Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DlaMrTpar3bZ--vS2DKXid9vFHQ.roa
File: DlaMrTpar3bZ--vS2DKXid9vFHQ.roa (raw, json)
Hash identifier: Rl+tyH/XHqXVP/gIez6Im38IbpyNF17nYk/ckaM6xx8=
Subject key identifier: 0E:56:8C:AD:3A:5A:AF:76:D9:FB:EB:D2:D8:32:97:89:DF:6F:14:74
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE6C41D2200A5506E5B038C0BD690
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DlaMrTpar3bZ--vS2DKXid9vFHQ.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208340
IP address blocks: 2a06:e881:5608::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e6:c4:1d:22:00:a5:50:6e:5b:03:8c:0b:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e568cad3a5aaf76d9fbebd2d8329789df6f1474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:ca:92:e7:d0:2a:13:f7:cd:a2:c1:53:bc:
72:62:c6:c1:39:2a:49:62:f6:9e:93:2a:73:c4:5c:
74:9e:93:5e:95:79:bd:36:f2:35:03:e1:50:3e:78:
ce:f5:b9:ba:67:7d:18:a8:2c:64:51:07:83:2c:2e:
a3:6b:39:f6:1e:e6:bd:da:e0:f7:70:55:36:53:54:
26:ee:6d:04:22:cc:af:04:60:e4:a9:39:18:ca:1f:
85:4a:c3:89:95:a1:b5:0b:02:44:f7:9a:13:54:2f:
dd:ff:54:c8:0b:59:4a:1c:c6:f2:20:26:3b:89:4e:
77:a1:62:38:88:25:48:53:60:f7:67:99:47:ce:d1:
3b:6c:ea:41:35:24:91:90:de:9d:b1:15:ae:39:67:
64:25:06:5d:cb:5e:42:38:5a:7f:df:d0:df:40:82:
79:6a:80:5f:05:7b:e4:8e:23:6d:e7:20:c8:54:91:
bb:5f:65:93:19:92:39:57:e2:3f:fa:8f:34:0f:b2:
55:55:0c:14:0d:64:9f:6f:b4:0d:07:bd:19:7e:5b:
88:fd:c9:85:17:e4:b6:08:e5:cf:54:45:af:8b:c2:
96:8e:ac:b7:cb:a9:20:9d:77:04:5b:ba:e8:06:84:
df:7b:7d:8b:c9:ef:43:8f:e2:fc:bf:52:7a:4a:38:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:8C:AD:3A:5A:AF:76:D9:FB:EB:D2:D8:32:97:89:DF:6F:14:74
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DlaMrTpar3bZ--vS2DKXid9vFHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5608::/48
Signature Algorithm: sha256WithRSAEncryption
13:76:49:70:f2:a9:ef:0d:f5:56:dd:2f:88:19:2e:27:66:17:
e5:76:b9:b8:0c:eb:7a:06:3a:a6:f0:52:05:f9:82:6b:28:dc:
e5:e9:04:d2:7d:12:80:97:50:44:ba:d2:91:3d:c2:ff:34:80:
26:ba:f5:42:fe:b3:fe:b9:10:e9:8e:dd:4a:cf:ab:ee:12:d0:
5f:7a:02:23:84:a3:5c:5b:cd:43:a8:c0:34:cb:62:52:2d:12:
36:dc:13:2d:d6:2e:a4:39:db:9b:3b:e2:a2:aa:68:90:0d:83:
09:07:d6:fb:77:ea:ad:4e:68:7a:be:95:f6:d0:3e:74:fe:a7:
2b:f3:3b:5b:e2:12:3c:02:42:01:ff:b6:41:14:9a:21:d6:a9:
d0:98:03:6d:ad:74:1f:66:6e:f7:c8:46:26:d6:d6:3e:47:3d:
a8:61:be:dd:79:59:1f:f6:80:ce:8d:af:a1:0d:de:c0:b5:16:
e2:c8:fa:03:0d:3d:9d:ff:c7:80:31:3a:38:80:d6:50:c5:45:
4b:83:02:f6:d3:7b:ff:5f:5f:a8:a1:c0:7f:d5:7f:9c:02:40:
29:b3:ee:b9:b2:b2:95:37:e5:61:3c:71:3f:c1:b9:4e:e5:59:
f5:19:24:cb:c6:53:14:51:a8:43:fb:29:36:c8:ba:1d:c0:fa:
7d:18:ba:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/ebEHSIApVBuWwOMC9aQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTU2OGNhZDNhNWFhZjc2ZDlmYmViZDJkODMyOTc4OWRmNmYxNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNnKkufQKhP3zaLBU7xyYsbBOSpJ
YvaekypzxFx0npNelXm9NvI1A+FQPnjO9bm6Z30YqCxkUQeDLC6jazn2Hua92uD3
cFU2U1Qm7m0EIsyvBGDkqTkYyh+FSsOJlaG1CwJE95oTVC/d/1TIC1lKHMbyICY7
iU53oWI4iCVIU2D3Z5lHztE7bOpBNSSRkN6dsRWuOWdkJQZdy15COFp/39DfQIJ5
aoBfBXvkjiNt5yDIVJG7X2WTGZI5V+I/+o80D7JVVQwUDWSfb7QNB70ZfluI/cmF
F+S2COXPVEWvi8KWjqy3y6kgnXcEW7roBoTfe32Lye9Dj+L8v1J6Sjge+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA5WjK06Wq922fvr0tgyl4nfbxR0MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvRGxhTXJUcGFyM2JaLS12UzJES1hpZDl2RkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogVYI
MA0GCSqGSIb3DQEBCwUAA4IBAQATdklw8qnvDfVW3S+IGS4nZhfldrm4DOt6Bjqm
8FIF+YJrKNzl6QTSfRKAl1BEutKRPcL/NIAmuvVC/rP+uRDpjt1Kz6vuEtBfegIj
hKNcW81DqMA0y2JSLRI23BMt1i6kOdubO+KiqmiQDYMJB9b7d+qtTmh6vpX20D50
/qcr8ztb4hI8AkIB/7ZBFJoh1qnQmANtrXQfZm73yEYm1tY+Rz2oYb7deVkf9oDO
ja+hDd7AtRbiyPoDDT2d/8eAMTo4gNZQxUVLgwL203v/X1+oocB/1X+cAkAps+65
srKVN+VhPHE/wblO5Vn1GSTLxlMUUahD+yk2yLodwPp9GLrS
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:58 2025 by rpki-client