Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa
File: 9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa (raw, json)
Hash identifier: /UlnktLBtYlahSnqletcALvH8tmcRVU8Atc0U8lv3Og=
Subject key identifier: F6:39:91:D2:3B:4A:16:D3:9E:6A:AC:71:4A:60:A2:D1:FE:D7:7E:59
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5EF9364EAD6E96F5E61B277F33AB4
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26415
IP address blocks: 2a00:11c0:48:5::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ef:93:64:ea:d6:e9:6f:5e:61:b2:77:f3:3a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f63991d23b4a16d39e6aac714a60a2d1fed77e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:25:6f:1e:2c:a3:5e:70:85:be:22:62:b3:
25:98:8a:b0:76:d9:a6:52:9d:4b:2b:9c:f9:fb:4e:
d7:a5:57:65:a4:39:0c:68:8d:db:84:69:92:bf:77:
6d:e3:0c:c7:82:df:d8:92:42:85:0a:5b:72:29:c2:
78:d3:38:60:20:5a:f8:85:9e:bc:2b:98:59:2e:07:
fd:55:47:10:ae:6d:bf:c1:d0:00:76:0c:cb:ef:b5:
f1:22:4b:16:ca:63:cc:8b:0a:c6:ca:e0:b8:ce:65:
9d:c0:02:85:06:f9:05:05:1a:9c:a6:b1:6f:fd:89:
b7:c1:47:bb:ab:05:02:0c:54:3a:1e:ec:b6:35:e4:
8e:d7:bf:52:ee:d4:cd:33:d5:6e:5c:74:ab:e3:5b:
f1:55:9c:3b:15:70:0e:37:c0:a6:7e:29:c5:cd:28:
27:e3:70:e1:db:78:eb:5a:10:24:6f:b3:ef:91:fb:
cc:79:04:14:ae:50:b5:2f:12:af:c4:e9:e2:8d:7a:
68:c6:1a:6e:25:ff:1d:e0:db:d7:4e:16:71:4e:be:
11:75:a3:9c:da:5f:9f:59:96:e7:6f:ad:e7:fd:6a:
94:73:9b:90:b5:a1:c0:86:e8:e2:02:e0:98:42:a5:
74:36:cd:8e:0c:91:6e:d5:e8:15:85:54:4d:54:c0:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:39:91:D2:3B:4A:16:D3:9E:6A:AC:71:4A:60:A2:D1:FE:D7:7E:59
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:11c0:48:5::/64
Signature Algorithm: sha256WithRSAEncryption
42:16:a2:18:ac:62:67:16:33:0f:69:2b:05:85:39:8a:03:29:
6c:b1:7e:e4:ca:15:b9:fd:f6:c0:9b:8d:d5:7d:96:13:98:a9:
08:88:ec:40:e9:9d:46:b6:33:40:a2:a6:e0:f6:e8:f9:1b:d9:
01:a0:ba:e0:1c:a2:be:e9:36:43:af:8f:bf:76:20:e7:a0:76:
08:b8:6c:a8:3f:c4:2f:71:59:07:bb:40:53:96:52:9e:a8:cd:
0e:b1:41:9b:61:4f:e2:29:15:e2:e7:9a:f4:6a:03:76:40:45:
1d:68:3f:1a:2f:5e:64:5b:f7:cd:b1:35:29:cf:99:5c:02:87:
00:eb:e9:75:ca:46:bc:ef:2b:ae:34:63:e8:69:23:cc:0b:93:
68:64:c2:ad:1d:4e:4d:6e:db:0a:3b:b5:0e:44:bf:55:c3:d7:
36:ec:f7:17:da:3d:0d:d3:03:15:b7:2d:bf:e1:6e:fc:c2:28:
4d:16:70:22:91:6c:56:38:a2:99:de:98:db:ad:68:9a:10:19:
32:23:c9:4e:9b:a0:57:49:af:fc:87:90:66:44:eb:fd:2e:77:
f9:56:e2:ea:dc:54:f5:b6:68:9e:1c:78:16:d3:66:1c:15:1e:
88:44:92:a0:c2:91:9f:95:21:19:4d:0f:7a:5c:5a:59:92:e6:
d6:0b:87:94
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQg1e+TZOrW6W9eYbJ38zq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjUwMTAxMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjM5OTFkMjNiNGExNmQzOWU2YWFjNzE0YTYwYTJkMWZlZDc3ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnUlbx4so15whb4iYrMlmIqwdtmm
Up1LK5z5+07XpVdlpDkMaI3bhGmSv3dt4wzHgt/YkkKFCltyKcJ40zhgIFr4hZ68
K5hZLgf9VUcQrm2/wdAAdgzL77XxIksWymPMiwrGyuC4zmWdwAKFBvkFBRqcprFv
/Ym3wUe7qwUCDFQ6Huy2NeSO179S7tTNM9VuXHSr41vxVZw7FXAON8CmfinFzSgn
43Dh23jrWhAkb7PvkfvMeQQUrlC1LxKvxOnijXpoxhpuJf8d4NvXThZxTr4RdaOc
2l+fWZbnb63n/WqUc5uQtaHAhujiAuCYQqV0Ns2ODJFu1egVhVRNVMC93QIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFPY5kdI7ShbTnmqscUpgotH+135ZMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvOWptUjBqdEtGdE9lYXF4eFNtQ2kwZjdYZmxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgARwABI
AAUwDQYJKoZIhvcNAQELBQADggEBAEIWohisYmcWMw9pKwWFOYoDKWyxfuTKFbn9
9sCbjdV9lhOYqQiI7EDpnUa2M0CipuD26Pkb2QGguuAcor7pNkOvj792IOegdgi4
bKg/xC9xWQe7QFOWUp6ozQ6xQZthT+IpFeLnmvRqA3ZARR1oPxovXmRb982xNSnP
mVwChwDr6XXKRrzvK640Y+hpI8wLk2hkwq0dTk1u2wo7tQ5Ev1XD1zbs9xfaPQ3T
AxW3Lb/hbvzCKE0WcCKRbFY4opnemNutaJoQGTIjyU6boFdJr/yHkGZE6/0ud/lW
4urcVPW2aJ4ceBbTZhwVHohEkqDCkZ+VIRlND3pcWlmS5tYLh5Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:28 2025 by rpki-client