Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_qZcEW-0qY5qmC7kkDn5PwSj8x0.roa
File: _qZcEW-0qY5qmC7kkDn5PwSj8x0.roa (raw, json)
Hash identifier: sKDfKXjRwKDdRvUFDLAuK30F1njCJtMyE69WZo1sVbQ=
Subject key identifier: FE:A6:5C:11:6F:B4:A9:8E:6A:98:2E:E4:90:39:F9:3F:04:A3:F3:1D
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194BEA587302A40261998F1472418F19CF9
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_qZcEW-0qY5qmC7kkDn5PwSj8x0.roa
Signing time: Fri 31 Jan 2025 23:15:06 +0000
ROA not before: Fri 31 Jan 2025 23:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198889
IP address blocks: 2a05:1083::/32 maxlen: 48
2a0d:2584::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:be:a5:87:30:2a:40:26:19:98:f1:47:24:18:f1:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 31 23:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fea65c116fb4a98e6a982ee49039f93f04a3f31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:5e:44:5f:74:75:43:42:31:a0:7e:71:5a:
97:c4:5f:67:83:b9:0f:ac:58:aa:43:5a:09:af:20:
30:98:26:ff:4d:7d:cf:ff:3f:63:cc:06:eb:15:e5:
29:bc:2f:5e:52:8f:6e:62:36:3f:e5:cb:37:ff:67:
fb:d2:73:1c:a5:60:28:85:8b:fb:ff:95:01:ad:77:
d0:f5:1b:06:00:55:a2:62:fd:bf:5e:51:80:9e:5e:
58:8f:1f:ad:05:62:a1:79:43:3e:60:4b:19:17:f3:
04:82:ac:16:3b:3a:e4:d1:fb:eb:09:1a:63:6c:a9:
fd:07:65:bc:eb:e5:36:70:0f:53:b4:7a:f0:fe:b2:
50:d1:c5:73:10:72:67:6a:a2:b1:0f:4f:e6:7e:6e:
e3:a1:51:e4:c1:41:4e:ac:31:15:78:49:26:0c:ce:
7a:90:c3:23:fb:15:e1:5e:e4:89:31:79:64:54:b7:
ee:15:a7:b7:2d:8c:4a:04:9e:32:78:fb:a0:9f:ad:
77:a2:78:0f:fa:cf:66:9b:c7:ba:f8:04:c6:53:a5:
f0:f3:4f:5c:9d:32:45:8d:0a:7f:66:59:d5:b2:56:
d5:c8:b9:e9:91:70:19:61:fd:5b:d6:92:ed:3f:39:
fa:91:9c:43:ca:f1:e8:43:92:bb:8e:15:9c:95:cb:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:5C:11:6F:B4:A9:8E:6A:98:2E:E4:90:39:F9:3F:04:A3:F3:1D
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_qZcEW-0qY5qmC7kkDn5PwSj8x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083::/32
2a0d:2584::/32
Signature Algorithm: sha256WithRSAEncryption
6b:5d:f2:35:24:71:f5:48:17:2b:c0:e0:ce:d2:94:b9:15:f6:
31:14:a1:37:01:70:5e:0e:0d:ab:5c:cd:38:96:6e:88:d2:3d:
56:a8:84:5e:9b:72:f7:f8:54:04:09:ec:b9:00:94:ca:0b:56:
f9:8e:70:6b:ae:b3:3f:ec:f8:f1:bf:81:de:6f:f4:38:2d:f6:
10:13:ef:69:fe:12:ee:83:d5:98:6a:36:cf:18:56:9e:fa:74:
24:ab:40:3d:2b:fb:51:60:aa:0a:ac:3c:b1:6a:1c:3a:ba:c8:
cd:7c:36:28:0d:24:bf:ba:19:5d:c4:2d:bd:98:02:46:f1:77:
ce:50:7c:36:1a:57:21:20:00:7f:03:e8:85:fb:58:54:ed:6c:
01:69:72:30:e0:6c:5a:0f:ed:66:d7:3d:62:10:64:fb:14:84:
f1:50:0f:a9:71:30:21:0a:b4:cb:3e:86:9b:49:28:f2:73:69:
68:2f:6f:00:97:01:0b:b6:70:95:7d:3e:eb:3e:82:27:84:1e:
bd:00:16:8f:ea:75:2e:0e:fc:88:4b:a9:ee:ff:86:18:b3:80:
fe:11:48:64:33:b3:07:7f:68:07:7f:85:93:5c:79:07:3d:33:
8a:71:46:ec:e4:14:62:0d:78:30:b9:d6:50:00:aa:42:c2:f9:
36:20:04:24
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZS+pYcwKkAmGZjxRyQY8Zz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjUwMTMxMjMxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWE2NWMxMTZmYjRhOThlNmE5ODJlZTQ5MDM5ZjkzZjA0YTNmMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQpeRF90dUNCMaB+cVqXxF9ng7kP
rFiqQ1oJryAwmCb/TX3P/z9jzAbrFeUpvC9eUo9uYjY/5cs3/2f70nMcpWAohYv7
/5UBrXfQ9RsGAFWiYv2/XlGAnl5Yjx+tBWKheUM+YEsZF/MEgqwWOzrk0fvrCRpj
bKn9B2W86+U2cA9TtHrw/rJQ0cVzEHJnaqKxD0/mfm7joVHkwUFOrDEVeEkmDM56
kMMj+xXhXuSJMXlkVLfuFae3LYxKBJ4yePugn613ongP+s9mm8e6+ATGU6Xw809c
nTJFjQp/ZlnVslbVyLnpkXAZYf1b1pLtPzn6kZxDyvHoQ5K7jhWclcsUTwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP6mXBFvtKmOapgu5JA5+T8Eo/MdMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvX3FaY0VXLTBxWTVxbUM3a2tEbjVQd1NqOHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgUQgwMF
ACoNJYQwDQYJKoZIhvcNAQELBQADggEBAGtd8jUkcfVIFyvA4M7SlLkV9jEUoTcB
cF4ODatczTiWbojSPVaohF6bcvf4VAQJ7LkAlMoLVvmOcGuusz/s+PG/gd5v9Dgt
9hAT72n+Eu6D1ZhqNs8YVp76dCSrQD0r+1FgqgqsPLFqHDq6yM18NigNJL+6GV3E
Lb2YAkbxd85QfDYaVyEgAH8D6IX7WFTtbAFpcjDgbFoP7WbXPWIQZPsUhPFQD6lx
MCEKtMs+hptJKPJzaWgvbwCXAQu2cJV9Pus+gieEHr0AFo/qdS4O/IhLqe7/hhiz
gP4RSGQzswd/aAd/hZNceQc9M4pxRuzkFGINeDC51lAAqkLC+TYgBCQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:28 2025 by rpki-client