Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa
File: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (raw, json)
Hash identifier: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=
Subject key identifier: D1:10:DD:58:5D:C8:05:C4:98:0C:89:F4:30:B7:D5:04:50:A3:43:B9
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7E80AA4F43FA53190D694E9D1DEE
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210335
IP address blocks: 2a01:e901:10b::/48 maxlen: 48
2a01:e901:11b::/48 maxlen: 48
2a01:e901:12b::/48 maxlen: 48
2a01:e901:13b::/48 maxlen: 48
2a01:e901:14b::/48 maxlen: 48
2a01:e901:15b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:80:aa:4f:43:fa:53:19:0d:69:4e:9d:1d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d110dd585dc805c4980c89f430b7d50450a343b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:c4:e7:c8:40:77:f4:2a:49:b5:f9:f7:2f:
7d:63:a7:68:9b:72:be:b5:2e:51:a3:93:2d:3b:8a:
ba:08:c5:e3:60:89:d3:f3:eb:15:eb:94:d5:8e:aa:
74:b2:c8:e4:7f:03:31:d3:dc:61:97:64:77:7d:9e:
a1:e8:e6:b0:ea:6f:b1:77:f5:03:c8:02:5d:b6:73:
19:69:f3:62:28:d9:7d:56:de:35:40:08:dd:b5:2d:
88:e5:88:36:b9:03:91:9b:4f:00:54:e7:44:dd:78:
4b:b4:82:61:42:88:60:1c:95:14:52:26:d4:50:f6:
38:5a:ef:26:4c:9e:84:eb:2f:8a:12:ff:df:eb:9b:
97:e2:0c:90:04:36:bc:40:25:92:9b:fb:2f:95:03:
76:d8:ec:86:8c:fb:65:f6:bb:e4:ad:f7:74:b3:c0:
ed:7a:0a:a8:28:7f:f7:5c:fc:bc:84:2a:6a:e0:13:
09:e2:90:2b:2f:d8:b2:84:ba:0e:ce:a2:01:1a:9f:
63:d4:40:c6:dc:15:4c:1b:e5:1c:fa:30:be:e2:fb:
c6:8a:91:46:af:9a:e3:db:98:07:ad:64:95:75:06:
6d:cc:0f:29:ea:0b:ec:e9:b9:f1:78:97:7a:1f:4a:
46:f8:d9:9b:87:bd:4a:53:e5:e2:10:12:0f:b5:32:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:DD:58:5D:C8:05:C4:98:0C:89:F4:30:B7:D5:04:50:A3:43:B9
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10b::/48
2a01:e901:11b::/48
2a01:e901:12b::/48
2a01:e901:13b::/48
2a01:e901:14b::/48
2a01:e901:15b::/48
Signature Algorithm: sha256WithRSAEncryption
a3:20:e3:18:84:15:c8:d9:fd:c9:a3:a5:9b:8a:6d:ec:5b:38:
4b:c3:59:56:f1:d7:d1:08:b9:06:69:13:62:13:1a:87:36:e3:
d0:36:5c:9a:c4:3e:bb:ab:0f:86:f3:c5:7b:3d:6c:e2:83:31:
27:22:48:4c:14:7a:ae:00:87:29:32:d9:17:33:09:49:5c:d7:
94:30:ce:62:b4:c1:2b:90:d6:ed:97:95:01:d0:27:63:39:13:
fb:e4:d3:a3:ca:4e:60:55:b3:b4:95:c2:34:51:cb:10:a0:1e:
0f:9e:72:ed:60:32:09:ae:a8:39:35:e0:49:aa:9d:75:da:1b:
0f:82:c4:32:ed:ac:fc:92:11:73:56:f2:92:ba:16:02:1d:f6:
cb:30:bd:0c:f6:0d:c0:94:53:2f:d2:fa:9d:78:1b:11:00:10:
ae:ee:30:af:66:e9:15:6a:80:a9:49:b8:d9:81:b4:61:b9:e9:
ee:10:04:95:40:3f:b1:b4:e1:03:bd:e3:c5:a2:a8:c0:43:1c:
26:07:8f:70:75:81:0d:30:b2:2b:b4:29:48:9f:2d:2c:68:2f:
a4:b8:93:a7:67:44:c4:3e:5c:33:76:2a:07:49:c9:37:3f:f2:
6d:24:38:30:08:cf:b0:e9:8c:d1:48:4b:6a:d8:e9:18:2c:be:
fd:d4:57:c9
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQiH36Aqk9D+lMZDWlOnR3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTEwZGQ1ODVkYzgwNWM0OTgwYzg5ZjQzMGI3ZDUwNDUwYTM0M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eXE58hAd/QqSbX59y99Y6dom3K+
tS5Ro5MtO4q6CMXjYInT8+sV65TVjqp0ssjkfwMx09xhl2R3fZ6h6Oaw6m+xd/UD
yAJdtnMZafNiKNl9Vt41QAjdtS2I5Yg2uQORm08AVOdE3XhLtIJhQohgHJUUUibU
UPY4Wu8mTJ6E6y+KEv/f65uX4gyQBDa8QCWSm/svlQN22OyGjPtl9rvkrfd0s8Dt
egqoKH/3XPy8hCpq4BMJ4pArL9iyhLoOzqIBGp9j1EDG3BVMG+Uc+jC+4vvGipFG
r5rj25gHrWSVdQZtzA8p6gvs6bnxeJd6H0pG+Nmbh71KU+XiEBIPtTJmjwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNEQ3VhdyAXEmAyJ9DC31QRQo0O5MB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvMFJEZFdGM0lCY1NZREluME1MZlZCRkNqUTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEL
AwcAKgHpAQEbAwcAKgHpAQErAwcAKgHpAQE7AwcAKgHpAQFLAwcAKgHpAQFbMA0G
CSqGSIb3DQEBCwUAA4IBAQCjIOMYhBXI2f3Jo6Wbim3sWzhLw1lW8dfRCLkGaRNi
ExqHNuPQNlyaxD67qw+G88V7PWzigzEnIkhMFHquAIcpMtkXMwlJXNeUMM5itMEr
kNbtl5UB0CdjORP75NOjyk5gVbO0lcI0UcsQoB4PnnLtYDIJrqg5NeBJqp112hsP
gsQy7az8khFzVvKSuhYCHfbLML0M9g3AlFMv0vqdeBsRABCu7jCvZukVaoCpSbjZ
gbRhuenuEASVQD+xtOEDvePFoqjAQxwmB49wdYENMLIrtClIny0saC+kuJOnZ0TE
PlwzdioHSck3P/JtJDgwCM+w6YzRSEtq2OkYLL791FfJ
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:25 2025 by rpki-client