Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa
File: K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa (raw, json)
Hash identifier: ibEDhV+yzuNtZt5ET+zP4p+w29VfnTjyjguslhXO6kQ=
Subject key identifier: 2B:67:25:E4:37:F2:C1:9D:85:1E:11:8B:10:48:84:F6:5D:6E:A3:B3
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 019426D8BC5D3D25C7D992E4A4AA16D1B093
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa
Signing time: Thu 02 Jan 2025 11:48:45 +0000
ROA not before: Thu 02 Jan 2025 11:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215988
IP address blocks: 2a14:4d00::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:bc:5d:3d:25:c7:d9:92:e4:a4:aa:16:d1:b0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jan 2 11:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6725e437f2c19d851e118b104884f65d6ea3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:88:e1:61:de:cc:31:cc:ce:39:d6:45:8c:
e7:d2:d2:5d:50:bf:c2:c4:3a:66:0e:85:57:95:9f:
75:76:e8:19:e9:8f:24:a6:80:2d:94:45:3e:44:2a:
00:aa:a3:fc:e1:76:5d:59:6d:df:b9:c9:0f:d2:45:
04:c1:60:7d:7f:29:c5:01:d5:5f:ef:5a:d9:d3:05:
ed:75:9f:ee:35:1d:bf:e8:3a:bd:64:6f:1f:6d:ce:
01:12:79:21:05:b1:a3:bf:7a:49:8b:2d:7b:47:48:
32:17:2d:d8:3f:69:9e:07:8b:d3:db:50:c5:ea:41:
1a:88:77:d9:0b:bb:ef:9c:24:3a:d6:11:bc:4d:30:
b7:ee:97:d8:3d:bc:88:d7:a6:50:bd:37:78:b9:b0:
58:85:61:a5:44:d8:1e:1d:46:78:a4:3c:e9:45:88:
a4:ab:89:ed:35:d8:ab:ea:9d:6f:56:73:43:79:3b:
8b:ca:6d:8f:4c:5c:49:28:fd:29:63:df:bf:09:dc:
60:44:7f:78:70:ef:0e:c2:32:57:95:2a:83:8d:32:
d0:af:86:e9:83:8f:22:26:f3:36:0d:77:29:b3:24:
c2:17:b1:04:5f:8f:de:0c:97:00:9f:1d:3c:bd:e4:
77:b3:b2:6e:1c:aa:df:ff:2b:af:be:35:84:04:fe:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:25:E4:37:F2:C1:9D:85:1E:11:8B:10:48:84:F6:5D:6E:A3:B3
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
00:e8:9c:73:7e:e6:ce:5e:c4:df:c6:01:01:2e:ee:98:be:26:
46:04:a3:22:90:ae:67:3d:34:49:2f:49:d0:56:da:83:1c:ee:
06:2e:96:ff:a2:18:d7:14:21:45:39:ba:04:02:aa:93:65:e0:
e4:9b:21:d1:fc:98:71:5d:ab:09:a1:c9:37:e9:4c:c5:9d:a7:
f3:33:da:a3:bc:11:36:35:97:fb:d0:7d:fa:91:4d:65:97:17:
4f:f5:f1:87:b5:3a:59:5d:2e:9a:2c:9a:dd:8c:71:8e:ca:1f:
7a:1a:08:a7:d8:4b:a5:8f:1e:49:ad:96:56:f5:78:eb:b4:d9:
a2:2c:ae:96:38:7b:ba:25:94:3d:00:bf:30:02:16:c7:ae:30:
13:45:5d:f5:eb:04:d4:63:21:64:43:24:71:d9:40:ae:65:f1:
41:57:99:c8:0e:cd:e4:51:9d:47:27:54:37:dc:7f:d0:55:97:
bb:4b:2b:1d:ca:1e:05:d4:eb:be:2e:73:a4:7f:a7:32:46:6e:
42:e6:24:ae:de:2b:ef:14:44:66:c9:62:be:89:8d:9c:7c:4f:
3e:17:95:ca:60:0b:ad:5a:3d:d9:55:14:a6:9b:c4:ba:93:44:
49:9f:d3:7d:c1:d3:2b:e2:5b:5a:a6:ad:77:47:72:d7:63:d3:
8d:fa:20:8d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQm2LxdPSXH2ZLkpKoW0bCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWE2YmEyZDIyNDhiYzQ3ODJhYzBmZGIzYzY0Yjk0NjY0
MGIwOWMwHhcNMjUwMTAyMTE0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjY3MjVlNDM3ZjJjMTlkODUxZTExOGIxMDQ4ODRmNjVkNmVhM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6I4WHezDHMzjnWRYzn0tJdUL/C
xDpmDoVXlZ91dugZ6Y8kpoAtlEU+RCoAqqP84XZdWW3fuckP0kUEwWB9fynFAdVf
71rZ0wXtdZ/uNR2/6Dq9ZG8fbc4BEnkhBbGjv3pJiy17R0gyFy3YP2meB4vT21DF
6kEaiHfZC7vvnCQ61hG8TTC37pfYPbyI16ZQvTd4ubBYhWGlRNgeHUZ4pDzpRYik
q4ntNdir6p1vVnNDeTuLym2PTFxJKP0pY9+/CdxgRH94cO8OwjJXlSqDjTLQr4bp
g48iJvM2DXcpsyTCF7EEX4/eDJcAnx08veR3s7JuHKrf/yuvvjWEBP6rJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCtnJeQ38sGdhR4RixBIhPZdbqOzMB8GA1UdIwQY
MBaAFO1aa6LSJIvEeCrA/bPGS5RmQLCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUt
MTA3YThkODViZDMwLzEvSzJjbDVEZnl3WjJGSGhHTEVFaUU5bDF1bzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUtMTA3YThkODViZDMw
LzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRNADAN
BgkqhkiG9w0BAQsFAAOCAQEAAOicc37mzl7E38YBAS7umL4mRgSjIpCuZz00SS9J
0FbagxzuBi6W/6IY1xQhRTm6BAKqk2Xg5Jsh0fyYcV2rCaHJN+lMxZ2n8zPao7wR
NjWX+9B9+pFNZZcXT/Xxh7U6WV0umiya3YxxjsofehoIp9hLpY8eSa2WVvV467TZ
oiyuljh7uiWUPQC/MAIWx64wE0Vd9esE1GMhZEMkcdlArmXxQVeZyA7N5FGdRydU
N9x/0FWXu0srHcoeBdTrvi5zpH+nMkZuQuYkrt4r7xREZslivomNnHxPPheVymAL
rVo92VUUppvEupNESZ/TfcHTK+JbWqatd0dy12PTjfogjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:14:15 2025 by rpki-client