Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/KlXP61wGSf-pkp0VnUHJdMFJoT0.roa
File: KlXP61wGSf-pkp0VnUHJdMFJoT0.roa (raw, json)
Hash identifier: ME21anJjxNOFhXR1wF7FD1dWOc2tT2Q1ZM7bSJeQB80=
Subject key identifier: 2A:55:CF:EB:5C:06:49:FF:A9:92:9D:15:9D:41:C9:74:C1:49:A1:3D
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF4E9AA8C640110FC9546744DEECF
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/KlXP61wGSf-pkp0VnUHJdMFJoT0.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212895
IP address blocks: 2a0f:5707:abf0::/44 maxlen: 48
2a0f:5707:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f4:e9:aa:8c:64:01:10:fc:95:46:74:4d:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a55cfeb5c0649ffa9929d159d41c974c149a13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:d2:9c:4a:02:b6:d4:13:d9:2a:83:09:62:
38:f5:a1:5f:40:9e:c3:fc:fd:d2:b6:2e:56:09:f7:
7e:39:03:b1:82:9d:cb:20:43:b0:c5:9a:c4:99:a4:
e6:6e:8b:db:2e:b6:ea:ea:21:fd:63:ae:4b:6d:cd:
fc:d7:2d:31:9e:41:a5:82:f4:36:03:dd:8a:f2:cb:
ba:a1:29:e4:e6:5b:e4:21:7f:b7:3f:a5:0d:fc:33:
a9:2e:c7:0c:67:af:71:1a:50:38:dc:39:19:10:8a:
1c:10:bb:fa:4f:1f:f1:f0:76:4a:ca:a8:6d:d4:ae:
f6:5a:90:02:7d:4c:04:74:e9:33:7a:a7:6a:fc:72:
57:79:c9:1d:2c:6f:e3:e0:ee:ba:20:84:6a:f7:75:
08:17:98:ad:84:61:ea:f9:c9:02:b1:0d:22:a0:07:
b1:bc:99:ea:99:e0:68:9e:74:ef:f0:56:57:7d:ff:
b0:5e:a6:19:f4:20:71:24:80:93:31:ba:3f:a3:83:
ea:35:42:43:9d:fe:ac:d9:65:b0:b9:a5:61:62:52:
4c:d2:db:7a:e3:78:e2:2b:25:32:a9:0e:dc:47:b2:
c1:27:f8:27:99:dc:d0:21:bd:c5:e3:22:dd:c6:b8:
de:f5:61:f8:af:ae:3d:86:45:b0:38:17:da:be:4a:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:55:CF:EB:5C:06:49:FF:A9:92:9D:15:9D:41:C9:74:C1:49:A1:3D
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/KlXP61wGSf-pkp0VnUHJdMFJoT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abf0::/44
2a0f:5707:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:97:c7:96:fe:e0:ff:dd:dc:f9:99:79:4c:81:68:c3:a4:46:
ac:15:77:4f:52:99:55:e5:72:d2:d1:a2:2f:17:be:8e:45:07:
12:30:73:10:80:aa:12:18:d0:2c:26:e4:a1:70:30:7d:b0:ce:
42:c5:d2:a1:49:ce:09:2e:c7:66:bf:3e:c2:fc:41:64:dc:28:
18:b3:50:0d:d8:cb:73:b2:fc:11:5d:3a:16:6f:ca:6f:b9:6f:
b5:8e:9a:f6:bc:3d:1d:3b:eb:71:43:ae:f3:bf:ea:bd:57:93:
7e:95:f4:a7:e7:36:1f:2d:11:15:ce:bd:36:0f:3b:9e:3f:cb:
ad:ba:f5:a0:b2:3f:83:3b:52:ee:f7:b4:bb:91:14:5b:6d:18:
c3:4a:15:73:8b:8f:f7:ea:b5:cd:01:b4:0c:01:58:6e:3f:63:
42:47:da:dd:98:9e:53:d9:90:9f:10:52:73:0b:b1:6c:75:12:
13:d6:9a:73:7c:36:51:75:8d:03:2c:28:b6:c6:44:d2:ef:29:
b3:fd:d6:51:96:4c:11:03:87:1b:43:f2:39:97:1e:cb:7b:ec:
dd:5b:fc:b1:7f:99:62:e6:5a:18:b2:5b:4c:80:2f:e6:ce:e4:
f6:b1:47:1a:fd:73:62:00:e8:07:b6:8f:8e:a4:a2:0a:33:65:
cc:82:69:ee
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZQma/TpqoxkARD8lUZ0Te7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTU1Y2ZlYjVjMDY0OWZmYTk5MjlkMTU5ZDQxYzk3NGMxNDlhMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1fSnEoCttQT2SqDCWI49aFfQJ7D
/P3Sti5WCfd+OQOxgp3LIEOwxZrEmaTmbovbLrbq6iH9Y65Lbc381y0xnkGlgvQ2
A92K8su6oSnk5lvkIX+3P6UN/DOpLscMZ69xGlA43DkZEIocELv6Tx/x8HZKyqht
1K72WpACfUwEdOkzeqdq/HJXeckdLG/j4O66IIRq93UIF5ithGHq+ckCsQ0ioAex
vJnqmeBonnTv8FZXff+wXqYZ9CBxJICTMbo/o4PqNUJDnf6s2WWwuaVhYlJM0tt6
43jiKyUyqQ7cR7LBJ/gnmdzQIb3F4yLdxrje9WH4r649hkWwOBfavkpD4wIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFCpVz+tcBkn/qZKdFZ1ByXTBSaE9MB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvS2xYUDYxd0dTZi1wa3AwVm5VSEpkTUZKb1QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKg9XB6vw
AwYAKg9XB7AwDQYJKoZIhvcNAQELBQADggEBAFyXx5b+4P/d3PmZeUyBaMOkRqwV
d09SmVXlctLRoi8Xvo5FBxIwcxCAqhIY0Cwm5KFwMH2wzkLF0qFJzgkux2a/PsL8
QWTcKBizUA3Yy3Oy/BFdOhZvym+5b7WOmva8PR0763FDrvO/6r1Xk36V9KfnNh8t
ERXOvTYPO54/y6269aCyP4M7Uu73tLuRFFttGMNKFXOLj/fqtc0BtAwBWG4/Y0JH
2t2YnlPZkJ8QUnMLsWx1EhPWmnN8NlF1jQMsKLbGRNLvKbP91lGWTBEDhxtD8jmX
Hst77N1b/LF/mWLmWhiyW0yAL+bO5PaxRxr9c2IA6Ae2j46kogozZcyCae4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:54 2025 by rpki-client