Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/3a9lX76bQSJaqMppZTquI9xrjjE.roa
File: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (raw, json)
Hash identifier: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=
Subject key identifier: DD:AF:65:5F:BE:9B:41:22:5A:A8:CA:69:65:3A:AE:23:DC:6B:8E:31
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194DA8E4D725701FFECE9C025234D871564
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/3a9lX76bQSJaqMppZTquI9xrjjE.roa
Signing time: Thu 06 Feb 2025 09:19:06 +0000
ROA not before: Thu 06 Feb 2025 09:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207806
IP address blocks: 2a00:7180:8004::/46 maxlen: 46
2a04:800:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:8e:4d:72:57:01:ff:ec:e9:c0:25:23:4d:87:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 6 09:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddaf655fbe9b41225aa8ca69653aae23dc6b8e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:ec:96:04:68:81:54:dc:12:bb:6f:27:ee:
a8:11:e7:e2:4e:0b:a4:84:6c:54:1f:de:6c:b3:52:
48:22:27:6f:c0:e7:85:b2:a0:e0:2c:db:7b:7b:a5:
a7:74:f4:71:c0:0b:86:41:56:a0:16:3f:5f:f1:64:
3b:e1:fa:3b:e0:5e:12:93:04:c8:0e:7a:36:f1:87:
4f:48:2b:29:29:2e:7c:47:4a:88:92:64:b7:96:80:
0a:ea:14:eb:97:28:e2:29:94:62:b9:e1:08:c9:44:
9d:f9:a3:b4:a4:52:d5:ce:ca:2f:e9:d5:b7:24:49:
96:47:56:c0:3c:70:de:93:ee:46:17:7e:6d:78:15:
95:cb:c1:b5:d2:53:ba:4d:80:bc:c0:72:9b:65:df:
01:be:fa:2e:9b:67:6a:65:47:95:2d:84:35:5a:b8:
8d:66:92:03:b5:44:89:e4:cc:ac:d1:ab:a4:47:35:
ac:5e:18:6c:06:ee:36:42:55:93:cd:5e:fa:c0:03:
b2:3d:47:34:da:cd:c3:26:c9:1a:17:65:9f:33:8e:
bd:1a:03:1e:e5:31:6a:75:df:b5:ab:bf:72:4d:1c:
53:fe:2c:dc:7e:36:bc:70:8a:18:5a:58:31:07:f7:
d8:46:94:ff:07:42:2a:37:84:35:2a:11:1e:7e:60:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:65:5F:BE:9B:41:22:5A:A8:CA:69:65:3A:AE:23:DC:6B:8E:31
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/3a9lX76bQSJaqMppZTquI9xrjjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8004::/46
2a04:800:1000::/36
Signature Algorithm: sha256WithRSAEncryption
72:0a:a2:22:0c:9a:cb:c9:bf:a8:b7:31:44:2a:14:d4:8b:fe:
0a:78:cd:f1:7f:40:0c:02:74:0d:8f:91:cb:8b:2f:e0:1f:f1:
1f:f4:27:33:b0:0f:af:d7:9c:3d:6f:90:12:0b:3a:1e:74:df:
19:3b:7d:29:c5:46:99:8a:c3:da:8a:58:b6:41:2c:91:f4:2c:
93:1f:7a:ba:90:02:bb:a5:aa:96:b7:52:36:f2:47:f2:eb:62:
5e:90:d1:55:ed:dd:78:80:22:ec:54:82:52:11:e6:97:40:99:
85:85:59:ec:12:43:97:10:d0:43:bb:cb:9d:97:99:34:08:07:
de:70:0d:ea:10:12:49:0d:a3:0f:7d:e9:5d:11:c5:a9:f8:0b:
f4:69:1f:1c:0c:00:40:dc:c6:63:2c:dc:0c:22:70:d8:32:91:
25:3c:fe:ef:0b:e4:91:9a:48:8e:c0:89:e6:24:df:e3:71:a9:
40:64:c2:76:5e:57:59:f8:f0:1e:a9:73:8f:60:6a:d3:ff:bb:
97:6a:2f:68:3f:e7:dd:a3:19:38:9e:ff:6a:1c:fc:16:c1:6a:
2c:f9:1c:89:b6:65:91:f6:40:66:19:2f:8d:9a:ac:97:2c:84:
74:55:43:ee:89:60:16:b6:4e:e3:b1:e2:19:bc:75:2f:86:9a:
76:d8:ac:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZTajk1yVwH/7OnAJSNNhxVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMjA2MDkxOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGFmNjU1ZmJlOWI0MTIyNWFhOGNhNjk2NTNhYWUyM2RjNmI4ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprbslgRogVTcErtvJ+6oEefiTguk
hGxUH95ss1JIIidvwOeFsqDgLNt7e6WndPRxwAuGQVagFj9f8WQ74fo74F4SkwTI
Dno28YdPSCspKS58R0qIkmS3loAK6hTrlyjiKZRiueEIyUSd+aO0pFLVzsov6dW3
JEmWR1bAPHDek+5GF35teBWVy8G10lO6TYC8wHKbZd8Bvvoum2dqZUeVLYQ1WriN
ZpIDtUSJ5Mys0aukRzWsXhhsBu42QlWTzV76wAOyPUc02s3DJskaF2WfM469GgMe
5TFqdd+1q79yTRxT/izcfja8cIoYWlgxB/fYRpT/B0IqN4Q1KhEefmCjlQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFN2vZV++m0EiWqjKaWU6riPca44xMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvM2E5bFg3NmJRU0phcU1wcFpUcXVJOXhyampFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKgBxgIAE
AwYEKgQIABAwDQYJKoZIhvcNAQELBQADggEBAHIKoiIMmsvJv6i3MUQqFNSL/gp4
zfF/QAwCdA2PkcuLL+Af8R/0JzOwD6/XnD1vkBILOh503xk7fSnFRpmKw9qKWLZB
LJH0LJMferqQArulqpa3UjbyR/LrYl6Q0VXt3XiAIuxUglIR5pdAmYWFWewSQ5cQ
0EO7y52XmTQIB95wDeoQEkkNow996V0Rxan4C/RpHxwMAEDcxmMs3AwicNgykSU8
/u8L5JGaSI7AieYk3+NxqUBkwnZeV1n48B6pc49gatP/u5dqL2g/592jGTie/2oc
/BbBaiz5HIm2ZZH2QGYZL42arJcshHRVQ+6JYBa2TuOx4hm8dS+GmnbYrCE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:28:51 2025 by rpki-client