Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa
File: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (raw, json)
Hash identifier: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=
Subject key identifier: 3C:9D:EF:EA:1C:75:1A:E5:6F:29:B9:F2:27:E9:34:A7:55:EB:57:32
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 0194228E2CCAEEFEC83355DE8A876B143F1E
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216475
IP address blocks: 2a0c:dd80:2000::/48 maxlen: 48
2a0c:dd80:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:ca:ee:fe:c8:33:55:de:8a:87:6b:14:3f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9defea1c751ae56f29b9f227e934a755eb5732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:c6:b6:f7:a5:32:80:ee:e1:6c:be:e2:ce:
d6:c8:d7:df:4a:a0:a4:f1:76:13:95:69:ec:77:39:
e8:7b:73:92:ae:f0:83:bb:42:c5:8a:31:cc:c5:fb:
50:47:58:53:0f:1c:29:3d:66:87:40:85:f6:b9:12:
3d:25:4d:9b:c3:63:e3:7f:12:22:ab:70:e1:92:b8:
9d:cb:c1:4c:40:a7:a6:fb:0c:b9:b2:1a:fa:d2:bb:
d7:60:3f:ad:b2:82:56:9e:88:fc:b4:aa:46:f4:7c:
03:97:25:59:d2:33:24:90:76:3f:5a:27:36:66:dc:
cb:f9:20:a7:a1:a1:e8:18:66:da:16:10:32:1f:e9:
ca:5e:c8:d7:a6:da:87:ed:ad:6d:ed:3f:9d:59:7d:
9a:1f:76:c2:b3:08:04:be:90:37:98:ac:2b:b9:10:
18:36:f4:8b:77:e3:ca:de:91:49:36:03:ce:08:7c:
62:94:6b:89:85:c2:ad:71:e6:29:37:61:85:1f:55:
44:c8:50:56:59:01:08:f7:1a:d4:45:1f:46:f7:95:
51:a0:c1:ec:38:fb:04:70:a6:59:e2:45:cc:be:64:
5e:52:7c:9c:35:f7:0f:f9:13:63:15:cb:55:98:ff:
bd:2d:8e:3a:b7:95:d3:2a:eb:df:66:5a:68:58:56:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:EF:EA:1C:75:1A:E5:6F:29:B9:F2:27:E9:34:A7:55:EB:57:32
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:dd80:2000::/48
2a0c:dd80:3000::/48
Signature Algorithm: sha256WithRSAEncryption
22:80:06:1e:54:bf:40:ea:db:e0:c4:b2:6d:5c:17:59:c7:63:
c8:bc:86:cc:f2:db:a4:4a:8c:90:bd:5a:d7:f0:44:fc:e3:f6:
46:18:99:14:18:eb:6a:aa:53:f5:ac:e1:e1:13:20:7f:1f:14:
d9:8e:6f:0c:d9:ef:87:f6:5f:86:0a:11:fb:77:33:c8:69:00:
b2:6c:02:f1:a2:ef:36:b1:5a:33:18:06:4c:0b:fb:ae:fb:b2:
54:29:0d:50:a1:3f:b6:5b:46:14:24:79:86:0f:92:d1:5f:66:
b1:af:24:a6:c4:20:77:7d:24:53:f1:9a:41:65:ef:63:71:d6:
4e:64:53:26:de:c8:c2:f3:95:f8:19:54:17:4c:24:c6:37:24:
e0:8d:20:cb:10:45:32:93:25:26:93:d7:22:87:b6:f5:55:7b:
aa:7f:42:af:72:4a:89:1a:8f:ca:44:95:14:27:05:99:9b:29:
f8:d3:98:e1:2e:80:06:f9:bc:d5:67:10:21:44:ec:aa:0f:a2:
18:22:6c:0b:b4:83:ad:8e:d6:9a:10:f0:07:8e:4e:7e:eb:cd:
0b:37:5c:97:af:5a:71:74:8f:bd:b8:e5:15:a3:6a:ba:5b:7a:
05:69:17:2c:5d:82:17:79:44:6d:40:1f:66:59:d3:c4:e7:6a:
fe:5d:f2:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijizK7v7IM1XeiodrFD8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGI2N2I4NTEwNGU0ZGI1OThmZWExNTY3ODY5OWM5MjQ3
M2JkYTAwHhcNMjUwMTAxMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzlkZWZlYTFjNzUxYWU1NmYyOWI5ZjIyN2U5MzRhNzU1ZWI1NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw3GtvelMoDu4Wy+4s7WyNffSqCk
8XYTlWnsdznoe3OSrvCDu0LFijHMxftQR1hTDxwpPWaHQIX2uRI9JU2bw2PjfxIi
q3Dhkridy8FMQKem+wy5shr60rvXYD+tsoJWnoj8tKpG9HwDlyVZ0jMkkHY/Wic2
ZtzL+SCnoaHoGGbaFhAyH+nKXsjXptqH7a1t7T+dWX2aH3bCswgEvpA3mKwruRAY
NvSLd+PK3pFJNgPOCHxilGuJhcKtceYpN2GFH1VEyFBWWQEI9xrURR9G95VRoMHs
OPsEcKZZ4kXMvmReUnycNfcP+RNjFctVmP+9LY46t5XTKuvfZlpoWFbmjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDyd7+ocdRrlbym58ifpNKdV61cyMB8GA1UdIwQY
MBaAFMHbZ7hRBOTbWY/qFWeGmckkc72gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjkt
N2Q0YzhmMzdmNWZkLzEvUEozdjZoeDFHdVZ2S2JueUotazBwMVhyVnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjktN2Q0YzhmMzdmNWZk
LzEvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgzdgCAA
AwcAKgzdgDAAMA0GCSqGSIb3DQEBCwUAA4IBAQAigAYeVL9A6tvgxLJtXBdZx2PI
vIbM8tukSoyQvVrX8ET84/ZGGJkUGOtqqlP1rOHhEyB/HxTZjm8M2e+H9l+GChH7
dzPIaQCybALxou82sVozGAZMC/uu+7JUKQ1QoT+2W0YUJHmGD5LRX2axrySmxCB3
fSRT8ZpBZe9jcdZOZFMm3sjC85X4GVQXTCTGNyTgjSDLEEUykyUmk9cih7b1VXuq
f0KvckqJGo/KRJUUJwWZmyn405jhLoAG+bzVZxAhROyqD6IYImwLtIOtjtaaEPAH
jk5+680LN1yXr1pxdI+9uOUVo2q6W3oFaRcsXYIXeURtQB9mWdPE52r+XfJf
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:43 2025 by rpki-client