Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kXkvLVz0z1j1uHh4H5yF3dg0SxU.roa
File: kXkvLVz0z1j1uHh4H5yF3dg0SxU.roa (raw, json)
Hash identifier: Xi8bueSkKxbxwqiRYV4jC9p0XzBAvIVSmsO5+0Etm/Q=
Subject key identifier: 91:79:2F:2D:5C:F4:CF:58:F5:B8:78:78:1F:9C:85:DD:D8:34:4B:15
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEFCF3D689C98F6B066D9806E3658
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kXkvLVz0z1j1uHh4H5yF3dg0SxU.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214911
IP address blocks: 2a0e:aa07:e1b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ef:cf:3d:68:9c:98:f6:b0:66:d9:80:6e:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91792f2d5cf4cf58f5b878781f9c85ddd8344b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:d1:db:02:1a:09:05:18:bc:01:dc:67:6c:
a9:5a:fc:09:42:48:85:6c:99:d0:21:3e:bb:89:fb:
78:ad:33:fa:b7:ab:d9:8b:96:de:b6:11:fe:5a:8d:
9d:82:f7:91:b0:ba:c0:37:b6:b0:7e:f3:d9:53:62:
92:44:af:b3:5a:f9:8f:35:fa:c1:76:13:4a:68:6f:
9c:69:7a:93:28:1e:40:d5:96:c3:60:46:1e:8d:9c:
64:c5:8d:84:7d:35:26:d4:0b:da:37:91:95:8e:7c:
14:a5:a0:57:57:61:15:ea:aa:45:ce:f1:7d:fa:dd:
4e:c8:60:64:fc:f5:4b:1c:8d:7e:53:9e:1b:77:64:
0e:48:5c:6b:83:f0:1f:e1:fc:12:51:8b:30:7d:1f:
19:ff:cc:8c:8d:db:21:ba:6d:8f:b9:22:d9:ec:9c:
e2:b5:54:e3:eb:82:09:35:15:02:e9:b5:50:3c:33:
86:d4:db:47:b3:42:6e:c0:a1:06:0c:e8:21:4f:1e:
11:8a:26:a5:86:52:a9:09:30:5e:fc:80:1d:e4:0c:
4a:8b:3d:67:d8:e8:42:a1:97:c5:6b:31:3d:86:77:
35:f5:8e:67:bd:00:98:aa:35:78:08:6d:74:2f:76:
17:2e:54:98:ed:d3:11:ba:8f:2e:68:a9:02:4b:b0:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:2F:2D:5C:F4:CF:58:F5:B8:78:78:1F:9C:85:DD:D8:34:4B:15
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kXkvLVz0z1j1uHh4H5yF3dg0SxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e1b0::/44
Signature Algorithm: sha256WithRSAEncryption
85:d5:51:e4:e0:e0:9a:b1:5b:58:b9:b6:e0:e3:49:92:f3:4d:
1c:e6:19:74:96:9f:bb:70:9a:b0:c5:9b:c4:12:11:dc:85:2a:
07:40:82:b2:a1:2f:e9:6c:af:05:91:55:eb:86:97:2f:6d:a0:
8d:74:14:ad:6e:d1:81:a2:b7:7a:20:e3:b5:47:dc:2e:a6:0a:
f7:10:a8:dc:19:13:d0:c6:ab:da:0f:b8:d5:fd:32:b6:54:5c:
96:f5:1d:d8:53:6a:5d:89:8c:c9:ae:d9:9d:20:c1:2a:ac:e2:
0f:65:ab:c8:21:e3:01:c0:b0:3a:26:f6:65:c1:76:a4:10:36:
97:f2:78:8c:ee:bb:74:dd:66:b8:b2:25:04:06:59:8b:97:6f:
62:29:11:bf:ed:3f:71:b4:5e:e8:21:a2:95:6a:7a:78:66:95:
b5:15:d2:5c:85:12:39:fa:bc:9c:e1:1c:37:ec:b2:93:fb:c9:
eb:04:7b:26:84:13:e3:51:72:dc:ea:f5:4e:b6:c3:31:b2:40:
24:da:29:3c:2b:2f:99:40:1f:94:17:8e:2c:2f:8c:41:4d:30:
6b:e5:a2:c8:f7:b8:e9:65:56:ba:eb:a7:57:56:b0:2f:ed:83:
83:69:3d:65:11:90:93:8e:98:ba:e6:26:57:47:cf:e3:05:12:
6b:4a:14:f3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlju/PPWicmPawZtmAbjZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTc5MmYyZDVjZjRjZjU4ZjViODc4NzgxZjljODVkZGQ4MzQ0YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aPR2wIaCQUYvAHcZ2ypWvwJQkiF
bJnQIT67ift4rTP6t6vZi5bethH+Wo2dgveRsLrAN7awfvPZU2KSRK+zWvmPNfrB
dhNKaG+caXqTKB5A1ZbDYEYejZxkxY2EfTUm1AvaN5GVjnwUpaBXV2EV6qpFzvF9
+t1OyGBk/PVLHI1+U54bd2QOSFxrg/Af4fwSUYswfR8Z/8yMjdshum2PuSLZ7Jzi
tVTj64IJNRUC6bVQPDOG1NtHs0JuwKEGDOghTx4RiialhlKpCTBe/IAd5AxKiz1n
2OhCoZfFazE9hnc19Y5nvQCYqjV4CG10L3YXLlSY7dMRuo8uaKkCS7C5pQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJF5Ly1c9M9Y9bh4eB+chd3YNEsVMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEva1hrdkxWejB6MWoxdUhoNEg1eUYzZGcwU3hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Gw
MA0GCSqGSIb3DQEBCwUAA4IBAQCF1VHk4OCasVtYubbg40mS800c5hl0lp+7cJqw
xZvEEhHchSoHQIKyoS/pbK8FkVXrhpcvbaCNdBStbtGBord6IOO1R9wupgr3EKjc
GRPQxqvaD7jV/TK2VFyW9R3YU2pdiYzJrtmdIMEqrOIPZavIIeMBwLA6JvZlwXak
EDaX8niM7rt03Wa4siUEBlmLl29iKRG/7T9xtF7oIaKVanp4ZpW1FdJchRI5+ryc
4Rw37LKT+8nrBHsmhBPjUXLc6vVOtsMxskAk2ik8Ky+ZQB+UF44sL4xBTTBr5aLI
97jpZVa666dXVrAv7YODaT1lEZCTjpi65iZXR8/jBRJrShTz
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:53 2025 by rpki-client