Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/8x3thUPVhO-QHDF9txDBVXR6RE0.roa
File: 8x3thUPVhO-QHDF9txDBVXR6RE0.roa (raw, json)
Hash identifier: 4qeE5IrhbQBJCuNogO6ZHzRthi6efF5gNKUZSiNqpHA=
Subject key identifier: F3:1D:ED:85:43:D5:84:EF:90:1C:31:7D:B7:10:C1:55:74:7A:44:4D
Certificate issuer: /CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Certificate serial: 019368F9AD58BF15DFDC85AC9C3D0EB4DF4C
Authority key identifier: 81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/8x3thUPVhO-QHDF9txDBVXR6RE0.roa
Signing time: Tue 26 Nov 2024 14:56:53 +0000
ROA not before: Tue 26 Nov 2024 14:56:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 2a00:4de0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:f9:ad:58:bf:15:df:dc:85:ac:9c:3d:0e:b4:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Validity
Not Before: Nov 26 14:56:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f31ded8543d584ef901c317db710c155747a444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:b4:12:3e:34:ab:87:1c:3b:f8:10:ab:1b:
85:64:9f:ff:ef:8e:52:25:cf:13:70:9d:36:02:d3:
ff:a8:5d:ec:ab:ca:8b:33:8d:75:95:c6:d4:db:78:
0f:64:c9:5d:f0:15:91:4e:e5:a7:bc:76:23:ad:41:
4c:02:f1:e4:32:d4:97:d0:74:b8:7c:72:62:a5:23:
42:9e:05:93:49:39:c5:74:f5:e8:6d:41:b3:95:4a:
9e:7b:db:73:c1:7f:40:b5:fa:84:01:8f:49:a4:d3:
2a:1c:e3:0d:cc:4b:7d:48:4e:59:28:3b:1f:59:02:
02:cc:aa:29:12:e5:60:e5:45:99:8d:a7:5d:4b:e9:
29:39:6f:13:48:f1:59:75:8e:27:4b:03:c7:3f:4b:
20:02:32:01:30:02:bd:b6:87:c5:57:e1:33:c4:bc:
27:be:d4:2f:2d:cf:2b:b1:9d:9c:33:89:2b:22:8d:
91:69:7c:80:1e:d0:14:7f:1f:e8:14:e1:04:e6:61:
db:06:fe:14:bd:27:5a:7b:a3:a7:10:6e:b5:23:7d:
28:e1:46:6b:cf:cd:98:5d:a2:36:05:91:45:3c:24:
d3:eb:bd:2c:e8:29:c9:06:56:04:d0:4e:29:02:13:
a0:b0:10:2e:54:d6:56:5f:fc:69:f8:68:3e:b0:0a:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:ED:85:43:D5:84:EF:90:1C:31:7D:B7:10:C1:55:74:7A:44:4D
X509v3 Authority Key Identifier:
keyid:81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/8x3thUPVhO-QHDF9txDBVXR6RE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4de0::/29
Signature Algorithm: sha256WithRSAEncryption
77:ad:be:54:73:00:77:9b:47:28:cf:46:da:1c:15:23:81:50:
37:6d:b7:c0:1f:f7:cb:79:67:9d:29:8b:6b:01:6b:95:9f:e0:
18:64:7b:1d:c4:83:f0:83:43:98:25:1a:e5:17:a2:92:d2:2d:
22:89:85:69:de:61:10:3f:04:d0:35:e7:8f:fb:5d:8f:c4:2e:
a3:ce:7c:fe:6c:e5:6f:c1:fa:d1:78:81:81:21:ce:3b:c1:de:
39:62:1e:90:0b:3e:36:44:e1:5a:61:34:be:f1:a1:8e:b3:3c:
63:39:3b:25:6a:1e:e7:40:03:a5:59:e3:69:d5:ee:28:3e:09:
6d:9a:4c:16:eb:c4:5e:59:1c:9a:b5:62:48:36:99:73:9b:46:
33:8b:3d:d3:4f:03:17:86:8b:c1:f7:4c:61:35:04:5c:2a:e3:
9c:43:cc:77:94:ed:24:fe:6f:8c:d2:35:bd:92:61:eb:6e:83:
8f:5f:fa:0f:31:2a:82:f3:a6:6d:5d:1a:1e:77:8f:9a:a7:10:
48:b6:bb:cd:7e:c0:28:ff:45:7c:70:0d:5f:28:8f:23:31:52:
90:48:85:f8:81:5a:a3:61:a4:3f:0d:b6:55:68:88:9e:9f:b2:
dc:6f:c1:5a:e8:a2:85:2b:ea:89:86:20:bf:52:4c:c8:db:bf:
09:f1:38:59
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZNo+a1YvxXf3IWsnD0OtN9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTM0ODc4Zjk2YjM5OTdhYTc4ZjRjN2ZiNjk1ZWYwZGJj
NmQzNjAwHhcNMjQxMTI2MTQ1NjUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzFkZWQ4NTQzZDU4NGVmOTAxYzMxN2RiNzEwYzE1NTc0N2E0NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouy0Ej40q4ccO/gQqxuFZJ//745S
Jc8TcJ02AtP/qF3sq8qLM411lcbU23gPZMld8BWRTuWnvHYjrUFMAvHkMtSX0HS4
fHJipSNCngWTSTnFdPXobUGzlUqee9tzwX9AtfqEAY9JpNMqHOMNzEt9SE5ZKDsf
WQICzKopEuVg5UWZjaddS+kpOW8TSPFZdY4nSwPHP0sgAjIBMAK9tofFV+EzxLwn
vtQvLc8rsZ2cM4krIo2RaXyAHtAUfx/oFOEE5mHbBv4UvSdae6OnEG61I30o4UZr
z82YXaI2BZFFPCTT670s6CnJBlYE0E4pAhOgsBAuVNZWX/xp+Gg+sAoIaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPMd7YVD1YTvkBwxfbcQwVV0ekRNMB8GA1UdIwQY
MBaAFIHjSHj5azmXqnj0x/tpXvDbxtNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VOSWVQbHJPWmVxZVBUSC0ybGU4TnZHMDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iZWJjMzMtZTkwMS00NTU5LWJkZDAt
YjUzMjA0ZDkzYzMzLzEvOHgzdGhVUFZoTy1RSERGOXR4REJWWFI2UkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iZWJjMzMtZTkwMS00NTU5LWJkZDAtYjUzMjA0ZDkzYzMz
LzEvZ2VOSWVQbHJPWmVxZVBUSC0ybGU4TnZHMDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgBN4DAN
BgkqhkiG9w0BAQsFAAOCAQEAd62+VHMAd5tHKM9G2hwVI4FQN223wB/3y3lnnSmL
awFrlZ/gGGR7HcSD8INDmCUa5ReiktItIomFad5hED8E0DXnj/tdj8Quo858/mzl
b8H60XiBgSHOO8HeOWIekAs+NkThWmE0vvGhjrM8Yzk7JWoe50ADpVnjadXuKD4J
bZpMFuvEXlkcmrViSDaZc5tGM4s9008DF4aLwfdMYTUEXCrjnEPMd5TtJP5vjNI1
vZJh626Dj1/6DzEqgvOmbV0aHnePmqcQSLa7zX7AKP9FfHANXyiPIzFSkEiF+IFa
o2GkPw22VWiInp+y3G/BWuiihSvqiYYgv1JMyNu/CfE4WQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:49 2025 by rpki-client