Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DmFww2p1qx027kTZkDSakYSedmQ.roa
File: DmFww2p1qx027kTZkDSakYSedmQ.roa (raw, json)
Hash identifier: LlyMg/2+zk4e0y9VuT2JJuj/GO7qLm2jUrxS5Cdtxf8=
Subject key identifier: 0E:61:70:C3:6A:75:AB:1D:36:EE:44:D9:90:34:9A:91:84:9E:76:64
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDD991B83007A011DCD95C586B39D6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DmFww2p1qx027kTZkDSakYSedmQ.roa
Signing time: Thu 02 Jan 2025 07:49:40 +0000
ROA not before: Thu 02 Jan 2025 07:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48752
IP address blocks: 2a0a:79c7:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d9:91:b8:30:07:a0:11:dc:d9:5c:58:6b:39:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6170c36a75ab1d36ee44d990349a91849e7664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:b2:87:d4:02:92:cc:d4:d4:55:d8:34:52:
ec:5e:83:e4:1f:eb:79:11:1a:06:ec:94:4f:2c:02:
cd:9b:65:b7:f6:68:31:d3:23:7b:c3:99:7d:0b:16:
e2:b6:fd:24:e8:8e:9d:5d:10:bb:a7:46:3f:64:08:
69:42:5d:27:c1:dd:86:e6:db:9e:cd:a2:39:78:f3:
5c:dd:56:c6:14:4a:97:d3:e5:6d:c0:0d:18:73:dd:
7d:a0:97:fc:0b:b9:a5:ae:9a:18:84:45:d4:03:2c:
9a:fd:64:30:a6:0e:cf:71:ac:07:8f:36:80:01:e6:
bc:4a:48:7e:60:be:5c:5b:ba:fb:8b:da:4b:88:9a:
4a:d2:30:bc:db:30:d4:13:0c:d4:48:c8:cb:15:27:
09:d6:0d:69:f1:95:2b:cf:0e:3c:04:f3:b6:bf:f3:
9b:58:27:17:a9:72:f3:27:f4:cf:cd:e6:50:91:8c:
ee:89:0a:8e:f8:33:a2:83:e4:c9:c8:a0:1b:36:46:
68:4b:62:3a:7b:a7:95:b7:b3:8c:70:66:66:49:fe:
23:cd:f6:38:1d:79:f2:21:2d:77:14:a7:15:51:37:
44:90:ce:51:83:3c:ee:ee:38:03:a2:fa:51:09:bb:
dd:2c:8b:bb:e7:af:3e:da:45:fd:76:c0:40:63:e8:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:70:C3:6A:75:AB:1D:36:EE:44:D9:90:34:9A:91:84:9E:76:64
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DmFww2p1qx027kTZkDSakYSedmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
11:72:fc:e5:ab:7b:6f:51:21:0c:c1:2e:1f:77:97:dc:c2:00:
12:e7:14:f1:c8:56:23:0a:1d:8d:87:88:5a:fb:26:c1:51:3a:
c8:92:b5:3b:6d:d3:6f:f5:29:53:90:e2:d4:20:f0:94:69:2b:
06:f4:fc:15:ba:c5:af:ec:58:fc:33:45:65:8f:d5:80:b7:51:
aa:6d:34:19:9c:4d:3e:09:a9:8e:ca:6d:eb:48:09:c3:06:29:
31:0e:62:b0:cb:a0:b0:04:3d:d8:b0:4b:77:3e:ac:79:90:15:
a3:c9:f3:6b:51:79:21:f8:50:9c:7d:79:18:12:b6:67:dd:52:
5f:31:28:69:fc:37:8a:af:1c:14:46:cc:b7:fd:c4:3b:ad:73:
dd:1a:00:47:c9:e5:b6:2a:52:9b:84:bd:60:79:9c:29:1c:5b:
ca:95:68:0a:b6:45:f2:74:ff:1a:d0:8b:f0:5b:a7:1b:e7:da:
7f:a5:05:94:32:ab:56:b6:c2:5f:49:fa:1e:02:c7:85:60:7c:
31:81:f9:92:fa:0a:0f:b9:32:45:77:5b:d0:68:c2:8f:42:48:
28:29:03:76:cc:da:56:fc:71:4d:0b:08:d5:cb:35:f7:1d:59:
55:8a:86:83:39:3b:76:0b:69:40:6a:f5:2b:d7:a9:1f:24:22:
36:0f:3b:7a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQl/dmRuDAHoBHc2VxYaznWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTYxNzBjMzZhNzVhYjFkMzZlZTQ0ZDk5MDM0OWE5MTg0OWU3NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIeyh9QCkszU1FXYNFLsXoPkH+t5
ERoG7JRPLALNm2W39mgx0yN7w5l9Cxbitv0k6I6dXRC7p0Y/ZAhpQl0nwd2G5tue
zaI5ePNc3VbGFEqX0+VtwA0Yc919oJf8C7mlrpoYhEXUAyya/WQwpg7PcawHjzaA
Aea8Skh+YL5cW7r7i9pLiJpK0jC82zDUEwzUSMjLFScJ1g1p8ZUrzw48BPO2v/Ob
WCcXqXLzJ/TPzeZQkYzuiQqO+DOig+TJyKAbNkZoS2I6e6eVt7OMcGZmSf4jzfY4
HXnyIS13FKcVUTdEkM5Rgzzu7jgDovpRCbvdLIu7568+2kX9dsBAY+giAwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFA5hcMNqdasdNu5E2ZA0mpGEnnZkMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvRG1Gd3cycDFxeDAyN2tUWmtEU2FrWVNlZG1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5x/8w
DQYJKoZIhvcNAQELBQADggEBABFy/OWre29RIQzBLh93l9zCABLnFPHIViMKHY2H
iFr7JsFROsiStTtt02/1KVOQ4tQg8JRpKwb0/BW6xa/sWPwzRWWP1YC3UaptNBmc
TT4JqY7KbetICcMGKTEOYrDLoLAEPdiwS3c+rHmQFaPJ82tReSH4UJx9eRgStmfd
Ul8xKGn8N4qvHBRGzLf9xDutc90aAEfJ5bYqUpuEvWB5nCkcW8qVaAq2RfJ0/xrQ
i/Bbpxvn2n+lBZQyq1a2wl9J+h4Cx4VgfDGB+ZL6Cg+5MkV3W9Bowo9CSCgpA3bM
2lb8cU0LCNXLNfcdWVWKhoM5O3YLaUBq9SvXqR8kIjYPO3o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:10:54 2025 by rpki-client