Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lEBj_UwUplOdey7hYZVGhtt7f2c.roa
File: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (raw, json)
Hash identifier: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=
Subject key identifier: 94:40:63:FD:4C:14:A6:53:9D:7B:2E:E1:61:95:46:86:DB:7B:7F:67
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01942747AADE7AC24210B3463E8BCC2785E6
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lEBj_UwUplOdey7hYZVGhtt7f2c.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54203
IP address blocks: 2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:aa:de:7a:c2:42:10:b3:46:3e:8b:cc:27:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944063fd4c14a6539d7b2ee161954686db7b7f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:f8:e8:e5:55:9c:08:66:08:74:70:d7:82:
a9:0b:33:43:c0:32:e9:d7:47:26:48:80:c4:9b:53:
41:bb:e6:4b:5f:ee:d2:5f:1a:64:2e:11:a5:2d:8e:
09:b0:c2:ab:0d:ec:54:56:f8:97:a0:43:55:a7:bd:
3c:0e:ab:cb:e7:bf:80:5d:31:3b:d0:6f:14:46:fa:
20:7d:98:7c:f5:7b:c5:bd:a9:1a:66:09:58:46:cc:
95:36:b7:1a:3a:ec:78:93:e3:48:38:cf:b0:a6:13:
a8:24:3f:0a:0b:6b:16:48:eb:a7:48:7f:77:b2:f5:
24:b8:8c:07:bd:9d:78:9c:03:97:41:ee:13:47:7d:
a8:26:20:41:87:48:ae:84:86:f8:64:74:2e:bf:79:
26:4d:5f:87:87:1b:76:36:e7:9a:6f:25:46:5d:68:
e1:35:72:6a:7f:f2:6e:b1:cd:d1:b0:a9:47:3a:70:
a5:dd:03:ee:ee:3f:d4:f1:1b:aa:29:65:ff:79:f6:
15:08:ce:66:1b:b4:16:c7:70:b2:5b:94:db:23:f1:
02:f3:52:0f:37:e3:e4:6c:5a:5e:23:e6:f7:c7:4b:
bb:2e:9f:71:e9:ed:02:c6:a6:6c:10:8b:a9:37:0f:
1c:49:3a:5d:97:8e:77:e1:99:7e:28:b4:7a:64:79:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:63:FD:4C:14:A6:53:9D:7B:2E:E1:61:95:46:86:DB:7B:7F:67
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lEBj_UwUplOdey7hYZVGhtt7f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:1300::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
50:f5:f9:f1:7d:29:0d:d4:d2:64:81:e9:8d:44:24:f8:b1:81:
d2:af:13:c8:2f:ba:6d:4b:4a:23:36:6b:55:44:73:8f:f5:c9:
38:43:83:cd:60:bc:9b:ab:af:dd:2f:da:69:93:87:20:8f:c5:
dc:13:d7:d3:59:0b:d9:22:a1:67:ac:e0:17:f1:95:f9:5e:13:
2f:2f:e2:53:e1:99:14:10:6e:f3:6d:f9:8e:81:0f:89:dc:67:
32:c0:c6:37:fa:b0:0c:e1:e1:5b:68:ce:24:f5:16:8a:2d:df:
f1:e4:2b:98:9a:42:de:87:30:38:e5:6b:8d:05:c7:75:18:13:
07:77:b2:0e:1c:e5:54:c2:f7:60:79:66:13:f2:9b:4b:22:14:
d4:84:49:a7:5d:29:11:cc:43:38:fe:b4:53:2d:de:e4:3c:7b:
1d:a4:35:e0:aa:4e:25:04:43:cd:bd:e9:4d:49:ed:88:34:e9:
90:04:90:c2:1b:00:02:54:2b:83:00:b6:42:eb:82:47:3a:13:
20:f4:73:69:6b:21:1a:a8:2d:7a:42:52:6c:77:44:e6:36:5e:
03:c9:32:79:a1:63:9c:c9:67:5a:4c:23:5f:53:bd:1e:3f:06:
7c:37:4c:32:b8:e6:0c:d3:23:23:33:d5:87:74:d9:68:3f:f9:
55:f3:39:dd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQnR6reesJCELNGPovMJ4XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0
YjU5ODQwHhcNMjUwMTAyMTM0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQwNjNmZDRjMTRhNjUzOWQ3YjJlZTE2MTk1NDY4NmRiN2I3ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZD46OVVnAhmCHRw14KpCzNDwDLp
10cmSIDEm1NBu+ZLX+7SXxpkLhGlLY4JsMKrDexUVviXoENVp708DqvL57+AXTE7
0G8URvogfZh89XvFvakaZglYRsyVNrcaOux4k+NIOM+wphOoJD8KC2sWSOunSH93
svUkuIwHvZ14nAOXQe4TR32oJiBBh0iuhIb4ZHQuv3kmTV+Hhxt2NueabyVGXWjh
NXJqf/Jusc3RsKlHOnCl3QPu7j/U8RuqKWX/efYVCM5mG7QWx3CyW5TbI/EC81IP
N+PkbFpeI+b3x0u7Lp9x6e0CxqZsEIupNw8cSTpdl4534Zl+KLR6ZHnahQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJRAY/1MFKZTnXsu4WGVRobbe39nMB8GA1UdIwQY
MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt
MDFiOGJiNmFkOTBhLzEvbEVCal9Vd1VwbE9kZXk3aFlaVkdodHQ3ZjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh
LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAAjAgAwYAKgPvwAID
BgAqA+/ABQMGACoD78ATAwYAKgPvwBkwDQYJKoZIhvcNAQELBQADggEBAFD1+fF9
KQ3U0mSB6Y1EJPixgdKvE8gvum1LSiM2a1VEc4/1yThDg81gvJurr90v2mmThyCP
xdwT19NZC9kioWes4BfxlfleEy8v4lPhmRQQbvNt+Y6BD4ncZzLAxjf6sAzh4Vto
ziT1Foot3/HkK5iaQt6HMDjla40Fx3UYEwd3sg4c5VTC92B5ZhPym0siFNSESadd
KRHMQzj+tFMt3uQ8ex2kNeCqTiUEQ8296U1J7Yg06ZAEkMIbAAJUK4MAtkLrgkc6
EyD0c2lrIRqoLXpCUmx3ROY2XgPJMnmhY5zJZ1pMI19TvR4/Bnw3TDK45gzTIyMz
1Yd02Wg/+VXzOd0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:30 2025 by rpki-client