Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa
File: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (raw, json)
Hash identifier: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=
Subject key identifier: 81:9B:5C:43:8A:FA:5A:8A:AF:DF:81:BA:76:94:FF:1C:40:BE:0E:86
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019473172DFCE26C6D74DE0E8C84A723C7F8
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa
Signing time: Fri 17 Jan 2025 07:08:06 +0000
ROA not before: Fri 17 Jan 2025 07:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46516
IP address blocks: 2a0f:c840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:17:2d:fc:e2:6c:6d:74:de:0e:8c:84:a7:23:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 17 07:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819b5c438afa5a8aafdf81ba7694ff1c40be0e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:34:79:37:6d:91:9a:f8:f6:31:17:89:6f:
ec:2c:ce:ac:c3:bd:4d:8b:8c:0c:16:4a:b2:58:2f:
e2:20:b3:21:26:02:29:81:f8:bd:a6:d7:5d:e9:bc:
0d:78:3f:ca:f4:e9:b3:64:f1:2b:31:3c:e0:d0:79:
ea:eb:ea:c8:2f:ea:e1:0a:3e:d2:6e:b3:37:85:a6:
95:de:50:1c:e1:98:18:e1:78:97:bf:be:1f:b9:3b:
26:b9:09:ab:58:9e:1a:1e:d7:f1:08:62:66:98:a6:
30:ee:cc:a2:fc:3d:93:28:e3:8a:f8:16:86:4b:ba:
5f:fa:d5:e1:33:26:76:c7:9d:72:d5:00:90:56:af:
86:8e:58:e4:4f:13:30:cb:86:07:f6:1b:85:9d:76:
31:a1:5f:55:00:e6:55:71:1a:a6:8e:35:cc:5a:53:
f1:14:86:f9:d5:f3:7c:dc:46:aa:f6:66:9f:87:72:
b7:2f:84:a7:98:3f:43:cf:df:82:f9:0d:28:bb:f8:
22:8c:bd:d9:f8:41:88:14:05:75:b1:7c:85:6b:16:
45:c9:eb:58:18:d7:3b:85:ef:aa:cb:6b:a0:33:90:
25:02:01:fd:f7:0c:68:1f:66:56:9e:60:9a:95:49:
7f:4f:2e:2b:28:02:aa:ef:e1:29:2a:5a:29:14:c3:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:5C:43:8A:FA:5A:8A:AF:DF:81:BA:76:94:FF:1C:40:BE:0E:86
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c840::/29
Signature Algorithm: sha256WithRSAEncryption
e0:d3:a0:0c:37:29:ca:aa:df:11:38:2a:a8:66:22:d8:c2:72:
32:65:3e:a7:9e:5c:fa:36:61:91:25:34:49:fb:40:c7:be:d6:
43:55:d7:9d:61:6d:ed:ea:8e:f8:f0:d1:ad:9f:04:48:bd:3b:
57:04:e3:56:14:d2:7b:22:06:6c:4d:60:e3:21:c5:7c:b8:a8:
be:1a:8d:c3:43:23:5a:6a:75:e4:69:29:fc:0d:d2:c8:c8:3b:
0a:1c:04:6d:9b:67:b0:d9:4a:84:59:0d:c3:fd:c6:7f:64:26:
10:d8:e6:2d:4b:e8:f4:76:30:17:6e:bf:ad:c2:02:aa:52:fd:
e5:12:7e:bc:49:5a:e9:db:da:ae:47:ea:86:5b:5f:54:29:69:
43:e0:f2:70:9e:de:35:25:9e:5e:9e:e3:4e:f8:2c:66:09:d1:
04:d0:72:5e:51:b7:db:94:1e:14:08:c3:16:5c:f6:1b:68:5e:
51:38:81:2b:80:04:e5:b7:57:2e:c6:60:7f:20:4b:68:9f:38:
b5:fa:43:69:b1:b9:00:99:c3:be:44:30:0c:5c:e0:b6:aa:f4:
9c:bd:06:60:b6:40:03:89:cc:5c:1f:f8:49:d3:55:92:be:99:
f7:20:b7:de:7d:74:7d:f7:2e:cf:2b:44:2b:52:1a:0c:e1:18:
1f:a6:a0:63
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZRzFy384mxtdN4OjISnI8f4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjUwMTE3MDcwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTliNWM0MzhhZmE1YThhYWZkZjgxYmE3Njk0ZmYxYzQwYmUwZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mQ0eTdtkZr49jEXiW/sLM6sw71N
i4wMFkqyWC/iILMhJgIpgfi9ptdd6bwNeD/K9OmzZPErMTzg0Hnq6+rIL+rhCj7S
brM3haaV3lAc4ZgY4XiXv74fuTsmuQmrWJ4aHtfxCGJmmKYw7syi/D2TKOOK+BaG
S7pf+tXhMyZ2x51y1QCQVq+GjljkTxMwy4YH9huFnXYxoV9VAOZVcRqmjjXMWlPx
FIb51fN83Eaq9mafh3K3L4SnmD9Dz9+C+Q0ou/gijL3Z+EGIFAV1sXyFaxZFyetY
GNc7he+qy2ugM5AlAgH99wxoH2ZWnmCalUl/Ty4rKAKq7+EpKlopFMMv1wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIGbXEOK+lqKr9+BunaU/xxAvg6GMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvZ1p0Y1E0cjZXb3F2MzRHNmRwVF9IRUMtRG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/IQDAN
BgkqhkiG9w0BAQsFAAOCAQEA4NOgDDcpyqrfETgqqGYi2MJyMmU+p55c+jZhkSU0
SftAx77WQ1XXnWFt7eqO+PDRrZ8ESL07VwTjVhTSeyIGbE1g4yHFfLiovhqNw0Mj
Wmp15Gkp/A3SyMg7ChwEbZtnsNlKhFkNw/3Gf2QmENjmLUvo9HYwF26/rcICqlL9
5RJ+vEla6dvarkfqhltfVClpQ+DycJ7eNSWeXp7jTvgsZgnRBNByXlG325QeFAjD
Flz2G2heUTiBK4AE5bdXLsZgfyBLaJ84tfpDabG5AJnDvkQwDFzgtqr0nL0GYLZA
A4nMXB/4SdNVkr6Z9yC33n10ffcuzytEK1IaDOEYH6agYw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:26 2025 by rpki-client