Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa
File: R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa (raw, json)
Hash identifier: 0AIz8WCbcmrBhbx3W2meQYXWJcwFyXjOFoI5n5QWbtU=
Subject key identifier: 47:77:B2:C4:2E:4C:1E:03:FD:0D:92:23:AB:74:D0:FD:A9:79:43:9C
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF5AA516F048DA6AA7B760C2B21B0
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213388
IP address blocks: 2a0f:5707:fff7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:aa:51:6f:04:8d:a6:aa:7b:76:0c:2b:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4777b2c42e4c1e03fd0d9223ab74d0fda979439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6f:cb:7a:d8:f5:26:84:d6:52:36:38:c1:45:
43:20:a1:5a:c0:45:5d:f0:2a:8c:03:e4:1e:f3:fd:
69:62:e3:56:58:01:5c:ff:d5:39:3b:e4:43:f7:46:
01:21:39:d2:80:e4:2f:14:cf:90:13:00:9e:71:20:
e2:8e:dd:6a:e9:ea:4c:06:32:0f:77:a8:1b:b5:93:
6d:b9:2f:87:fe:7c:7c:c6:3e:75:2a:de:b1:ba:06:
4c:85:e1:88:23:0b:71:98:0e:b7:c9:8b:aa:d1:bd:
1e:29:06:43:e0:96:e6:10:72:4f:ea:26:27:56:78:
a9:e4:f0:9d:d4:89:ee:50:79:83:30:0e:db:33:5f:
02:16:f8:66:73:5f:b7:65:46:39:e1:9d:47:94:5b:
47:44:80:06:3e:d2:9e:f1:76:f1:02:bb:bc:dc:78:
b6:8b:06:1d:e6:4a:43:22:5d:45:f0:31:3f:cb:e8:
c2:31:13:fe:f3:aa:49:c3:02:63:0a:a0:38:39:66:
f3:14:10:4b:6d:7e:2c:c1:2d:0e:15:d4:c5:24:90:
a2:04:16:ec:18:bb:54:9a:ea:1b:26:2e:be:e2:10:
c4:24:ff:00:fd:1e:35:68:6d:0f:3e:bc:39:3d:6e:
06:81:6b:8a:7c:6c:8d:af:a4:4c:79:ae:d1:28:12:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:B2:C4:2E:4C:1E:03:FD:0D:92:23:AB:74:D0:FD:A9:79:43:9C
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
23:04:6f:92:20:24:4b:f3:52:5e:8b:40:ab:36:dc:0b:12:83:
04:e5:5e:f1:98:e0:d4:36:64:10:41:c9:7e:fd:7c:ac:5a:9b:
94:d1:c9:14:ce:e5:d1:13:d5:9b:f5:65:2b:b5:64:d9:66:e7:
37:45:3f:3b:07:7b:cc:33:26:2d:79:3c:7e:b8:0e:e7:da:fd:
e5:ac:4d:a1:1f:06:a9:07:e4:f2:e0:15:3a:f8:f6:c1:af:88:
91:42:90:63:c3:60:c9:c4:54:97:d4:2e:34:e7:0e:2e:9e:38:
59:45:49:13:85:be:fe:c8:a9:05:db:55:bf:ae:77:7d:1d:c9:
45:9a:bb:e1:d7:62:06:10:ce:f0:2a:66:3a:2c:37:31:4e:42:
42:de:e2:c7:30:68:a2:5a:ee:40:98:ab:df:40:24:d7:db:48:
47:87:3c:56:96:72:f6:30:3a:7e:22:f9:b9:f3:f3:10:7b:88:
71:e5:df:50:27:c6:9b:84:d1:60:16:97:1e:83:0f:57:b0:34:
3e:c6:58:5d:c2:b9:11:de:e6:94:c1:25:0c:df:c8:6d:90:16:
5e:b0:7f:93:5b:75:6b:e7:1c:2e:d5:ce:2f:36:6e:09:f2:df:
9a:19:5b:03:64:89:39:97:a0:fc:c6:16:f6:38:77:30:28:0f:
6f:f2:4c:59
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma/WqUW8Ejaaqe3YMKyGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzc3YjJjNDJlNGMxZTAzZmQwZDkyMjNhYjc0ZDBmZGE5Nzk0MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2/Letj1JoTWUjY4wUVDIKFawEVd
8CqMA+Qe8/1pYuNWWAFc/9U5O+RD90YBITnSgOQvFM+QEwCecSDijt1q6epMBjIP
d6gbtZNtuS+H/nx8xj51Kt6xugZMheGIIwtxmA63yYuq0b0eKQZD4JbmEHJP6iYn
Vnip5PCd1InuUHmDMA7bM18CFvhmc1+3ZUY54Z1HlFtHRIAGPtKe8XbxAru83Hi2
iwYd5kpDIl1F8DE/y+jCMRP+86pJwwJjCqA4OWbzFBBLbX4swS0OFdTFJJCiBBbs
GLtUmuobJi6+4hDEJP8A/R41aG0PPrw5PW4GgWuKfGyNr6RMea7RKBJnjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEd3ssQuTB4D/Q2SI6t00P2peUOcMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvUjNleXhDNU1IZ1A5RFpJanEzVFFfYWw1UTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB//3
MA0GCSqGSIb3DQEBCwUAA4IBAQAjBG+SICRL81Jei0CrNtwLEoME5V7xmODUNmQQ
Qcl+/XysWpuU0ckUzuXRE9Wb9WUrtWTZZuc3RT87B3vMMyYteTx+uA7n2v3lrE2h
HwapB+Ty4BU6+PbBr4iRQpBjw2DJxFSX1C405w4unjhZRUkThb7+yKkF21W/rnd9
HclFmrvh12IGEM7wKmY6LDcxTkJC3uLHMGiiWu5AmKvfQCTX20hHhzxWlnL2MDp+
Ivm58/MQe4hx5d9QJ8abhNFgFpcegw9XsDQ+xlhdwrkR3uaUwSUM38htkBZesH+T
W3Vr5xwu1c4vNm4J8t+aGVsDZIk5l6D8xhb2OHcwKA9v8kxZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:57 2025 by rpki-client