Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0gJKYf93VPJGNSnnyVLxfMGEhww.roa
File: 0gJKYf93VPJGNSnnyVLxfMGEhww.roa (raw, json)
Hash identifier: RX7KP5Ht+eEdB0Nc6KBbLCRV0hvdl3MKshRhfjPt7mI=
Subject key identifier: D2:02:4A:61:FF:77:54:F2:46:35:29:E7:C9:52:F1:7C:C1:84:87:0C
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 018CCA2B13F7061BBCA2CC6C47E1099E08E1
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0gJKYf93VPJGNSnnyVLxfMGEhww.roa
Signing time: Tue 02 Jan 2024 12:34:29 +0000
ROA not before: Tue 02 Jan 2024 12:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60084
IP address blocks: 2a00:ab00:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:13:f7:06:1b:bc:a2:cc:6c:47:e1:09:9e:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 2 12:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2024a61ff7754f2463529e7c952f17cc184870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:65:bc:8a:f5:89:2b:83:04:f4:74:90:c5:
6d:94:67:a6:07:04:01:d9:89:dd:d6:0b:0a:d1:1c:
6e:be:35:32:be:42:19:c8:72:9d:1a:38:53:e5:fb:
23:47:80:c9:e1:2f:96:98:af:a5:2a:f2:6f:f4:ed:
ba:97:8f:e9:7d:1f:04:16:68:38:e3:28:c5:0c:61:
77:c5:9a:a8:32:54:c2:19:b5:62:29:7d:65:da:88:
07:5e:c8:f4:27:a2:35:08:05:1a:a1:8f:55:13:67:
bd:13:61:7b:87:9c:3b:5f:99:ab:74:33:03:c4:06:
5c:72:d3:4e:3c:96:31:f4:c3:15:6a:4b:81:83:ec:
e1:27:43:93:bb:08:e8:94:ff:13:b3:5e:4a:24:09:
b8:7f:8a:04:14:74:7e:19:0a:ff:c1:65:78:5a:bd:
a6:dd:06:7a:e0:27:dd:6f:9b:34:30:a6:10:0d:50:
a7:bc:58:c3:c2:74:c9:6b:a9:8e:39:4d:b7:e3:0f:
c1:59:5d:f1:2c:40:9b:4c:51:b7:e3:4a:3a:1a:69:
25:d6:6a:a1:1e:98:07:df:5f:28:c5:c1:c0:de:b7:
36:8b:36:a9:f7:4d:1d:65:73:e9:f4:db:98:52:32:
4f:07:8b:b0:7b:0b:1b:76:29:c9:97:52:5b:be:b7:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:4A:61:FF:77:54:F2:46:35:29:E7:C9:52:F1:7C:C1:84:87:0C
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0gJKYf93VPJGNSnnyVLxfMGEhww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ab00:7000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:ad:a1:cf:25:c8:67:d8:89:2a:13:70:48:cb:eb:d8:02:ba:
3e:c2:a0:54:9b:2e:d0:c2:0c:31:be:3e:10:ce:6c:81:42:0c:
44:ed:f1:49:e9:51:4d:98:c0:a8:a2:d9:c5:70:2b:99:89:47:
b4:e6:4b:48:3e:1a:bf:f6:d8:e8:b0:95:9e:ae:69:31:06:b5:
4b:bf:df:51:1c:b2:69:59:c2:a8:e5:4c:35:10:5e:da:8c:8f:
b1:5e:df:af:b5:85:ac:23:f7:0f:f5:e2:fe:26:70:39:75:c2:
12:3d:3e:35:52:05:77:47:e8:27:f6:89:65:4b:8a:da:42:17:
66:e7:b3:64:4f:cc:b5:fe:64:98:85:7c:8d:41:1e:10:e4:eb:
0e:4d:c4:9e:d5:67:ae:82:e4:6e:0d:eb:2b:60:26:81:e7:29:
b1:cd:a8:b6:8b:4c:ac:fa:0a:ac:d2:ef:a6:3f:ac:20:a7:26:
1c:9e:58:96:32:41:c2:41:55:c0:52:8b:4e:fb:3d:26:42:94:
5e:89:d2:b8:eb:72:78:12:0b:ea:47:cc:95:c9:85:58:77:15:
29:22:a6:25:27:57:05:35:71:8c:56:b6:d5:1c:43:f7:f6:4e:
64:02:23:82:53:bf:ba:33:01:ed:a8:23:21:ad:7c:67:42:4e:
b8:83:2b:a8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzKKxP3Bhu8osxsR+EJngjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjQwMTAyMTIzNDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjAyNGE2MWZmNzc1NGYyNDYzNTI5ZTdjOTUyZjE3Y2MxODQ4NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXtlvIr1iSuDBPR0kMVtlGemBwQB
2Ynd1gsK0RxuvjUyvkIZyHKdGjhT5fsjR4DJ4S+WmK+lKvJv9O26l4/pfR8EFmg4
4yjFDGF3xZqoMlTCGbViKX1l2ogHXsj0J6I1CAUaoY9VE2e9E2F7h5w7X5mrdDMD
xAZcctNOPJYx9MMVakuBg+zhJ0OTuwjolP8Ts15KJAm4f4oEFHR+GQr/wWV4Wr2m
3QZ64Cfdb5s0MKYQDVCnvFjDwnTJa6mOOU234w/BWV3xLECbTFG340o6Gmkl1mqh
HpgH318oxcHA3rc2izap900dZXPp9NuYUjJPB4uwewsbdinJl1JbvrdtEQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNICSmH/d1TyRjUp58lS8XzBhIcMMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvMGdKS1lmOTNWUEpHTlNubnlWTHhmTUdFaHd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgCrAHAw
DQYJKoZIhvcNAQELBQADggEBAFutoc8lyGfYiSoTcEjL69gCuj7CoFSbLtDCDDG+
PhDObIFCDETt8UnpUU2YwKii2cVwK5mJR7TmS0g+Gr/22OiwlZ6uaTEGtUu/31Ec
smlZwqjlTDUQXtqMj7Fe36+1hawj9w/14v4mcDl1whI9PjVSBXdH6Cf2iWVLitpC
F2bns2RPzLX+ZJiFfI1BHhDk6w5NxJ7VZ66C5G4N6ytgJoHnKbHNqLaLTKz6CqzS
76Y/rCCnJhyeWJYyQcJBVcBSi077PSZClF6J0rjrcngSC+pHzJXJhVh3FSkipiUn
VwU1cYxWttUcQ/f2TmQCI4JTv7ozAe2oIyGtfGdCTriDK6g=
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:44:26 2025 by rpki-client