Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa
File: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (raw, json)
Hash identifier: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=
Subject key identifier: 94:96:D1:88:B8:99:18:E8:BE:7C:25:83:18:6C:D9:37:99:9A:ED:6F
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 0194206864495187269D81C7E08ACF6E77B7
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2001:678:9dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:49:51:87:26:9d:81:c7:e0:8a:cf:6e:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9496d188b89918e8be7c2583186cd937999aed6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:81:e1:2a:b7:3f:74:19:6c:8c:4c:90:d2:
64:90:53:ac:0d:09:12:e9:b0:93:8d:69:70:29:c6:
04:3f:bb:21:3d:6a:f7:6d:c0:40:c7:e0:5b:f6:b3:
bd:52:57:3c:02:08:ff:e0:72:d2:39:5b:24:5d:88:
13:fb:d8:bc:66:4d:ac:6c:01:02:97:6d:ad:24:f4:
91:ad:e9:f0:85:0d:9e:29:12:79:9e:a7:4b:21:88:
78:5c:fd:0f:20:51:97:ea:a9:38:86:75:8f:07:42:
8c:5c:a3:44:f9:9e:af:50:10:f0:f1:bf:4b:3c:75:
a5:38:45:be:5c:df:f9:63:fd:76:58:68:70:62:53:
a4:89:c8:df:d8:5f:52:8e:6d:d0:2d:58:12:a4:4c:
2b:c3:66:bb:33:03:34:ae:07:cd:cc:22:e3:e6:02:
6f:c1:1c:eb:46:69:e9:d7:1b:1d:5e:06:68:44:14:
04:c0:fc:09:05:84:f8:1f:7d:ec:f2:13:ab:18:00:
49:f3:20:a4:b3:d8:c1:39:d1:f5:cc:b7:27:c8:56:
4d:26:b1:b2:9d:65:00:6b:9f:6f:ae:e8:4b:c5:de:
49:e8:dc:0c:a0:27:1e:d0:3b:bb:b5:22:70:0b:6b:
39:44:2a:68:3a:f1:67:76:2f:9d:9b:c6:81:b5:d7:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:D1:88:B8:99:18:E8:BE:7C:25:83:18:6C:D9:37:99:9A:ED:6F
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9dc::/48
Signature Algorithm: sha256WithRSAEncryption
70:cf:d5:f8:1f:5a:cc:61:d6:2e:b5:d6:7b:91:0d:37:7e:59:
d4:a2:c2:b5:07:ee:c0:72:1d:e7:8d:4c:9d:3e:b9:b5:87:f5:
3d:2a:69:e7:7f:39:6e:a5:e7:02:ad:08:97:4d:3c:a0:5e:18:
1d:f7:38:34:fe:eb:5a:9a:40:74:5a:f9:86:f9:60:cd:f6:a9:
a4:99:f3:88:38:73:fb:02:ed:cf:c7:71:bc:09:27:bb:7d:d4:
f4:3e:48:a3:da:21:79:fd:b7:47:0d:bd:af:29:a0:c2:fa:1d:
9a:20:20:4e:fa:1e:cc:7e:60:57:ee:4c:3d:1a:5f:61:62:1f:
aa:a1:6c:19:40:82:5e:7f:a9:d6:2b:82:06:cd:86:31:fd:f8:
aa:d9:56:df:66:66:6d:a6:29:e7:36:5b:5a:57:df:22:be:5f:
2f:e3:47:cd:d7:06:2e:8f:04:be:0f:58:31:bb:5a:91:b4:f1:
58:ed:41:26:0e:42:c0:7e:94:e1:65:69:04:ea:37:b8:d1:a4:
e9:84:78:89:c0:49:2e:52:d6:b7:68:93:a3:4e:53:60:e6:52:
39:29:b6:81:4e:84:f5:63:16:64:8c:2b:93:70:b5:c6:14:03:
d4:b8:35:fc:73:86:7a:9a:50:1f:57:83:e6:f1:bf:1c:66:d6:
e7:69:8c:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgaGRJUYcmnYHH4IrPbne3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl
ZmE1ZGIwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk2ZDE4OGI4OTkxOGU4YmU3YzI1ODMxODZjZDkzNzk5OWFlZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd+B4Sq3P3QZbIxMkNJkkFOsDQkS
6bCTjWlwKcYEP7shPWr3bcBAx+Bb9rO9Ulc8Agj/4HLSOVskXYgT+9i8Zk2sbAEC
l22tJPSRrenwhQ2eKRJ5nqdLIYh4XP0PIFGX6qk4hnWPB0KMXKNE+Z6vUBDw8b9L
PHWlOEW+XN/5Y/12WGhwYlOkicjf2F9Sjm3QLVgSpEwrw2a7MwM0rgfNzCLj5gJv
wRzrRmnp1xsdXgZoRBQEwPwJBYT4H33s8hOrGABJ8yCks9jBOdH1zLcnyFZNJrGy
nWUAa59vruhLxd5J6NwMoCce0Du7tSJwC2s5RCpoOvFndi+dm8aBtdc39QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJSW0Yi4mRjovnwlgxhs2TeZmu1vMB8GA1UdIwQY
MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt
YjIxN2E2OGNlYWY0LzEvbEpiUmlMaVpHT2ktZkNXREdHelpONW1hN1c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0
LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnc
MA0GCSqGSIb3DQEBCwUAA4IBAQBwz9X4H1rMYdYutdZ7kQ03flnUosK1B+7Ach3n
jUydPrm1h/U9KmnnfzlupecCrQiXTTygXhgd9zg0/utamkB0WvmG+WDN9qmkmfOI
OHP7Au3Px3G8CSe7fdT0Pkij2iF5/bdHDb2vKaDC+h2aICBO+h7MfmBX7kw9Gl9h
Yh+qoWwZQIJef6nWK4IGzYYx/fiq2VbfZmZtpinnNltaV98ivl8v40fN1wYujwS+
D1gxu1qRtPFY7UEmDkLAfpThZWkE6je40aTphHiJwEkuUta3aJOjTlNg5lI5KbaB
ToT1YxZkjCuTcLXGFAPUuDX8c4Z6mlAfV4Pm8b8cZtbnaYxM
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:10 2025 by rpki-client