Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7EvqfL7UMoOfhvwkILu0VPZ1rMY.roa
File: 7EvqfL7UMoOfhvwkILu0VPZ1rMY.roa (raw, json)
Hash identifier: Q8ZlGjWnhOEdBb9zfSFDaTXVMQqLyLVdAu2qHRyoyRA=
Subject key identifier: EC:4B:EA:7C:BE:D4:32:83:9F:86:FC:24:20:BB:B4:54:F6:75:AC:C6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0195A5DCDD322A1A285CF0AEE5AED60BD0BF
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7EvqfL7UMoOfhvwkILu0VPZ1rMY.roa
Signing time: Mon 17 Mar 2025 20:47:49 +0000
ROA not before: Mon 17 Mar 2025 20:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401626
IP address blocks: 2a10:9600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:dc:dd:32:2a:1a:28:5c:f0:ae:e5:ae:d6:0b:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 17 20:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4bea7cbed432839f86fc2420bbb454f675acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:f4:4b:06:03:01:59:18:4f:1c:8c:1c:14:
a6:08:6b:ca:52:13:32:d0:bd:8e:cf:c0:3c:15:b5:
22:e5:da:44:5d:af:30:c8:82:63:43:04:d7:28:13:
11:24:9a:b6:65:90:d8:28:00:a5:88:c4:92:1d:a6:
b8:ea:2b:24:14:70:3e:1a:63:f7:95:eb:8b:ff:6b:
ea:b0:f3:90:cb:39:c2:ff:7e:75:0b:d1:f7:fd:14:
fb:49:af:c2:cb:01:8b:8a:bf:89:6b:c0:94:8e:ae:
d8:8a:8a:35:74:a9:1d:57:55:80:22:a6:1c:b5:41:
cd:7b:1e:f5:43:54:2b:6b:10:12:11:e8:b7:62:95:
19:5b:cb:28:ba:f4:4d:48:52:d5:27:e2:e5:5f:8a:
d5:11:41:15:fd:3e:8c:db:85:87:09:bb:6f:45:9a:
aa:54:a7:83:3c:82:51:d8:33:5a:e0:bf:65:bb:26:
d3:48:64:8e:5d:b0:30:01:a6:0c:19:09:36:63:6c:
74:9f:45:e3:d3:6b:a8:46:a1:e0:70:b2:19:5f:31:
8d:bc:3b:a3:ee:61:1f:87:f9:a6:c7:06:30:90:ff:
74:eb:04:fd:f9:3a:43:bd:b1:63:9f:90:53:e9:94:
c3:d1:1f:ae:5c:e9:27:b0:ce:a2:6a:61:4a:77:d7:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:EA:7C:BE:D4:32:83:9F:86:FC:24:20:BB:B4:54:F6:75:AC:C6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7EvqfL7UMoOfhvwkILu0VPZ1rMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9600::/29
Signature Algorithm: sha256WithRSAEncryption
a0:bb:ca:c5:0f:30:97:ac:a1:13:18:a0:6e:23:f2:17:ca:c3:
81:dc:b3:5d:4a:2c:29:36:68:6c:98:6f:19:ea:dc:c0:d4:4a:
83:c6:92:6a:9c:89:fd:e7:27:7d:5c:42:b0:50:2b:7d:47:b7:
fc:7b:dc:8f:50:59:77:58:c9:9d:5f:06:1b:44:cd:d6:b3:fb:
e9:09:6b:14:db:26:56:29:d0:ce:d8:57:e7:ce:dd:e0:f8:57:
cf:74:1b:17:f6:2d:0c:b1:d2:90:c0:76:90:b7:1c:03:e3:a6:
52:76:75:1e:d2:27:a2:89:6b:75:ae:ff:bc:35:83:b1:18:36:
8a:ad:9e:74:11:c5:2c:08:78:8a:6c:98:e1:a2:da:e7:56:a7:
c7:2d:00:79:ce:5e:17:c1:62:29:bf:2e:2e:35:a6:18:96:99:
41:30:c7:e9:f0:b0:5e:6a:e1:a4:5a:9a:0e:83:66:56:b4:10:
f9:01:9a:5f:b0:6f:0e:16:0d:b7:85:9b:81:32:2f:49:ec:cf:
a3:0c:b0:23:af:39:9d:a1:de:b9:f7:fc:68:47:e4:e6:a5:2b:
36:d5:75:a6:ff:ec:df:43:e8:90:a6:e1:25:5d:2b:a7:42:f8:
cc:91:ed:e3:bb:28:b6:76:7d:fe:eb:82:75:d4:28:6a:f8:5e:
be:46:57:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZWl3N0yKhooXPCu5a7WC9C/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwMzE3MjA0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRiZWE3Y2JlZDQzMjgzOWY4NmZjMjQyMGJiYjQ1NGY2NzVhY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX30SwYDAVkYTxyMHBSmCGvKUhMy
0L2Oz8A8FbUi5dpEXa8wyIJjQwTXKBMRJJq2ZZDYKACliMSSHaa46iskFHA+GmP3
leuL/2vqsPOQyznC/351C9H3/RT7Sa/CywGLir+Ja8CUjq7Yioo1dKkdV1WAIqYc
tUHNex71Q1QraxASEei3YpUZW8souvRNSFLVJ+LlX4rVEUEV/T6M24WHCbtvRZqq
VKeDPIJR2DNa4L9luybTSGSOXbAwAaYMGQk2Y2x0n0Xj02uoRqHgcLIZXzGNvDuj
7mEfh/mmxwYwkP906wT9+TpDvbFjn5BT6ZTD0R+uXOknsM6iamFKd9dT7QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOxL6ny+1DKDn4b8JCC7tFT2dazGMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvN0V2cWZMN1VNb09maHZ3a0lMdTBWUFoxck1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhCWADAN
BgkqhkiG9w0BAQsFAAOCAQEAoLvKxQ8wl6yhExigbiPyF8rDgdyzXUosKTZobJhv
GercwNRKg8aSapyJ/ecnfVxCsFArfUe3/Hvcj1BZd1jJnV8GG0TN1rP76QlrFNsm
VinQzthX587d4PhXz3QbF/YtDLHSkMB2kLccA+OmUnZ1HtInoolrda7/vDWDsRg2
iq2edBHFLAh4imyY4aLa51anxy0Aec5eF8FiKb8uLjWmGJaZQTDH6fCwXmrhpFqa
DoNmVrQQ+QGaX7BvDhYNt4WbgTIvSezPowywI685naHeuff8aEfk5qUrNtV1pv/s
30PokKbhJV0rp0L4zJHt47sotnZ9/uuCddQoavhevkZXnw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:02:07 2025 by rpki-client