Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/zrIx3F0bpchF38MY3NuMGU_mTx4.roa
File: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (raw, json)
Hash identifier: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=
Subject key identifier: CE:B2:31:DC:5D:1B:A5:C8:45:DF:C3:18:DC:DB:8C:19:4F:E6:4F:1E
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7D0AA3B04AFAC809241381BDF323
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/zrIx3F0bpchF38MY3NuMGU_mTx4.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208471
IP address blocks: 2a01:e901:107::/48 maxlen: 48
2a01:e901:117::/48 maxlen: 48
2a01:e901:127::/48 maxlen: 48
2a01:e901:137::/48 maxlen: 48
2a01:e901:147::/48 maxlen: 48
2a01:e901:157::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:0a:a3:b0:4a:fa:c8:09:24:13:81:bd:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceb231dc5d1ba5c845dfc318dcdb8c194fe64f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:e5:36:4f:72:42:f4:02:c3:59:5d:af:58:
07:0d:f5:05:34:71:f7:34:64:74:34:ab:8e:ef:f8:
a2:ca:3c:ed:31:af:b1:b5:6f:66:2a:20:1f:82:06:
63:45:f4:09:4a:4a:0c:57:7a:ab:a0:c7:5c:df:e2:
9f:4a:6d:39:17:70:06:f5:eb:f7:8e:08:fe:dd:67:
a1:ad:26:bb:dd:07:af:34:20:13:dc:0d:f3:4d:d2:
bb:fb:10:3e:63:62:eb:c8:e9:b8:91:57:a6:c0:c1:
3e:f5:30:43:9c:89:6f:04:e4:3a:0d:86:1b:69:43:
99:28:3d:96:3a:51:0d:ce:0a:a2:5f:a2:23:f4:6e:
eb:46:34:99:9d:a1:5e:e3:47:3f:4c:f1:7e:44:75:
74:0d:5d:81:4e:c5:00:96:6c:cf:d8:e8:f2:7d:fc:
12:b9:f7:e3:59:5e:d3:6d:40:df:f8:dd:c2:74:32:
45:3a:62:a1:92:0f:21:95:c9:c1:b7:1c:8c:d9:ae:
55:a6:8f:4a:bb:76:99:c5:4c:53:cd:8f:78:26:08:
79:b0:65:33:d5:eb:cf:0d:2b:40:63:71:0b:f7:8c:
a2:5c:12:b9:1e:f7:2a:fe:78:48:0b:78:f2:33:38:
76:a0:7c:d9:01:27:3b:46:b3:b6:82:35:de:ce:64:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B2:31:DC:5D:1B:A5:C8:45:DF:C3:18:DC:DB:8C:19:4F:E6:4F:1E
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/zrIx3F0bpchF38MY3NuMGU_mTx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:107::/48
2a01:e901:117::/48
2a01:e901:127::/48
2a01:e901:137::/48
2a01:e901:147::/48
2a01:e901:157::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2f:04:cf:a9:1c:2c:d4:0e:6f:97:ea:c5:84:6a:fb:a2:b9:
8f:6d:c4:39:2f:e9:fd:62:1b:6d:3e:13:f5:a3:f2:a1:41:82:
f8:cc:07:3a:54:75:76:1c:ca:63:72:35:cb:af:3f:6d:03:74:
fa:bd:44:4d:6b:fa:18:29:34:83:fd:91:1b:13:77:80:7a:07:
9b:b4:99:ec:01:c2:9e:9f:f6:34:b1:b7:6b:8e:81:9a:4f:3e:
af:7e:86:85:51:82:f6:47:7f:c2:f6:5b:7b:62:9c:50:71:0d:
cb:3b:b0:5f:2c:79:38:de:76:19:3e:d2:30:6e:46:a8:51:03:
ee:bf:5f:3a:a8:c2:84:dd:6e:da:db:34:67:55:99:db:48:81:
90:9d:c6:c8:06:c7:8d:f0:c9:06:e5:e7:91:05:18:ba:34:9d:
d9:e5:2f:b5:99:cb:5f:47:89:f4:a1:70:fd:7d:2d:aa:86:2e:
4b:d9:0a:37:49:0b:6f:54:57:2b:32:50:98:f9:ee:9d:2c:3c:
bc:69:92:b2:36:eb:8b:11:d4:b5:08:97:65:64:14:10:9e:e6:
5c:e3:10:ff:49:86:60:de:5c:67:eb:93:6c:fd:cc:df:cc:0d:
1f:28:a6:bd:24:55:39:09:45:d0:a3:5c:e9:99:67:1a:3e:a2:
7b:06:d3:75
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQiH30Ko7BK+sgJJBOBvfMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWIyMzFkYzVkMWJhNWM4NDVkZmMzMThkY2RiOGMxOTRmZTY0ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CXlNk9yQvQCw1ldr1gHDfUFNHH3
NGR0NKuO7/iiyjztMa+xtW9mKiAfggZjRfQJSkoMV3qroMdc3+KfSm05F3AG9ev3
jgj+3WehrSa73QevNCAT3A3zTdK7+xA+Y2LryOm4kVemwME+9TBDnIlvBOQ6DYYb
aUOZKD2WOlENzgqiX6Ij9G7rRjSZnaFe40c/TPF+RHV0DV2BTsUAlmzP2OjyffwS
uffjWV7TbUDf+N3CdDJFOmKhkg8hlcnBtxyM2a5Vpo9Ku3aZxUxTzY94Jgh5sGUz
1evPDStAY3EL94yiXBK5Hvcq/nhIC3jyMzh2oHzZASc7RrO2gjXezmR8+wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFM6yMdxdG6XIRd/DGNzbjBlP5k8eMB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvenJJeDNGMGJwY2hGMzhNWTNOdU1HVV9tVHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEH
AwcAKgHpAQEXAwcAKgHpAQEnAwcAKgHpAQE3AwcAKgHpAQFHAwcAKgHpAQFXMA0G
CSqGSIb3DQEBCwUAA4IBAQCpLwTPqRws1A5vl+rFhGr7ormPbcQ5L+n9YhttPhP1
o/KhQYL4zAc6VHV2HMpjcjXLrz9tA3T6vURNa/oYKTSD/ZEbE3eAegebtJnsAcKe
n/Y0sbdrjoGaTz6vfoaFUYL2R3/C9lt7YpxQcQ3LO7BfLHk43nYZPtIwbkaoUQPu
v186qMKE3W7a2zRnVZnbSIGQncbIBseN8MkG5eeRBRi6NJ3Z5S+1mctfR4n0oXD9
fS2qhi5L2Qo3SQtvVFcrMlCY+e6dLDy8aZKyNuuLEdS1CJdlZBQQnuZc4xD/SYZg
3lxn65Ns/czfzA0fKKa9JFU5CUXQo1zpmWcaPqJ7BtN1
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:21 2025 by rpki-client