Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa
File: jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa (raw, json)
Hash identifier: LWFdrbfxp7Y32HBXjHLDhwbHmx4AJjStWSjMklLVIJw=
Subject key identifier: 8E:58:0C:60:13:CF:AE:15:66:AF:D9:00:F2:CE:C8:B4:03:B5:68:07
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B246408A4478223E76C1923CE88A44
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215569
IP address blocks: 2a07:2486:4010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:40:8a:44:78:22:3e:76:c1:92:3c:e8:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e580c6013cfae1566afd900f2cec8b403b56807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:6b:79:42:f3:45:9f:f1:18:fb:0d:c9:80:
84:57:f8:63:a1:09:08:48:36:b8:e9:75:a9:09:ae:
b1:10:62:34:7f:cd:9f:c6:92:62:80:4f:2a:9f:f9:
ef:15:bb:eb:e1:6b:87:f4:7f:32:7b:de:a4:ea:ec:
d0:f8:78:ae:6c:65:33:0b:97:ba:d9:2d:7e:38:07:
0e:57:9c:19:9a:3c:4e:2d:ac:76:60:ea:4b:77:66:
f9:b2:9f:31:80:e2:f6:c7:c5:03:93:bc:d8:da:09:
cb:e8:10:e0:7f:e5:47:2f:16:a6:0e:7b:d5:e0:85:
32:4b:4a:e0:31:90:b2:61:eb:84:22:72:55:25:1c:
4b:91:33:3a:6c:7e:f0:b1:1b:72:02:e9:c1:29:63:
12:13:e3:cb:a1:71:58:af:27:61:3c:28:b7:eb:41:
f2:d1:d5:b8:0a:43:f5:e5:d6:29:78:3c:b0:e4:ba:
22:c2:b3:e0:1b:16:27:c5:5f:94:f4:66:7b:51:72:
bb:be:d1:2e:60:56:2f:61:fc:0e:36:32:ad:aa:ec:
e8:fc:ea:6b:2a:b1:33:2a:7e:69:79:9f:6e:6d:94:
84:5d:de:4b:f5:37:fb:3c:02:73:ea:af:5e:f3:37:
81:0c:46:02:6b:d6:ca:42:ff:4e:47:47:32:34:d4:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:0C:60:13:CF:AE:15:66:AF:D9:00:F2:CE:C8:B4:03:B5:68:07
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:4010::/44
Signature Algorithm: sha256WithRSAEncryption
79:04:17:7f:94:2d:70:8b:52:6a:f2:10:17:d9:18:16:42:a6:
f4:04:88:68:be:3b:f6:ef:1b:ce:55:e7:a4:b5:6a:55:8b:86:
1f:2d:b0:22:6b:96:12:b4:57:eb:8d:b6:98:e8:43:48:87:06:
6f:bb:0f:05:29:d3:2a:b8:02:af:27:4f:e1:6d:9e:a9:84:f2:
2b:53:03:c6:fc:2d:e7:a1:b0:68:41:3f:66:cf:eb:68:56:31:
66:bc:09:64:6f:7e:81:d4:c3:d7:42:73:1d:67:36:f7:45:b2:
1f:30:6d:82:a3:12:3a:58:a8:45:f0:46:bf:2b:9f:0d:97:57:
90:d0:f4:16:59:9a:41:7e:8b:5d:53:36:26:ae:52:7c:80:23:
b5:89:83:38:b0:dc:42:8a:13:dd:e2:f3:29:e3:a4:8b:c0:f7:
1b:e1:a5:f3:cb:6b:f9:ab:23:bc:b1:37:d6:ce:61:7d:b3:74:
85:f8:89:d9:c7:36:f0:43:45:3f:a3:7e:a7:58:13:1c:4f:8b:
23:4b:cc:59:1d:70:e9:10:a0:bd:fd:34:6b:b9:31:f0:d6:56:
ed:02:74:7d:02:f8:09:41:a5:d9:12:23:a1:8d:c2:5f:04:9e:
4c:bb:84:e4:90:a6:c7:3a:c9:be:52:76:3e:82:f4:22:a7:f5:
f6:fc:79:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhskZAikR4Ij52wZI86IpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh
YmE1ZGEwHhcNMjUwMTAxMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU4MGM2MDEzY2ZhZTE1NjZhZmQ5MDBmMmNlYzhiNDAzYjU2ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp9reULzRZ/xGPsNyYCEV/hjoQkI
SDa46XWpCa6xEGI0f82fxpJigE8qn/nvFbvr4WuH9H8ye96k6uzQ+HiubGUzC5e6
2S1+OAcOV5wZmjxOLax2YOpLd2b5sp8xgOL2x8UDk7zY2gnL6BDgf+VHLxamDnvV
4IUyS0rgMZCyYeuEInJVJRxLkTM6bH7wsRtyAunBKWMSE+PLoXFYrydhPCi360Hy
0dW4CkP15dYpeDyw5LoiwrPgGxYnxV+U9GZ7UXK7vtEuYFYvYfwONjKtquzo/Opr
KrEzKn5peZ9ubZSEXd5L9Tf7PAJz6q9e8zeBDEYCa9bKQv9OR0cyNNRTbQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI5YDGATz64VZq/ZAPLOyLQDtWgHMB8GA1UdIwQY
MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt
Mzg0ZmZjZTc3ZjUyLzEvamxnTVlCUFByaFZtcjlrQThzN0l0QU8xYUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy
LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgckhkAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB5BBd/lC1wi1Jq8hAX2RgWQqb0BIhovjv27xvO
VeektWpVi4YfLbAia5YStFfrjbaY6ENIhwZvuw8FKdMquAKvJ0/hbZ6phPIrUwPG
/C3nobBoQT9mz+toVjFmvAlkb36B1MPXQnMdZzb3RbIfMG2CoxI6WKhF8Ea/K58N
l1eQ0PQWWZpBfotdUzYmrlJ8gCO1iYM4sNxCihPd4vMp46SLwPcb4aXzy2v5qyO8
sTfWzmF9s3SF+InZxzbwQ0U/o36nWBMcT4sjS8xZHXDpEKC9/TRruTHw1lbtAnR9
AvgJQaXZEiOhjcJfBJ5Mu4TkkKbHOsm+UnY+gvQip/X2/HlH
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:25 2025 by rpki-client