Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/n5LfsHWdx3NkIg-VlpX3NKdvstM.roa
File: n5LfsHWdx3NkIg-VlpX3NKdvstM.roa (raw, json)
Hash identifier: /P0Lk2du0GN/bK+GMxDFcSTxTHSOJIr75UXFkRgBvVA=
Subject key identifier: 9F:92:DF:B0:75:9D:C7:73:64:22:0F:95:96:95:F7:34:A7:6F:B2:D3
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0193ACDCA90974BF3CEE499091DB5FBF051C
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/n5LfsHWdx3NkIg-VlpX3NKdvstM.roa
Signing time: Mon 09 Dec 2024 19:19:22 +0000
ROA not before: Mon 09 Dec 2024 19:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a12:9505::/32 maxlen: 32
2a12:9506::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:dc:a9:09:74:bf:3c:ee:49:90:91:db:5f:bf:05:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Dec 9 19:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f92dfb0759dc77364220f959695f734a76fb2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:bf:cf:bc:e4:82:61:d1:b1:fe:b4:0e:97:
bb:88:77:cf:4a:4d:95:5f:61:39:35:ab:64:2d:19:
8f:cd:39:fa:83:84:b7:a4:b6:a6:75:0c:32:ea:ee:
4f:51:ae:35:84:75:cb:d8:02:13:18:21:9c:60:83:
96:5e:65:84:89:21:10:ce:7d:d0:2d:11:ad:04:98:
ba:ca:e0:2b:c6:f4:c3:88:b4:85:55:6b:8c:2d:ce:
74:7e:cc:66:a6:bf:56:fc:74:04:84:77:9d:f3:4b:
3c:96:3e:20:ff:90:c0:b5:ca:e1:70:34:04:73:43:
fe:3b:02:cc:98:df:d2:86:bc:92:d6:96:8a:f2:1b:
9f:3f:e6:18:1e:f1:91:0e:8a:d0:b1:5c:ff:3a:5a:
92:b6:94:17:81:0d:59:cd:73:c4:12:29:35:21:44:
9d:ef:99:ec:fb:c5:f2:df:15:25:84:b5:3d:36:4b:
69:af:8f:a0:4e:d4:99:1b:e4:a8:62:34:2d:06:b0:
64:53:e5:d0:5b:63:dd:0d:fa:60:f4:05:04:3c:a0:
d8:85:a0:29:a7:9f:73:d4:77:21:8c:72:05:e6:d7:
31:51:8d:a3:a9:6e:42:50:f2:70:01:be:41:7b:55:
75:31:d1:e0:9a:8c:14:4f:1d:dd:d6:6c:d8:80:3d:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:DF:B0:75:9D:C7:73:64:22:0F:95:96:95:F7:34:A7:6F:B2:D3
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/n5LfsHWdx3NkIg-VlpX3NKdvstM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9505::-2a12:9506:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:ad:d6:fa:20:03:e2:09:f4:23:46:cc:39:3a:9d:af:20:06:
4d:6d:5b:74:d3:e1:59:1a:87:a6:22:05:aa:81:94:37:e0:28:
a1:23:50:56:b4:4b:44:63:8f:17:5a:0b:24:bb:d0:6d:d3:f7:
3f:75:72:0a:29:8d:96:ed:fd:f7:ab:4a:e2:f2:4b:f3:5c:44:
bb:85:4f:69:4a:fb:6a:9a:d0:ce:92:3c:77:a0:8a:4f:0f:07:
f2:83:52:39:eb:09:92:1b:2b:73:b6:1e:76:33:46:59:95:f3:
bf:a2:54:74:0c:eb:1a:0a:5b:b4:a5:88:b2:4e:22:b1:f8:82:
14:4a:a2:22:b2:cf:d1:38:74:53:6b:fd:cf:db:d7:a7:57:58:
a3:1d:d9:8a:db:00:c2:19:83:66:6e:49:7e:7f:94:d3:35:e7:
13:ca:cc:f5:af:70:99:07:57:94:fa:40:ba:e2:40:4a:61:5e:
26:68:20:95:b5:6f:93:59:fc:e5:0f:09:95:ba:f2:d1:35:90:
95:5c:7a:c7:b6:2a:da:48:bc:6f:1d:8e:82:72:d6:83:6b:77:
eb:85:dc:c7:bd:86:74:91:87:99:e1:01:24:c9:91:fa:5a:be:
92:49:05:72:dc:d6:66:5c:57:e8:8d:15:e0:f1:d3:90:f5:85:
40:5f:a2:db
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZOs3KkJdL887kmQkdtfvwUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjQxMjA5MTkxOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjkyZGZiMDc1OWRjNzczNjQyMjBmOTU5Njk1ZjczNGE3NmZiMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkq/z7zkgmHRsf60Dpe7iHfPSk2V
X2E5NatkLRmPzTn6g4S3pLamdQwy6u5PUa41hHXL2AITGCGcYIOWXmWEiSEQzn3Q
LRGtBJi6yuArxvTDiLSFVWuMLc50fsxmpr9W/HQEhHed80s8lj4g/5DAtcrhcDQE
c0P+OwLMmN/ShryS1paK8hufP+YYHvGRDorQsVz/OlqStpQXgQ1ZzXPEEik1IUSd
75ns+8Xy3xUlhLU9Nktpr4+gTtSZG+SoYjQtBrBkU+XQW2PdDfpg9AUEPKDYhaAp
p59z1HchjHIF5tcxUY2jqW5CUPJwAb5Be1V1MdHgmowUTx3d1mzYgD2RuQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFJ+S37B1ncdzZCIPlZaV9zSnb7LTMB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvbjVMZnNIV2R4M05rSWctVmxwWDNOS2R2c3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqEpUF
AwUAKhKVBjANBgkqhkiG9w0BAQsFAAOCAQEAIK3W+iAD4gn0I0bMOTqdryAGTW1b
dNPhWRqHpiIFqoGUN+AooSNQVrRLRGOPF1oLJLvQbdP3P3VyCimNlu3996tK4vJL
81xEu4VPaUr7aprQzpI8d6CKTw8H8oNSOesJkhsrc7YedjNGWZXzv6JUdAzrGgpb
tKWIsk4isfiCFEqiIrLP0Th0U2v9z9vXp1dYox3ZitsAwhmDZm5Jfn+U0zXnE8rM
9a9wmQdXlPpAuuJASmFeJmgglbVvk1n85Q8Jlbry0TWQlVx6x7Yq2ki8bx2OgnLW
g2t364Xcx72GdJGHmeEBJMmR+lq+kkkFctzWZlxX6I0V4PHTkPWFQF+i2w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:45 2025 by rpki-client