Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7tr1Im4_O4rrkYyU8qGHGK_LV-I.roa
File: 7tr1Im4_O4rrkYyU8qGHGK_LV-I.roa (raw, json)
Hash identifier: d64bZaXZQOEQXIP3mJiKwsDsszQVnM0RG/HkHC1Umwc=
Subject key identifier: EE:DA:F5:22:6E:3F:3B:8A:EB:91:8C:94:F2:A1:87:18:AF:CB:57:E2
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED5BA3B270A5FA4F24CCC177BA4DE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7tr1Im4_O4rrkYyU8qGHGK_LV-I.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205794
IP address blocks: 2a0e:aa07:e039::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d5:ba:3b:27:0a:5f:a4:f2:4c:cc:17:7b:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eedaf5226e3f3b8aeb918c94f2a18718afcb57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:0f:96:1e:28:29:04:ec:16:7f:6a:d7:a9:
87:03:00:9f:66:b9:f7:97:93:84:83:82:69:8b:12:
de:e4:6f:2f:99:75:db:55:99:37:8b:4b:0a:55:90:
f2:c8:3f:3d:df:ab:2e:e2:03:d7:5b:ce:74:fd:92:
85:76:97:1d:2f:01:11:e3:5d:cd:0e:d2:c5:02:03:
ee:7f:07:71:cb:b2:83:e3:66:bb:cc:41:bc:e2:b2:
13:a7:56:f4:3f:f0:b3:9b:3d:a2:76:29:53:cc:2b:
4a:ce:ac:46:99:09:c2:44:b1:de:1e:6a:ec:6f:89:
81:51:8d:3f:16:54:8c:e8:95:2a:a0:47:db:73:00:
5b:1a:8c:df:77:34:47:8c:7d:41:d7:63:55:1a:dc:
87:5c:88:4f:cf:fb:0d:6b:07:be:a8:2e:4c:d1:17:
1a:99:07:a8:33:0d:36:27:8c:c6:02:dc:af:79:de:
09:10:3c:f5:66:2c:3e:a6:8b:90:12:7d:95:23:e2:
4c:65:43:92:bf:55:22:e1:69:51:93:d5:50:5b:21:
60:ec:4a:e3:be:2f:1a:b3:5d:3b:a9:4f:8d:c5:5e:
01:96:db:32:26:73:70:00:60:62:15:55:7b:8d:29:
42:bf:bb:6f:84:aa:8f:bf:9e:57:91:4c:d0:bb:f1:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DA:F5:22:6E:3F:3B:8A:EB:91:8C:94:F2:A1:87:18:AF:CB:57:E2
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7tr1Im4_O4rrkYyU8qGHGK_LV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e039::/48
Signature Algorithm: sha256WithRSAEncryption
71:d8:cb:33:86:c4:26:ff:32:58:82:50:35:64:e5:65:78:08:
7b:f6:99:15:84:99:42:fd:1e:63:e7:6e:65:8f:2a:f8:83:7e:
fe:db:03:27:f3:63:ea:e0:51:66:3e:39:8d:7c:a4:73:12:ab:
86:da:5d:dd:15:16:d8:e1:62:90:2f:51:68:6f:28:ce:f7:34:
99:e7:04:cd:15:98:4f:7d:8b:7a:74:d5:64:4f:59:8f:83:17:
ba:7b:0d:53:ca:29:5d:9d:98:6e:57:30:a1:a8:4f:8c:9f:b6:
f4:27:11:e2:34:2f:62:fe:63:ff:ad:20:84:fa:1b:78:2a:77:
08:c8:4b:d8:bd:5f:43:0e:a2:75:f5:21:a5:8f:64:da:6e:8c:
76:43:02:dc:3a:12:75:03:b0:68:38:17:29:28:18:70:72:6b:
43:3a:18:ef:9c:60:fb:d8:02:6a:80:ed:c3:5c:7b:80:a7:ab:
12:bd:de:15:cb:d3:4b:ec:df:ff:72:73:50:c7:dc:87:a1:cc:
a5:09:ca:bc:0e:be:d4:76:d3:6c:ed:66:ba:9b:4f:4e:df:22:
f9:08:d4:46:b2:6b:56:f0:9c:2a:db:92:4b:9e:bb:86:73:c1:
42:03:d6:87:86:88:b7:34:a6:8e:d0:0e:7e:19:65:54:e4:08:
53:67:c4:01
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljtW6OycKX6TyTMwXe6TeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWRhZjUyMjZlM2YzYjhhZWI5MThjOTRmMmExODcxOGFmY2I1N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8wPlh4oKQTsFn9q16mHAwCfZrn3
l5OEg4JpixLe5G8vmXXbVZk3i0sKVZDyyD8936su4gPXW850/ZKFdpcdLwER413N
DtLFAgPufwdxy7KD42a7zEG84rITp1b0P/Czmz2idilTzCtKzqxGmQnCRLHeHmrs
b4mBUY0/FlSM6JUqoEfbcwBbGozfdzRHjH1B12NVGtyHXIhPz/sNawe+qC5M0Rca
mQeoMw02J4zGAtyved4JEDz1Ziw+pouQEn2VI+JMZUOSv1Ui4WlRk9VQWyFg7Erj
vi8as107qU+NxV4BltsyJnNwAGBiFVV7jSlCv7tvhKqPv55XkUzQu/FViQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO7a9SJuPzuK65GMlPKhhxivy1fiMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvN3RyMUltNF9PNHJya1l5VThxR0hHS19MVi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+A5
MA0GCSqGSIb3DQEBCwUAA4IBAQBx2MszhsQm/zJYglA1ZOVleAh79pkVhJlC/R5j
525ljyr4g37+2wMn82Pq4FFmPjmNfKRzEquG2l3dFRbY4WKQL1FobyjO9zSZ5wTN
FZhPfYt6dNVkT1mPgxe6ew1TyildnZhuVzChqE+Mn7b0JxHiNC9i/mP/rSCE+ht4
KncIyEvYvV9DDqJ19SGlj2Tabox2QwLcOhJ1A7BoOBcpKBhwcmtDOhjvnGD72AJq
gO3DXHuAp6sSvd4Vy9NL7N//cnNQx9yHocylCcq8Dr7UdtNs7Wa6m09O3yL5CNRG
smtW8Jwq25JLnruGc8FCA9aHhoi3NKaO0A5+GWVU5AhTZ8QB
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:44 2025 by rpki-client