Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/dGoZcHSRMRsCv2FFrgCOlXiXd7I.roa
File: dGoZcHSRMRsCv2FFrgCOlXiXd7I.roa (raw, json)
Hash identifier: HqDnkJbVSabC0LJ8ZMWoqNYaQf4Qt1hocMR8nRQd6lI=
Subject key identifier: 74:6A:19:70:74:91:31:1B:02:BF:61:45:AE:00:8E:95:78:97:77:B2
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746370DB00CC2E294282A4D9DF87225
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/dGoZcHSRMRsCv2FFrgCOlXiXd7I.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212008
IP address blocks: 2a05:1082::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:37:0d:b0:0c:c2:e2:94:28:2a:4d:9d:f8:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746a19707491311b02bf6145ae008e95789777b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:95:60:c6:6a:b4:47:53:e5:60:0f:df:65:
87:cc:2f:37:05:fb:a6:ba:94:f2:c5:2c:12:df:ad:
25:0d:30:d9:47:b7:7d:6a:e7:e3:5c:a9:7c:9d:20:
4b:a6:44:46:dd:26:72:ee:85:fb:bb:6f:8d:47:b1:
ec:3c:4a:37:8e:d9:4e:89:2f:25:65:bb:4d:2b:fd:
2d:51:ee:18:22:48:36:1a:a2:8c:0b:8b:f1:91:84:
f3:2c:64:bd:69:40:0d:81:7e:a1:8f:64:02:80:d5:
74:ee:92:c0:49:bc:41:52:70:a4:1f:e4:68:f2:ad:
ac:05:b4:7e:b1:75:30:69:54:59:71:bb:75:bc:20:
77:01:ff:b0:25:79:f8:ed:47:d2:98:fd:c9:a8:b9:
1a:e6:bd:e5:5e:66:7d:32:71:17:17:01:05:af:33:
4c:75:f3:f1:d0:4d:1a:63:62:98:df:80:99:a4:b6:
9e:3e:27:3b:9b:77:34:de:66:a0:2f:5a:66:73:73:
06:06:4a:26:90:ef:f2:4a:22:b0:a9:9f:fc:6d:a6:
fa:3f:02:c8:26:e2:9b:b0:83:0f:82:b5:b3:55:ae:
7c:f1:e0:9f:7d:1b:0d:c0:22:38:13:df:a5:e1:a8:
5c:c1:79:45:6b:a4:47:d4:6c:e9:68:ec:f0:75:de:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:19:70:74:91:31:1B:02:BF:61:45:AE:00:8E:95:78:97:77:B2
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/dGoZcHSRMRsCv2FFrgCOlXiXd7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082::/32
Signature Algorithm: sha256WithRSAEncryption
29:30:32:ea:f4:ad:9b:fb:0f:4e:7d:60:9e:b9:4b:c2:65:b1:
1e:3c:ae:87:e6:e9:c2:13:5f:cc:35:85:86:cd:da:e2:18:fa:
92:88:f8:04:95:ee:54:bc:6f:30:6e:72:9c:2d:f1:b9:cb:9c:
73:b0:56:c4:a2:f2:ac:55:e9:aa:06:9b:d9:57:cd:da:59:45:
0f:8f:86:ab:28:a6:85:a5:25:1f:f1:f2:b1:ff:04:33:97:2d:
44:a4:24:93:73:87:3d:56:98:95:d0:18:70:5b:cb:3d:49:ea:
35:39:c6:97:c1:85:35:6b:d6:03:80:85:70:4d:ed:8f:d4:02:
8d:52:f5:96:ec:42:7b:e2:21:5c:b1:0f:19:0d:5e:46:76:3f:
95:cc:5a:42:dc:5e:33:55:56:53:f5:04:d3:58:fd:8a:30:98:
df:ca:5c:b7:21:5a:09:88:8f:d2:26:16:ed:9d:ab:f1:2d:a5:
d2:2e:08:de:5d:44:72:60:cd:16:a8:30:a9:ee:55:36:20:f3:
69:32:ea:29:7e:c5:8a:55:57:a3:85:c5:e1:6e:c8:92:7a:8e:
2f:47:69:35:5a:c2:29:4a:e2:cf:88:40:ad:34:ce:ab:e3:35:
9f:eb:4b:80:72:7a:1a:2d:21:89:69:2e:5c:a9:8b:7f:ab:04:
3e:e2:92:a8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnRjcNsAzC4pQoKk2d+HIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjUwMTAyMTM0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDZhMTk3MDc0OTEzMTFiMDJiZjYxNDVhZTAwOGU5NTc4OTc3N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/SVYMZqtEdT5WAP32WHzC83Bfum
upTyxSwS360lDTDZR7d9aufjXKl8nSBLpkRG3SZy7oX7u2+NR7HsPEo3jtlOiS8l
ZbtNK/0tUe4YIkg2GqKMC4vxkYTzLGS9aUANgX6hj2QCgNV07pLASbxBUnCkH+Ro
8q2sBbR+sXUwaVRZcbt1vCB3Af+wJXn47UfSmP3JqLka5r3lXmZ9MnEXFwEFrzNM
dfPx0E0aY2KY34CZpLaePic7m3c03magL1pmc3MGBkomkO/ySiKwqZ/8bab6PwLI
JuKbsIMPgrWzVa588eCffRsNwCI4E9+l4ahcwXlFa6RH1GzpaOzwdd6LwwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHRqGXB0kTEbAr9hRa4AjpV4l3eyMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvZEdvWmNIU1JNUnNDdjJGRnJnQ09sWGlYZDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUQgjAN
BgkqhkiG9w0BAQsFAAOCAQEAKTAy6vStm/sPTn1gnrlLwmWxHjyuh+bpwhNfzDWF
hs3a4hj6koj4BJXuVLxvMG5ynC3xucucc7BWxKLyrFXpqgab2VfN2llFD4+Gqyim
haUlH/Hysf8EM5ctRKQkk3OHPVaYldAYcFvLPUnqNTnGl8GFNWvWA4CFcE3tj9QC
jVL1luxCe+IhXLEPGQ1eRnY/lcxaQtxeM1VWU/UE01j9ijCY38pctyFaCYiP0iYW
7Z2r8S2l0i4I3l1EcmDNFqgwqe5VNiDzaTLqKX7FilVXo4XF4W7IknqOL0dpNVrC
KUriz4hArTTOq+M1n+tLgHJ6Gi0hiWkuXKmLf6sEPuKSqA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:10 2025 by rpki-client