Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2fhYiByQkW-xKWGiNuUZfvoHrPA.roa
File: 2fhYiByQkW-xKWGiNuUZfvoHrPA.roa (raw, json)
Hash identifier: rPoTAfqBb3RC9nzu9buyzl91yuzMJto1XYrXWEBw344=
Subject key identifier: D9:F8:58:88:1C:90:91:6F:B1:29:61:A2:36:E5:19:7E:FA:07:AC:F0
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274630A0B752B81197231F81DA42C485
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2fhYiByQkW-xKWGiNuUZfvoHrPA.roa
Signing time: Thu 02 Jan 2025 13:48:18 +0000
ROA not before: Thu 02 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198889
IP address blocks: 2a05:1083::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:30:a0:b7:52:b8:11:97:23:1f:81:da:42:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9f858881c90916fb12961a236e5197efa07acf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:e5:9f:43:33:82:6e:55:05:62:42:47:dc:
37:96:3c:e9:2d:08:de:eb:2c:c6:61:67:92:f2:e7:
32:47:2c:51:4f:24:c7:87:30:aa:c9:fe:4e:2a:e7:
0a:ac:0a:58:82:81:a3:9e:34:22:27:29:3e:78:f9:
1c:69:bf:c9:d5:59:16:17:e5:d4:d7:73:03:09:32:
22:0c:d3:d7:a2:84:de:2c:75:f0:00:3d:10:67:97:
62:19:85:e4:57:63:7d:22:b4:66:49:b8:7d:e7:29:
93:b8:d6:92:dc:2d:e7:46:20:42:70:24:81:c3:02:
e4:00:02:c4:22:d9:b8:ee:48:53:c9:93:e0:9e:fe:
8d:d2:3f:55:1c:5c:7a:2a:d4:9d:49:76:ce:72:0a:
c4:8c:e7:3b:54:55:ac:62:fe:10:e6:e4:2b:cc:79:
e1:d5:46:6d:cc:c1:a6:5c:15:44:37:ac:52:7e:24:
32:3b:3e:5b:58:fe:bd:d7:60:96:09:5d:73:e7:7f:
d2:29:64:a0:ea:ba:54:d9:81:8f:84:f7:d8:bc:6a:
45:80:bd:70:f9:0a:0e:c9:45:96:3f:54:eb:5c:a0:
78:5d:13:dc:f8:b6:3d:d8:67:3c:d7:70:22:d0:da:
f1:3c:28:b3:ea:06:3a:46:11:0f:a9:7a:62:46:d9:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:58:88:1C:90:91:6F:B1:29:61:A2:36:E5:19:7E:FA:07:AC:F0
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2fhYiByQkW-xKWGiNuUZfvoHrPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083::/32
Signature Algorithm: sha256WithRSAEncryption
ca:d2:cc:35:24:4d:a9:d2:64:fa:e7:dc:1d:e8:a1:ec:df:a5:
ac:e3:b6:40:c1:8b:11:21:be:e0:57:a3:da:82:e0:c9:10:c7:
8a:91:b8:97:9b:9f:91:37:50:f7:5f:6b:8a:13:23:4e:7a:14:
57:49:01:ad:06:1d:51:dc:e1:95:68:b7:77:22:5c:06:d0:ff:
1e:46:16:54:48:f5:00:93:6a:69:a4:b2:47:33:dc:73:15:3c:
19:bd:33:19:58:4e:ba:26:ae:e5:aa:85:bd:04:fb:db:4c:c3:
ea:46:9b:c1:41:35:b7:6d:dd:4a:36:a6:42:a2:da:fa:ba:97:
0c:37:36:94:0c:41:0b:17:1a:8f:a1:98:3d:93:2a:06:7c:aa:
3b:d7:b8:2d:f9:84:e8:25:3c:4a:c9:0a:55:70:8d:a7:4a:e4:
07:17:dd:6b:02:27:d1:cc:8f:06:07:05:f1:af:b8:06:ff:b7:
78:04:c3:d3:77:89:47:b3:80:ea:68:3f:fd:66:33:10:77:14:
77:23:0d:aa:51:5f:09:8a:d1:ec:3c:2a:9a:9a:4c:1e:03:fa:
cb:ef:a9:28:97:a9:e2:43:88:9a:90:9d:54:5b:d9:10:a6:92:
cd:44:b9:6f:5c:61:05:9f:6b:29:6b:51:88:f9:43:64:62:e5:
78:3c:ed:d9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnRjCgt1K4EZcjH4HaQsSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjUwMTAyMTM0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWY4NTg4ODFjOTA5MTZmYjEyOTYxYTIzNmU1MTk3ZWZhMDdhY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23vln0Mzgm5VBWJCR9w3ljzpLQje
6yzGYWeS8ucyRyxRTyTHhzCqyf5OKucKrApYgoGjnjQiJyk+ePkcab/J1VkWF+XU
13MDCTIiDNPXooTeLHXwAD0QZ5diGYXkV2N9IrRmSbh95ymTuNaS3C3nRiBCcCSB
wwLkAALEItm47khTyZPgnv6N0j9VHFx6KtSdSXbOcgrEjOc7VFWsYv4Q5uQrzHnh
1UZtzMGmXBVEN6xSfiQyOz5bWP6912CWCV1z53/SKWSg6rpU2YGPhPfYvGpFgL1w
+QoOyUWWP1TrXKB4XRPc+LY92Gc813Ai0NrxPCiz6gY6RhEPqXpiRtkAMwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNn4WIgckJFvsSlhojblGX76B6zwMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvMmZoWWlCeVFrVy14S1dHaU51VVpmdm9IclBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUQgzAN
BgkqhkiG9w0BAQsFAAOCAQEAytLMNSRNqdJk+ufcHeih7N+lrOO2QMGLESG+4Fej
2oLgyRDHipG4l5ufkTdQ919rihMjTnoUV0kBrQYdUdzhlWi3dyJcBtD/HkYWVEj1
AJNqaaSyRzPccxU8Gb0zGVhOuiau5aqFvQT720zD6kabwUE1t23dSjamQqLa+rqX
DDc2lAxBCxcaj6GYPZMqBnyqO9e4LfmE6CU8SskKVXCNp0rkBxfdawIn0cyPBgcF
8a+4Bv+3eATD03eJR7OA6mg//WYzEHcUdyMNqlFfCYrR7DwqmppMHgP6y++pKJep
4kOImpCdVFvZEKaSzUS5b1xhBZ9rKWtRiPlDZGLleDzt2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:07 2025 by rpki-client