Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Dpiiya2z2mifdNhqVaRKmAzL95Y.roa
File: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (raw, json)
Hash identifier: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=
Subject key identifier: 0E:98:A2:C9:AD:B3:DA:68:9F:74:D8:6A:55:A4:4A:98:0C:CB:F7:96
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 0194221F5F03472A205C42D1446CF001E222
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Dpiiya2z2mifdNhqVaRKmAzL95Y.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21371
IP address blocks: 2a03:6980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5f:03:47:2a:20:5c:42:d1:44:6c:f0:01:e2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e98a2c9adb3da689f74d86a55a44a980ccbf796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:ab:fe:d9:e1:38:b0:48:a4:47:42:c7:6e:
0f:76:12:6d:22:a7:f1:03:3d:ce:8a:df:58:15:fa:
f9:75:08:38:9d:a7:b2:0d:88:42:1c:95:41:0f:80:
98:85:4f:b9:3e:fa:09:67:96:8b:69:85:5d:af:55:
ce:9a:51:d0:ab:aa:d9:82:44:2f:fd:71:a1:51:71:
26:95:e8:08:91:c3:58:55:7b:99:68:d7:f6:94:4e:
b7:54:d2:1b:cf:e6:c0:a5:51:f1:f5:da:7c:05:e8:
5c:5e:af:95:38:9e:38:7c:5b:6a:a6:0b:7e:a4:d6:
6e:83:ca:dd:0d:60:55:c8:ac:87:7b:27:04:3f:34:
06:9f:f8:c1:b6:89:50:46:96:64:dd:46:51:d9:ed:
b9:fb:2a:af:d6:9f:20:c8:cd:b2:85:3b:a2:42:01:
0e:b6:33:e5:c3:8c:02:b0:6e:59:d8:1c:41:04:7c:
d3:3c:6a:67:38:28:22:e3:5f:35:a7:52:80:5c:b0:
4e:f7:81:68:44:03:15:d6:9f:93:59:d5:79:e9:f2:
fd:f4:bb:a8:d2:8f:e8:da:0c:dc:03:d1:62:5f:3a:
71:33:d0:a0:fc:f9:de:89:80:27:7e:2f:e4:b1:62:
6d:7f:1b:3d:ea:31:4c:20:cd:2e:2f:31:0a:44:d4:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:A2:C9:AD:B3:DA:68:9F:74:D8:6A:55:A4:4A:98:0C:CB:F7:96
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Dpiiya2z2mifdNhqVaRKmAzL95Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6980::/32
Signature Algorithm: sha256WithRSAEncryption
95:ec:20:c8:d9:7b:45:4f:89:01:b7:ce:9e:ea:db:4f:35:aa:
9c:73:e6:67:71:b5:6c:c3:96:60:d0:f3:f1:af:6f:5f:2a:c0:
90:ac:b4:54:4e:de:1e:64:af:be:a6:dd:34:96:37:17:00:4f:
00:cd:a8:45:4a:da:90:f0:0e:4b:01:98:8a:f8:62:d5:eb:75:
d2:67:74:24:45:5e:17:ea:3d:6f:98:49:bc:ef:b3:2e:39:cc:
94:c0:cd:63:31:ef:92:62:14:43:3a:11:63:f9:c4:85:c4:4e:
1c:9f:cb:03:41:5c:77:ac:43:2e:aa:ab:18:e3:3b:4b:e6:10:
b3:9f:1a:3b:45:96:0a:a2:fb:86:ea:d5:ad:f5:1a:08:dc:8a:
4a:67:4a:cd:15:bd:93:52:e1:3d:f5:9c:66:ee:2c:96:b1:ad:
f4:1a:96:7b:e5:39:73:d4:00:e9:1c:5f:e5:36:69:58:75:29:
9b:2d:a2:47:4d:c0:85:1c:92:8c:72:96:79:9b:81:c4:f1:ce:
c3:5f:55:d0:8e:80:70:2f:c1:6a:ae:1b:dd:75:78:65:26:55:
c2:cd:19:47:fb:91:66:cf:ef:62:30:9a:fe:2c:53:ee:f3:71:
cd:49:4f:ee:b6:2d:91:7d:ac:5b:9b:52:2a:52:56:7a:77:2b:
7a:19:a7:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQiH18DRyogXELRRGzwAeIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2
OGI4NjQwHhcNMjUwMTAxMTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTk4YTJjOWFkYjNkYTY4OWY3NGQ4NmE1NWE0NGE5ODBjY2JmNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jCr/tnhOLBIpEdCx24PdhJtIqfx
Az3Oit9YFfr5dQg4naeyDYhCHJVBD4CYhU+5PvoJZ5aLaYVdr1XOmlHQq6rZgkQv
/XGhUXEmlegIkcNYVXuZaNf2lE63VNIbz+bApVHx9dp8BehcXq+VOJ44fFtqpgt+
pNZug8rdDWBVyKyHeycEPzQGn/jBtolQRpZk3UZR2e25+yqv1p8gyM2yhTuiQgEO
tjPlw4wCsG5Z2BxBBHzTPGpnOCgi4181p1KAXLBO94FoRAMV1p+TWdV56fL99Luo
0o/o2gzcA9FiXzpxM9Cg/PneiYAnfi/ksWJtfxs96jFMIM0uLzEKRNRl8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA6Yosmts9pon3TYalWkSpgMy/eWMB8GA1UdIwQY
MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt
MTFlOWU5ZjAxMzQzLzEvRHBpaXlhMnoybWlmZE5ocVZhUkttQXpMOTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz
LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNpgDAN
BgkqhkiG9w0BAQsFAAOCAQEAlewgyNl7RU+JAbfOnurbTzWqnHPmZ3G1bMOWYNDz
8a9vXyrAkKy0VE7eHmSvvqbdNJY3FwBPAM2oRUrakPAOSwGYivhi1et10md0JEVe
F+o9b5hJvO+zLjnMlMDNYzHvkmIUQzoRY/nEhcROHJ/LA0Fcd6xDLqqrGOM7S+YQ
s58aO0WWCqL7hurVrfUaCNyKSmdKzRW9k1LhPfWcZu4slrGt9BqWe+U5c9QA6Rxf
5TZpWHUpmy2iR03AhRySjHKWeZuBxPHOw19V0I6AcC/Baq4b3XV4ZSZVws0ZR/uR
Zs/vYjCa/ixT7vNxzUlP7rYtkX2sW5tSKlJWencrehmnaw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:52 2025 by rpki-client