Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/O1Bk84te2Bu3scSCIhWdHKwK7VM.roa
File: O1Bk84te2Bu3scSCIhWdHKwK7VM.roa (raw, json)
Hash identifier: ARyIixNfhrNfekv4To5NNo0HvZH8tUMjosthnndH290=
Subject key identifier: 3B:50:64:F3:8B:5E:D8:1B:B7:B1:C4:82:22:15:9D:1C:AC:0A:ED:53
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C63334A4E3A9D6C3EB30571AE5BAF
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/O1Bk84te2Bu3scSCIhWdHKwK7VM.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213090
IP address blocks: 2a12:bec0:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:33:4a:4e:3a:9d:6c:3e:b3:05:71:ae:5b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5064f38b5ed81bb7b1c48222159d1cac0aed53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:d4:6d:d2:a6:f8:ef:0f:2e:ef:6e:f5:52:
2a:e3:00:82:ac:cb:78:40:33:8d:9c:b5:df:e9:45:
db:7d:43:52:4e:da:2e:62:1d:4e:4b:98:58:04:58:
6c:70:c4:b6:d6:15:91:f3:78:98:7b:fc:a5:1c:a4:
07:e1:fc:25:e8:f6:ac:bf:7c:e5:d3:fb:e7:88:58:
b0:63:43:f5:bc:96:80:b0:49:28:ad:9e:d7:30:a8:
5f:18:fc:e5:4c:2f:01:5b:de:c6:1a:c8:e7:40:dd:
c3:0a:67:14:1a:4f:88:a3:bd:fc:ca:d0:ed:8c:b0:
92:13:c3:2d:80:cc:08:c7:60:33:8f:b0:75:fc:39:
e4:f8:03:f0:c8:bd:e8:c6:dc:24:54:1e:3f:b1:2f:
3d:53:02:d9:dd:16:4e:dc:b0:c5:ad:51:78:55:48:
44:b3:ea:58:12:96:5e:60:51:18:f8:ea:eb:9b:14:
d1:86:05:d6:96:1f:c0:ff:6b:38:3b:c4:e7:16:b5:
2d:12:28:a1:47:ac:73:4d:6e:b8:89:c6:01:64:e7:
bd:c7:8d:f1:d6:c1:3e:a0:11:a1:f8:65:aa:c4:94:
f9:37:02:0c:f7:9f:5f:4a:8e:51:6f:cd:e6:78:48:
86:df:e3:49:6d:25:a0:2f:d9:f9:b3:32:9d:4c:ec:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:64:F3:8B:5E:D8:1B:B7:B1:C4:82:22:15:9D:1C:AC:0A:ED:53
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/O1Bk84te2Bu3scSCIhWdHKwK7VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:70::/48
Signature Algorithm: sha256WithRSAEncryption
03:2d:bb:86:52:8c:a5:9e:3e:19:2b:64:85:ef:13:1d:77:99:
e5:36:42:6e:e3:01:46:df:a9:96:04:92:3b:13:2e:5b:e7:b2:
f3:c1:bb:75:d0:ac:f9:ec:ae:67:0d:e9:c3:ac:a1:bd:b9:77:
52:ad:74:ef:96:de:7f:2b:76:cb:a2:ba:df:4f:de:97:6f:06:
e8:00:d9:51:f3:1a:63:51:3e:bd:ea:a0:e6:72:c8:a0:fd:a7:
19:1c:42:d5:87:4f:3f:f2:e7:08:fd:f9:e2:61:06:2b:78:17:
57:eb:68:fa:fa:6a:b5:7a:fb:c8:f4:56:44:61:f0:51:fe:c8:
00:79:19:2a:d2:26:a9:43:09:93:cf:2b:fb:3e:66:dd:bc:52:
84:86:84:be:7e:d8:3a:ec:c1:b6:6b:0c:88:09:a0:77:e6:6f:
2a:c9:69:6a:0e:98:75:a7:b4:f0:30:11:b9:2b:24:e2:23:a8:
bf:30:86:67:65:64:1d:08:94:7a:57:eb:bf:a6:b9:8a:94:f8:
26:29:cf:a9:34:f3:e0:22:2f:66:57:77:d9:a9:c8:59:76:bb:
5a:2f:f0:f5:de:45:4e:bb:2c:fc:45:95:70:10:1d:20:55:8c:
50:98:c6:6e:79:9a:d1:c7:25:e2:a9:69:f7:70:f4:27:45:8e:
eb:86:af:5d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjGMzSk46nWw+swVxrluvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjUwNjRmMzhiNWVkODFiYjdiMWM0ODIyMjE1OWQxY2FjMGFlZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBfUbdKm+O8PLu9u9VIq4wCCrMt4
QDONnLXf6UXbfUNSTtouYh1OS5hYBFhscMS21hWR83iYe/ylHKQH4fwl6Pasv3zl
0/vniFiwY0P1vJaAsEkorZ7XMKhfGPzlTC8BW97GGsjnQN3DCmcUGk+Io738ytDt
jLCSE8MtgMwIx2Azj7B1/Dnk+APwyL3oxtwkVB4/sS89UwLZ3RZO3LDFrVF4VUhE
s+pYEpZeYFEY+OrrmxTRhgXWlh/A/2s4O8TnFrUtEiihR6xzTW64icYBZOe9x43x
1sE+oBGh+GWqxJT5NwIM959fSo5Rb83meEiG3+NJbSWgL9n5szKdTOxCbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDtQZPOLXtgbt7HEgiIVnRysCu1TMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvTzFCazg0dGUyQnUzc2NTQ0loV2RIS3dLN1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+wABw
MA0GCSqGSIb3DQEBCwUAA4IBAQADLbuGUoylnj4ZK2SF7xMdd5nlNkJu4wFG36mW
BJI7Ey5b57Lzwbt10Kz57K5nDenDrKG9uXdSrXTvlt5/K3bLorrfT96XbwboANlR
8xpjUT696qDmcsig/acZHELVh08/8ucI/fniYQYreBdX62j6+mq1evvI9FZEYfBR
/sgAeRkq0iapQwmTzyv7PmbdvFKEhoS+ftg67MG2awyICaB35m8qyWlqDph1p7Tw
MBG5KyTiI6i/MIZnZWQdCJR6V+u/prmKlPgmKc+pNPPgIi9mV3fZqchZdrtaL/D1
3kVOuyz8RZVwEB0gVYxQmMZueZrRxyXiqWn3cPQnRY7rhq9d
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:56:53 2025 by rpki-client