Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a69kKskcCFSNIfnmMSJu0RmTFWE.roa
File: a69kKskcCFSNIfnmMSJu0RmTFWE.roa (raw, json)
Hash identifier: 0NGw2194bstFqUp7Ph/l/QQDtB9yscKn5XSRivzaKRI=
Subject key identifier: 6B:AF:64:2A:C9:1C:08:54:8D:21:F9:E6:31:22:6E:D1:19:93:15:61
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C7BF6F6ACB4428FFB3434EAAB78F7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a69kKskcCFSNIfnmMSJu0RmTFWE.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216270
IP address blocks: 2a12:bec0:460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:f6:f6:ac:b4:42:8f:fb:34:34:ea:ab:78:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6baf642ac91c08548d21f9e631226ed119931561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:14:eb:46:da:d2:9f:bd:a9:2f:d9:ba:97:
ec:92:d9:0e:b3:f9:80:b6:3e:37:c7:96:cc:85:5a:
91:9d:33:66:44:d7:ff:04:47:d6:68:16:6c:86:9b:
8a:6f:96:8f:a2:27:a9:06:86:2f:a3:8f:7e:99:a5:
cb:21:4b:67:2f:bb:87:c9:c1:a4:4c:58:e3:29:fa:
47:8d:03:be:a6:ea:7a:96:a0:58:78:38:5c:6d:ee:
3c:b4:60:5b:a0:db:f2:61:6e:62:33:2a:38:fb:f6:
4f:96:97:f3:97:12:86:b0:25:09:7a:19:cd:a9:5e:
5c:ad:3c:6e:94:dd:2d:16:ae:34:9e:e3:19:59:c4:
78:37:8a:97:ed:5f:14:f7:31:d6:50:ea:63:95:e0:
a1:ff:b3:c7:ae:05:99:38:49:ec:09:e3:fe:99:a5:
3c:44:a4:e0:e6:87:a2:0a:8f:ea:06:7b:d8:f3:0d:
15:de:f1:6b:3b:37:fa:f9:e3:c8:e6:8c:d0:3c:ea:
e9:bf:fb:be:82:02:d6:80:a0:8d:6d:f1:3b:a6:16:
53:25:da:b5:11:c7:ac:6b:9e:9b:aa:86:6e:74:2d:
aa:7e:44:f8:5e:d4:9c:09:27:86:a4:d1:6f:3c:57:
82:7e:72:99:f2:ce:cd:40:bd:0d:a5:51:a5:9f:59:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:64:2A:C9:1C:08:54:8D:21:F9:E6:31:22:6E:D1:19:93:15:61
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a69kKskcCFSNIfnmMSJu0RmTFWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:460::/44
Signature Algorithm: sha256WithRSAEncryption
22:64:f7:07:f2:62:15:3d:6a:23:18:11:d5:e5:44:72:63:36:
34:9c:e6:69:c7:2f:07:d4:d9:df:9b:8e:b1:26:44:db:6c:04:
e5:37:58:01:a2:6f:f1:6b:66:cb:bb:a6:1a:83:5c:1c:d8:6b:
78:72:9b:cb:ee:1c:0a:93:14:fb:66:43:ca:66:02:76:29:fa:
81:5a:65:77:2b:37:10:cf:e2:46:db:39:eb:a9:a4:17:0c:b0:
ad:2d:ae:e7:24:bc:16:99:69:1a:33:12:5e:00:4e:4a:3a:54:
15:7d:df:48:43:3a:f5:e0:f9:96:04:c6:65:11:52:b3:06:7d:
fd:ae:f8:42:b5:98:a1:22:d7:14:16:a1:c4:14:78:2c:47:5d:
6e:41:04:ff:b9:6e:f0:48:e5:44:46:c7:c0:18:88:fb:25:9b:
be:de:d7:e1:32:70:e1:74:23:fa:5e:00:71:fd:ba:02:ba:97:
10:6e:90:41:20:21:b5:37:8d:67:9a:99:2d:64:fe:dc:f5:5d:
c9:4b:16:fb:e5:c8:9e:1f:c4:f8:52:62:cc:3b:57:2c:61:3c:
76:a1:f0:8e:2d:ca:10:53:73:a5:06:4b:0a:76:2a:e4:88:b6:
c6:79:1f:e6:a3:ee:e1:71:61:08:89:2f:39:07:50:87:75:68:
83:98:02:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHv29qy0Qo/7NDTqq3j3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmFmNjQyYWM5MWMwODU0OGQyMWY5ZTYzMTIyNmVkMTE5OTMxNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAAU60ba0p+9qS/ZupfsktkOs/mA
tj43x5bMhVqRnTNmRNf/BEfWaBZshpuKb5aPoiepBoYvo49+maXLIUtnL7uHycGk
TFjjKfpHjQO+pup6lqBYeDhcbe48tGBboNvyYW5iMyo4+/ZPlpfzlxKGsCUJehnN
qV5crTxulN0tFq40nuMZWcR4N4qX7V8U9zHWUOpjleCh/7PHrgWZOEnsCeP+maU8
RKTg5oeiCo/qBnvY8w0V3vFrOzf6+ePI5ozQPOrpv/u+ggLWgKCNbfE7phZTJdq1
Ecesa56bqoZudC2qfkT4XtScCSeGpNFvPFeCfnKZ8s7NQL0NpVGln1mF3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGuvZCrJHAhUjSH55jEibtEZkxVhMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvYTY5a0tza2NDRlNOSWZubU1TSnUwUm1URldFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wARg
MA0GCSqGSIb3DQEBCwUAA4IBAQAiZPcH8mIVPWojGBHV5URyYzY0nOZpxy8H1Nnf
m46xJkTbbATlN1gBom/xa2bLu6Yag1wc2Gt4cpvL7hwKkxT7ZkPKZgJ2KfqBWmV3
KzcQz+JG2znrqaQXDLCtLa7nJLwWmWkaMxJeAE5KOlQVfd9IQzr14PmWBMZlEVKz
Bn39rvhCtZihItcUFqHEFHgsR11uQQT/uW7wSOVERsfAGIj7JZu+3tfhMnDhdCP6
XgBx/boCupcQbpBBICG1N41nmpktZP7c9V3JSxb75cieH8T4UmLMO1csYTx2ofCO
LcoQU3OlBksKdirkiLbGeR/mo+7hcWEIiS85B1CHdWiDmAL6
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:52:55 2025 by rpki-client