:a2:58:88:
74:a7:b4:9a:c3:94:c7:60:4c:d9:93:99:14:8b:79:
61:44:51:da:6e:1e:27:93:10:f3:7c:6c:55:2b:43:
92:0e:f2:26:67:bf:81:aa:07:86:9b:d4:77:a7:96:
04:57:fe:61:94:c9:e5:78:04:a4:53:79:e2:e4:ac:
84:25:c7:79:f6:e7:fe:c7:d3:f1:ce:4b:54:77:53:
ef:39:53:7d:c9:8c:33:3f:66:33:46:d4:e6:19:db:
bd:25:dc:b7:4c:43:17:90:8e:56:01:04:ec:fa:c0:
15:ad:c3:de:51:b8:3b:fd:ef:84:1b:34:46:a0:12:
86:f1:f8:ce:6d:a3:d5:62:9b:2e:25:74:ef:fd:22:
28:25:d1:6a:dd:07:a4:39:ed:92:97:85:07:fb:77:
60:57:2d:2b:bb:aa:af:cc:b5:dd:0f:db:03:6a:23:
31:7e:9e:7b:77:72:77:ae:80:11:c5:c3:cd:f9:0c:
2f:5e:8b:93:bf:21:8a:ad:ba:8e:d4:5f:56:c9:87:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:DD:7E:94:13:31:AA:62:0F:6C:63:8D:CF:5B:FF:CA:D5:A6:16
X509v3 Authority Key Identifier:
keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/L4zdfpQTMapiD2xjjc9b_8rVphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
17:45:37:54:3c:d7:71:fa:61:91:00:34:d8:ae:00:ac:02:66:
01:c7:ad:09:dc:c3:f6:91:ea:ba:25:3d:98:97:0f:0f:06:34:
89:e5:d6:17:01:8f:1c:80:43:f6:12:c0:f0:fc:55:59:43:2d:
47:d5:cc:65:54:48:cc:3c:0f:dd:c9:df:68:d2:90:03:43:73:
0f:39:c9:0c:7d:00:42:ff:14:25:0d:ba:31:ab:9d:f5:a7:85:
74:e2:63:4e:af:68:82:16:99:f7:96:dc:2d:7f:ff:58:52:a8:
2e:a5:27:b5:80:da:8d:02:2d:e7:1f:80:4d:c6:f1:35:04:96:
41:46:80:de:ef:a0:c8:69:4c:50:73:b6:f7:8e:7e:f6:bb:86:
89:36:58:d1:36:53:b4:be:cb:f2:6f:90:d5:8a:00:82:29:07:
0e:8f:94:a8:7a:bd:a3:7d:eb:ad:b8:96:91:c7:9d:ae:44:cc:
82:99:ca:ed:f8:7c:7e:10:f0:68:44:b5:fc:ab:3d:46:b7:c6:
f2:77:85:d6:a2:b2:32:7a:63:69:e2:bf:94:ac:15:76:e2:0b:
7a:36:28:2b:f6:53:b5:5d:a1:aa:2e:47:48:f9:4d:a2:76:3c:
82:46:de:fd:09:69:ef:41:d0:db:c9:a7:cc:8b:11:d4:f5:32:
40:a0:56:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma1SNIcOSi0NH49b4xSsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh
ODY3ZGMwHhcNMjUwMTAyMDk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjhjZGQ3ZTk0MTMzMWFhNjIwZjZjNjM4ZGNmNWJmZmNhZDVhNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTwQ3eNO+wgYWWVIzRe7ZBE0A/y3
DiJDiZSUHmc7isMUC9IWODRXZo0R4NM11G3D5qQYwP5o3O+iWIh0p7Saw5THYEzZ
k5kUi3lhRFHabh4nkxDzfGxVK0OSDvImZ7+BqgeGm9R3p5YEV/5hlMnleASkU3ni
5KyEJcd59uf+x9PxzktUd1PvOVN9yYwzP2YzRtTmGdu9Jdy3TEMXkI5WAQTs+sAV
rcPeUbg7/e+EGzRGoBKG8fjObaPVYpsuJXTv/SIoJdFq3QekOe2Sl4UH+3dgVy0r
u6qvzLXdD9sDaiMxfp57d3J3roARxcPN+QwvXouTvyGKrbqO1F9WyYepNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC+M3X6UEzGqYg9sY43PW//K1aYWMB8GA1UdIwQY
MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt
YzZhYzRkZDdjOGU0LzEvTDR6ZGZwUVRNYXBpRDJ4ampjOWJfOHJWcGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0
LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRuwDAN
BgkqhkiG9w0BAQsFAAOCAQEAF0U3VDzXcfphkQA02K4ArAJmAcetCdzD9pHquiU9
mJcPDwY0ieXWFwGPHIBD9hLA8PxVWUMtR9XMZVRIzDwP3cnfaNKQA0NzDznJDH0A
Qv8UJQ26Maud9aeFdOJjTq9oghaZ95bcLX//WFKoLqUntYDajQIt5x+ATcbxNQSW
QUaA3u+gyGlMUHO2945+9ruGiTZY0TZTtL7L8m+Q1YoAgikHDo+UqHq9o33rrbiW
kcedrkTMgpnK7fh8fhDwaES1/Ks9RrfG8neF1qKyMnpjaeK/lKwVduILejYoK/ZT
tV2hqi5HSPlNonY8gkbe/Qlp70HQ28mnzIsR1PUyQKBW6g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:32 2025 by rpki-client