Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/4SuUam48QV32Y3-hcqU7CITIK-M.roa
File: 4SuUam48QV32Y3-hcqU7CITIK-M.roa (raw, json)
Hash identifier: 5CZbqGchyrdSj3yaccZ7m3l8GutbE6NVoSZu4GIXN+Q=
Subject key identifier: E1:2B:94:6A:6E:3C:41:5D:F6:63:7F:A1:72:A5:3B:08:84:C8:2B:E3
Certificate issuer: /CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Certificate serial: A472BB
Authority key identifier: 2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/4SuUam48QV32Y3-hcqU7CITIK-M.roa
Signing time: Sat 01 Jan 2022 01:57:28 +0000
ROA not before: Sat 01 Jan 2022 01:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 2a11:6e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10777275 (0xa472bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Validity
Not Before: Jan 1 01:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e12b946a6e3c415df6637fa172a53b0884c82be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:2b:ef:08:63:d5:2e:a4:a7:68:39:bb:53:
3f:90:1f:28:2d:28:47:00:3b:0f:d3:a6:84:94:b2:
42:5c:c4:7f:bc:59:d8:87:96:a5:ba:dd:a5:6c:25:
1a:8a:1f:7c:31:d2:6d:4a:bf:cc:f7:65:67:99:4c:
21:39:b3:c7:01:2b:af:58:c2:94:d1:48:35:42:4a:
68:9d:84:eb:ba:6c:25:23:1f:aa:e6:8d:aa:8b:84:
07:84:10:91:10:97:b8:1d:95:22:55:26:e4:42:aa:
cd:f0:fb:7f:09:00:94:d7:73:2f:8a:80:d9:ac:3f:
b3:21:17:c5:f2:f3:e4:40:2c:eb:a2:27:b7:96:de:
28:7b:f5:fa:09:7a:c8:e6:d2:25:4e:08:a9:2a:11:
e8:bc:c0:0c:e4:b2:02:c8:bd:68:ef:c8:33:54:86:
63:92:96:cf:bd:50:78:98:fb:38:a7:5b:23:b9:30:
c8:98:74:3f:6b:d1:f9:74:bc:f2:a8:ca:b9:db:e3:
e8:fb:40:7f:4f:91:d5:c1:88:27:06:62:0c:38:4d:
a9:71:4b:0e:d1:ff:ab:91:50:03:b8:40:3a:ea:e4:
28:a6:ba:56:ab:94:37:51:68:3e:58:00:cd:80:22:
5d:a0:ff:a3:eb:d2:c6:f4:d0:ed:54:a8:df:f6:c2:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:94:6A:6E:3C:41:5D:F6:63:7F:A1:72:A5:3B:08:84:C8:2B:E3
X509v3 Authority Key Identifier:
keyid:2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/4SuUam48QV32Y3-hcqU7CITIK-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/LCVrHUq7ITldlyY6X6jTpVOR22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:e6:99:a5:d0:67:2e:eb:35:14:23:61:b0:82:2c:6f:73:4c:
8b:2e:c9:11:3e:eb:e9:f8:e6:2b:87:d1:4d:1a:7a:0f:3d:17:
9e:e4:59:6c:03:24:9d:76:95:d3:d7:fe:ad:e5:a6:86:d5:73:
ee:05:b3:39:3d:5a:14:fe:e2:c9:2d:6a:01:c9:2f:ce:81:8c:
d4:22:73:a6:73:31:28:93:4e:89:a1:31:f0:69:d0:b4:bb:54:
0c:75:0e:1a:6c:75:cd:d0:9e:6c:a8:5a:4c:04:2c:0f:17:e3:
3a:d8:0b:7b:9c:06:69:6f:e1:b9:12:af:42:24:eb:5b:07:58:
4f:6b:f2:50:31:bb:bd:3e:7e:91:13:58:7c:d0:e9:68:b6:56:
31:f7:10:2d:bc:45:7b:fe:c1:02:96:db:86:e6:48:35:42:32:
a1:04:69:83:11:a0:bb:5c:5a:ab:f9:68:00:85:fa:f2:0b:df:
55:4d:a6:e7:7e:c1:b7:47:16:a6:aa:4d:44:fe:5a:93:97:53:
ca:e7:dd:72:c8:52:18:ac:4f:66:6c:e8:fd:27:5b:3d:7b:69:
6f:1a:4c:78:5e:12:c8:0e:9f:72:b0:8b:db:8a:86:2b:b8:c4:
92:74:56:38:9a:ed:a6:c4:e9:40:b1:8b:57:a9:ce:b0:6b:1b:
76:31:09:01
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAKRyuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YzI1NmIxZDRhYmIyMTM5NWQ5NzI2M2E1ZmE4ZDNhNTUzOTFkYjYxMB4XDTIyMDEw
MTAxNTcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTEyYjk0NmE2ZTNj
NDE1ZGY2NjM3ZmExNzJhNTNiMDg4NGM4MmJlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVUK+8IY9UupKdoObtTP5AfKC0oRwA7D9OmhJSyQlzEf7xZ
2IeWpbrdpWwlGooffDHSbUq/zPdlZ5lMITmzxwErr1jClNFINUJKaJ2E67psJSMf
quaNqouEB4QQkRCXuB2VIlUm5EKqzfD7fwkAlNdzL4qA2aw/syEXxfLz5EAs66In
t5beKHv1+gl6yObSJU4IqSoR6LzADOSyAsi9aO/IM1SGY5KWz71QeJj7OKdbI7kw
yJh0P2vR+XS88qjKudvj6PtAf0+R1cGIJwZiDDhNqXFLDtH/q5FQA7hAOurkKKa6
VquUN1FoPlgAzYAiXaD/o+vSxvTQ7VSo3/bC+GUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBThK5RqbjxBXfZjf6FypTsIhMgr4zAfBgNVHSMEGDAWgBQsJWsdSrshOV2X
JjpfqNOlU5HbYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xDVnJIVXE3SVRsZGx5WTZYNmpUcFZPUjIyRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvZjE0ZTc2LWNhY2YtNDVjZS04MDgwLTJjMjkwNWMzYzgzZi8x
LzRTdVVhbTQ4UVYzMlkzLWhjcVU3Q0lUSUstTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
ZjE0ZTc2LWNhY2YtNDVjZS04MDgwLTJjMjkwNWMzYzgzZi8xL0xDVnJIVXE3SVRs
ZGx5WTZYNmpUcFZPUjIyRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoRbkAwDQYJKoZIhvcNAQELBQAD
ggEBAMPmmaXQZy7rNRQjYbCCLG9zTIsuyRE+6+n45iuH0U0aeg89F57kWWwDJJ12
ldPX/q3lpobVc+4Fszk9WhT+4sktagHJL86BjNQic6ZzMSiTTomhMfBp0LS7VAx1
Dhpsdc3QnmyoWkwELA8X4zrYC3ucBmlv4bkSr0Ik61sHWE9r8lAxu70+fpETWHzQ
6Wi2VjH3EC28RXv+wQKW24bmSDVCMqEEaYMRoLtcWqv5aACF+vIL31VNpud+wbdH
FqaqTUT+WpOXU8rn3XLIUhisT2Zs6P0nWz17aW8aTHheEsgOn3Kwi9uKhiu4xJJ0
Vjia7abE6UCxi1epzrBrG3YxCQE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:50 2025 by rpki-client