Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa
File: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (raw, json)
Hash identifier: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=
Subject key identifier: 6C:4A:A0:B6:BB:29:7C:84:3C:5C:12:AC:74:E5:E0:43:65:F2:BE:C9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 0194258EE2D905AE9BDA37D774133EC1D266
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50399
IP address blocks: 2001:678:9c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e2:d9:05:ae:9b:da:37:d7:74:13:3e:c1:d2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4aa0b6bb297c843c5c12ac74e5e04365f2bec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:7c:d6:24:42:d2:51:18:94:dc:19:63:08:
0a:ba:8f:cd:f9:36:4e:9e:00:5a:cf:78:c7:f6:64:
cc:c0:9b:d9:72:8d:bd:14:5d:68:12:de:b2:ad:44:
2a:e4:8d:d4:86:ed:a8:d3:a9:d6:66:7a:00:55:a6:
51:19:71:70:dd:c9:4c:7e:28:16:5d:1d:7e:2f:21:
81:f5:35:5f:d2:9f:66:94:21:06:f4:52:cb:1b:8d:
97:b2:ad:2b:0d:d0:4e:ad:40:75:e4:fb:83:64:c4:
74:10:f0:5a:61:71:8c:9e:4b:73:41:f5:15:12:5f:
43:40:49:21:9b:37:8c:98:98:f4:20:76:6f:09:87:
e7:6c:ad:81:20:fb:49:cb:ad:02:6c:cb:8a:9e:a3:
96:0c:35:e2:46:cb:42:fe:90:f1:d7:93:c2:54:37:
82:49:82:1d:32:1b:ee:3f:3e:49:29:ba:45:5e:4e:
0f:b8:74:54:b9:8e:09:7c:66:39:68:16:32:d5:e4:
82:ca:f8:bb:d8:d9:ac:da:2b:91:91:86:8e:80:67:
2c:d4:39:e2:9f:22:c3:44:c2:04:00:2a:36:d2:e0:
d1:9b:28:0a:e0:f5:8a:f7:ae:9f:47:5c:90:10:59:
9f:d7:7a:5a:eb:43:fe:a6:d5:7b:0f:81:cf:71:8e:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:A0:B6:BB:29:7C:84:3C:5C:12:AC:74:E5:E0:43:65:F2:BE:C9
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9c8::/48
Signature Algorithm: sha256WithRSAEncryption
13:98:1f:aa:29:3c:70:8f:69:fe:6e:e9:56:75:33:4b:e0:89:
1e:7f:ad:5c:64:a6:52:05:9c:17:c1:e4:8b:eb:c3:5a:1d:b3:
2c:21:1d:d9:94:6c:2e:87:fb:10:85:6d:1e:1e:0e:6b:51:af:
af:a4:c0:05:0e:86:16:13:41:72:fd:e5:b4:0b:6a:5b:e7:9c:
bb:22:37:29:1f:be:c5:43:43:95:49:c1:38:79:2e:ee:d2:a3:
f8:93:bd:c8:2b:70:a4:8c:e9:bf:ba:db:40:24:38:a5:e0:d0:
9e:dd:74:3c:b8:2e:59:bf:f8:f9:7d:36:b3:8e:29:aa:ca:f8:
fe:e7:19:4c:72:e8:f5:5f:ab:5f:34:26:9f:86:c3:0a:5c:6f:
9c:8c:a6:71:5b:29:83:84:b4:f8:b3:b4:a7:17:81:fd:41:58:
5f:c3:5b:ce:e5:9a:4e:a7:b2:d4:f4:d7:a8:fe:a1:06:90:af:
58:77:e2:de:1c:37:83:f2:75:f6:3f:e3:44:03:e9:03:f5:96:
df:af:d3:17:39:08:c8:c5:f1:60:65:04:ff:25:18:82:f6:e5:
71:af:80:0f:00:94:81:e5:95:65:e1:5c:4e:e6:3c:b7:70:c5:
db:c4:4d:5d:2f:ea:bb:c3:8e:33:0b:9e:44:af:31:56:74:51:
cf:eb:12:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljuLZBa6b2jfXdBM+wdJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0
NDcxZjkwHhcNMjUwMTAyMDU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzRhYTBiNmJiMjk3Yzg0M2M1YzEyYWM3NGU1ZTA0MzY1ZjJiZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW181iRC0lEYlNwZYwgKuo/N+TZO
ngBaz3jH9mTMwJvZco29FF1oEt6yrUQq5I3Uhu2o06nWZnoAVaZRGXFw3clMfigW
XR1+LyGB9TVf0p9mlCEG9FLLG42Xsq0rDdBOrUB15PuDZMR0EPBaYXGMnktzQfUV
El9DQEkhmzeMmJj0IHZvCYfnbK2BIPtJy60CbMuKnqOWDDXiRstC/pDx15PCVDeC
SYIdMhvuPz5JKbpFXk4PuHRUuY4JfGY5aBYy1eSCyvi72Nms2iuRkYaOgGcs1Dni
nyLDRMIEACo20uDRmygK4PWK966fR1yQEFmf13pa60P+ptV7D4HPcY6uowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGxKoLa7KXyEPFwSrHTl4ENl8r7JMB8GA1UdIwQY
MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt
OTNmNDI1NWYyYjgyLzEvYkVxZ3Ryc3BmSVE4WEJLc2RPWGdRMlh5dnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy
LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnI
MA0GCSqGSIb3DQEBCwUAA4IBAQATmB+qKTxwj2n+bulWdTNL4Ikef61cZKZSBZwX
weSL68NaHbMsIR3ZlGwuh/sQhW0eHg5rUa+vpMAFDoYWE0Fy/eW0C2pb55y7Ijcp
H77FQ0OVScE4eS7u0qP4k73IK3CkjOm/uttAJDil4NCe3XQ8uC5Zv/j5fTazjimq
yvj+5xlMcuj1X6tfNCafhsMKXG+cjKZxWymDhLT4s7SnF4H9QVhfw1vO5ZpOp7LU
9Neo/qEGkK9Yd+LeHDeD8nX2P+NEA+kD9Zbfr9MXOQjIxfFgZQT/JRiC9uVxr4AP
AJSB5ZVl4VxO5jy3cMXbxE1dL+q7w44zC55ErzFWdFHP6xL5
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:12 2025 by rpki-client