Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/7GopD--APCfXYx9PjcNYgXNDy2A.roa
File: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (raw, json)
Hash identifier: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=
Subject key identifier: EC:6A:29:0F:EF:80:3C:27:D7:63:1F:4F:8D:C3:58:81:73:43:CB:60
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0194244541ABDA4B0B15F1394C62F621E8B8
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/7GopD--APCfXYx9PjcNYgXNDy2A.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60271
IP address blocks: 2a0b:6b86:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:41:ab:da:4b:0b:15:f1:39:4c:62:f6:21:e8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec6a290fef803c27d7631f4f8dc358817343cb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:80:96:58:82:17:ae:35:d1:62:d3:31:3b:
18:f6:a1:e6:07:eb:b5:af:ed:aa:f7:9e:5e:0a:ca:
37:60:08:8b:1a:4b:85:ba:4b:ca:4c:c2:8e:e7:59:
2c:51:c0:7c:54:1d:f2:51:77:9c:c5:2d:b0:9f:ed:
c1:fd:1e:fc:dd:7b:96:91:75:fd:66:91:7a:75:c0:
9c:4b:fc:19:04:71:f2:d7:e0:9f:1d:71:9c:81:02:
2d:22:49:0f:a2:88:96:56:08:9a:98:23:33:ff:90:
a6:e2:2a:86:e6:5c:30:7b:d0:65:f0:4b:26:1d:62:
43:00:29:9e:9c:8a:1a:53:b6:40:a2:28:74:68:8e:
f7:fc:64:43:d2:09:59:bb:c5:91:92:26:47:57:a0:
a6:04:2e:c9:4c:be:6f:6f:f5:e8:07:23:0a:32:36:
49:c8:8d:87:3b:3f:4f:f5:c2:58:cf:8d:e5:07:9f:
05:9c:c9:16:d5:b1:28:bd:44:4b:1e:8a:3a:49:2e:
f6:3f:23:29:fe:48:d6:25:64:7c:86:af:a2:de:09:
16:94:fe:22:93:ce:c9:2f:4d:e4:37:16:55:85:19:
99:26:33:d2:d6:b5:6e:f6:b7:00:b1:47:e3:4a:c6:
4b:47:70:55:77:8e:b7:ba:48:b8:cd:5c:a6:a9:68:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:29:0F:EF:80:3C:27:D7:63:1F:4F:8D:C3:58:81:73:43:CB:60
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/7GopD--APCfXYx9PjcNYgXNDy2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:200::/40
Signature Algorithm: sha256WithRSAEncryption
8d:1e:24:12:2f:fd:9f:2a:2d:2e:23:e9:26:7d:5f:f7:a9:85:
cd:87:ad:90:ee:ff:d8:92:b8:b4:cb:de:d6:36:64:e9:79:72:
ef:6c:69:39:c4:81:ac:c5:29:29:fe:20:c4:31:60:cd:23:5a:
ce:fc:3d:5e:62:c7:1a:6e:98:cc:2b:87:7d:bc:12:cb:c9:09:
f3:4e:3d:f2:d8:b8:73:2a:ef:23:42:56:1b:31:46:66:7e:18:
4c:f7:dc:29:1c:5d:44:ed:d6:19:4d:fc:c4:8c:2b:fa:90:32:
cf:69:d4:9e:aa:7c:44:bf:be:07:37:dd:c8:39:72:a5:f5:d2:
dd:07:6b:38:a0:e0:71:1b:86:ec:aa:af:ef:57:53:f1:ca:b7:
e7:40:54:57:8d:1e:ec:98:f8:4d:02:86:35:76:e3:b6:a4:3e:
86:70:eb:25:74:17:a7:d8:35:7e:3a:2d:b0:00:92:6e:5d:0f:
50:6f:c6:7d:93:aa:8d:6a:a8:77:f2:d3:69:0c:34:46:c4:d9:
d1:3c:9d:d5:ff:f3:12:02:80:a5:41:b5:81:1b:7a:24:fd:0c:
60:36:81:b2:19:fe:87:e3:6a:e2:b2:51:06:1d:78:f1:07:cf:
50:00:84:13:d1:16:a2:51:41:c9:3d:7a:ab:5e:83:da:2c:2f:
11:5c:a9:41
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQkRUGr2ksLFfE5TGL2Iei4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjUwMTAxMjM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzZhMjkwZmVmODAzYzI3ZDc2MzFmNGY4ZGMzNTg4MTczNDNjYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36AlliCF6410WLTMTsY9qHmB+u1
r+2q955eCso3YAiLGkuFukvKTMKO51ksUcB8VB3yUXecxS2wn+3B/R783XuWkXX9
ZpF6dcCcS/wZBHHy1+CfHXGcgQItIkkPooiWVgiamCMz/5Cm4iqG5lwwe9Bl8Esm
HWJDACmenIoaU7ZAoih0aI73/GRD0glZu8WRkiZHV6CmBC7JTL5vb/XoByMKMjZJ
yI2HOz9P9cJYz43lB58FnMkW1bEovURLHoo6SS72PyMp/kjWJWR8hq+i3gkWlP4i
k87JL03kNxZVhRmZJjPS1rVu9rcAsUfjSsZLR3BVd463uki4zVymqWjUUwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOxqKQ/vgDwn12MfT43DWIFzQ8tgMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvN0dvcEQtLUFQQ2ZYWXg5UGpjTllnWE5EeTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgtrhgIw
DQYJKoZIhvcNAQELBQADggEBAI0eJBIv/Z8qLS4j6SZ9X/ephc2HrZDu/9iSuLTL
3tY2ZOl5cu9saTnEgazFKSn+IMQxYM0jWs78PV5ixxpumMwrh328EsvJCfNOPfLY
uHMq7yNCVhsxRmZ+GEz33CkcXUTt1hlN/MSMK/qQMs9p1J6qfES/vgc33cg5cqX1
0t0Hazig4HEbhuyqr+9XU/HKt+dAVFeNHuyY+E0ChjV247akPoZw6yV0F6fYNX46
LbAAkm5dD1Bvxn2Tqo1qqHfy02kMNEbE2dE8ndX/8xICgKVBtYEbeiT9DGA2gbIZ
/ofjauKyUQYdePEHz1AAhBPRFqJRQck9eqteg9osLxFcqUE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:52:33 2025 by rpki-client