Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/a5ENWfgeJoTdkmkmWh2QDvelWp8.roa
File: a5ENWfgeJoTdkmkmWh2QDvelWp8.roa (raw, json)
Hash identifier: oka6UR7fuDvaS+P0EhzHRaWdX/8yDP3LK7DL0R3JiIQ=
Subject key identifier: 6B:91:0D:59:F8:1E:26:84:DD:92:69:26:5A:1D:90:0E:F7:A5:5A:9F
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0194214396A4E577349122892D88F1C4D257
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/a5ENWfgeJoTdkmkmWh2QDvelWp8.roa
Signing time: Wed 01 Jan 2025 09:47:45 +0000
ROA not before: Wed 01 Jan 2025 09:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 2a13:7dc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:96:a4:e5:77:34:91:22:89:2d:88:f1:c4:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jan 1 09:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b910d59f81e2684dd9269265a1d900ef7a55a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:b2:de:a6:ec:63:ed:38:b3:22:40:44:98:
a6:9b:f7:c8:b5:62:97:c2:c1:4f:30:24:e2:5c:76:
82:c7:b1:26:89:c1:78:c7:47:36:92:40:21:37:ba:
48:b6:9c:e8:02:f0:23:d5:8a:9b:7b:b2:4c:e3:a8:
12:21:d7:37:10:46:aa:2f:bb:13:46:f7:30:cb:40:
6b:d7:0c:00:95:e6:76:67:97:14:33:c0:50:04:9d:
ac:19:7e:a9:4c:18:55:3b:44:fb:76:05:23:cf:2a:
8e:c2:03:6d:6f:ee:50:b0:9f:aa:15:b3:97:38:c0:
63:68:60:21:66:ce:f1:74:3a:36:a4:09:58:01:b7:
29:10:81:be:77:e1:71:3e:b3:96:92:4a:1e:0c:eb:
94:a9:59:f7:67:a5:77:26:f5:4c:69:1a:40:d6:5d:
f9:ac:86:12:84:4b:a2:37:7c:5e:c0:a0:58:65:91:
7f:ad:a7:88:07:63:24:81:c6:f6:7a:d3:09:c5:0a:
96:e3:68:b9:81:93:da:d2:9c:38:9d:9a:32:50:8b:
22:34:e2:71:5a:e8:6e:ce:b2:5d:36:56:a0:f3:6f:
6d:8a:80:e9:15:61:e6:cd:7b:cd:29:f2:aa:ce:c1:
43:01:3a:39:26:7d:10:c5:8d:b3:67:b6:e2:e4:cd:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:0D:59:F8:1E:26:84:DD:92:69:26:5A:1D:90:0E:F7:A5:5A:9F
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/a5ENWfgeJoTdkmkmWh2QDvelWp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:9c:db:77:14:9e:b1:b1:f1:df:24:1b:ab:55:d6:da:94:f5:
9d:09:54:6a:54:00:fe:e6:96:23:43:6e:d8:57:cc:2e:16:91:
24:bf:18:6f:14:bf:b9:c8:d4:2b:ae:85:51:4f:21:6e:40:2b:
f5:0d:4c:f3:47:00:46:e4:2f:32:56:27:96:06:63:9f:d5:6b:
aa:03:76:0e:4f:dd:f2:89:3a:5f:8f:49:c7:3a:39:e5:1b:cd:
e7:43:a5:47:54:32:70:e7:3f:ed:76:68:db:e7:5f:8c:18:4d:
96:ad:43:0b:26:70:32:e5:e8:09:8c:d9:96:ff:16:2d:bc:e5:
e2:75:94:6d:7b:59:b7:78:68:5e:04:cf:1b:d0:8b:4e:a0:56:
27:91:99:fc:a5:89:db:1a:be:d6:04:51:dd:20:55:93:2a:5c:
2c:7e:46:9e:4a:83:a1:cf:6f:d7:b5:f8:1d:b3:5e:50:5f:40:
81:06:1a:4f:8c:e2:b7:da:cb:e2:ee:ec:4b:38:78:81:a8:18:
ce:52:e5:04:92:9b:61:e4:94:2b:3e:f5:fc:1d:ce:24:7c:1d:
26:62:a3:8d:9a:e1:7b:a3:07:05:4d:e5:d1:aa:94:5e:f5:d6:
96:11:2a:a7:25:95:d4:d3:ff:e0:08:ee:da:58:b2:b2:cc:22:
ba:59:48:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhQ5ak5Xc0kSKJLYjxxNJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4
ZDA4YWUwHhcNMjUwMTAxMDk0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjkxMGQ1OWY4MWUyNjg0ZGQ5MjY5MjY1YTFkOTAwZWY3YTU1YTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyACy3qbsY+04syJARJimm/fItWKX
wsFPMCTiXHaCx7EmicF4x0c2kkAhN7pItpzoAvAj1Yqbe7JM46gSIdc3EEaqL7sT
Rvcwy0Br1wwAleZ2Z5cUM8BQBJ2sGX6pTBhVO0T7dgUjzyqOwgNtb+5QsJ+qFbOX
OMBjaGAhZs7xdDo2pAlYAbcpEIG+d+FxPrOWkkoeDOuUqVn3Z6V3JvVMaRpA1l35
rIYShEuiN3xewKBYZZF/raeIB2Mkgcb2etMJxQqW42i5gZPa0pw4nZoyUIsiNOJx
WuhuzrJdNlag829tioDpFWHmzXvNKfKqzsFDATo5Jn0QxY2zZ7bi5M0YTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGuRDVn4HiaE3ZJpJlodkA73pVqfMB8GA1UdIwQY
MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt
NmVlZmRhMTEwOGFkLzEvYTVFTldmZ2VKb1Rka21rbVdoMlFEdmVsV3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk
LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhN9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAFZzbdxSesbHx3yQbq1XW2pT1nQlUalQA/uaWI0Nu
2FfMLhaRJL8YbxS/ucjUK66FUU8hbkAr9Q1M80cARuQvMlYnlgZjn9VrqgN2Dk/d
8ok6X49Jxzo55RvN50OlR1QycOc/7XZo2+dfjBhNlq1DCyZwMuXoCYzZlv8WLbzl
4nWUbXtZt3hoXgTPG9CLTqBWJ5GZ/KWJ2xq+1gRR3SBVkypcLH5GnkqDoc9v17X4
HbNeUF9AgQYaT4zit9rL4u7sSzh4gagYzlLlBJKbYeSUKz71/B3OJHwdJmKjjZrh
e6MHBU3l0aqUXvXWlhEqpyWV1NP/4Aju2liysswiullI4w==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:25 2025 by rpki-client