Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa
File: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (raw, json)
Hash identifier: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=
Subject key identifier: D6:63:78:4D:35:6C:40:13:16:CF:48:DD:35:DC:C5:F6:26:BE:36:B9
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 019425FDCA96430319E672DFB2F08C5DF037
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208069
IP address blocks: 2001:67c:c38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ca:96:43:03:19:e6:72:df:b2:f0:8c:5d:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d663784d356c401316cf48dd35dcc5f626be36b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:90:18:1f:32:07:d5:89:84:89:93:e7:20:
60:f2:2b:c4:ee:fb:b6:86:7b:41:8a:bf:41:0c:92:
f4:89:46:5d:d1:19:8e:de:09:2c:a3:86:1a:a9:e5:
06:61:d6:09:60:6c:25:dd:60:81:33:63:89:71:59:
b6:f6:81:0f:52:b9:56:5c:28:a8:d8:66:d7:75:c1:
62:d8:90:40:bc:cb:51:75:46:ef:cd:95:af:cd:2e:
d9:57:91:a4:33:ca:85:70:de:d1:1d:cf:82:91:73:
fc:9e:52:c1:9b:7e:c4:c5:54:22:c3:8a:a7:03:24:
e5:37:67:19:9b:e2:e9:c9:96:33:e7:51:54:31:91:
31:a6:e1:01:0d:02:22:f7:71:c2:94:50:3b:d6:c9:
8a:c9:db:04:1c:b9:75:b4:a0:d9:4b:f9:19:fc:24:
ba:f7:4b:97:6d:10:95:c4:60:a0:ed:a3:ea:63:da:
84:74:98:de:b3:e7:fa:82:6e:8e:f2:fa:b9:37:45:
b8:7c:94:4c:07:8b:3e:48:2a:c4:e0:07:f3:9e:f9:
83:98:c1:da:d5:59:1d:bd:88:3e:2d:c8:4e:1c:a8:
d0:fd:45:bf:ec:b4:8c:d5:f1:7a:e9:6c:a4:ed:81:
cc:b9:5a:47:e9:bf:db:12:fa:c8:6e:c4:a1:2a:6b:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:78:4D:35:6C:40:13:16:CF:48:DD:35:DC:C5:F6:26:BE:36:B9
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c38::/48
Signature Algorithm: sha256WithRSAEncryption
33:f6:b3:4c:14:b3:ba:90:83:7c:41:b8:18:27:88:90:41:ec:
c9:6c:69:68:82:be:40:7c:1f:83:c8:ae:d6:c3:03:b0:dd:a4:
ec:2c:2b:1a:e3:fc:1b:c8:a8:ff:23:d3:6b:ad:d0:73:a8:b6:
a6:09:13:b9:f9:c9:0c:1e:1f:27:e6:af:45:bd:bb:12:39:dc:
70:53:6d:67:c7:f4:f8:45:16:97:79:f7:60:4e:28:9a:81:c8:
e9:01:45:c8:9a:a1:65:e1:f9:eb:d1:5e:f2:90:7f:0c:22:08:
76:e4:a1:cb:24:5f:70:24:ae:8e:ee:38:8f:ca:51:72:e3:62:
b0:58:34:92:24:e4:80:63:91:3c:b3:3a:ff:b1:5b:64:2b:83:
d8:fe:d2:8b:13:34:db:d0:3b:df:d3:a3:97:b2:57:f8:9b:03:
90:17:21:e5:6d:e5:04:75:1c:22:f5:12:88:ce:c1:56:f2:34:
4b:74:9c:7a:9e:70:16:09:cd:29:7e:54:32:56:86:2b:ba:93:
8b:99:8c:9d:2f:d5:da:82:cc:e1:90:8b:7f:5e:3d:78:11:1e:
f1:e7:22:eb:5a:88:f7:01:11:b1:5e:c2:5d:8f:c1:95:93:72:
3e:1f:af:1c:2c:7a:ef:82:cf:87:32:06:09:8f:6a:63:b5:73:
83:32:6c:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/cqWQwMZ5nLfsvCMXfA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTMxYjRhZWNjNjViMzEyNWE3YjQ3YWM5MDkwOGIwYTUx
Nzg0ODMwHhcNMjUwMTAyMDc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjYzNzg0ZDM1NmM0MDEzMTZjZjQ4ZGQzNWRjYzVmNjI2YmUzNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnamQGB8yB9WJhImT5yBg8ivE7vu2
hntBir9BDJL0iUZd0RmO3gkso4YaqeUGYdYJYGwl3WCBM2OJcVm29oEPUrlWXCio
2GbXdcFi2JBAvMtRdUbvzZWvzS7ZV5GkM8qFcN7RHc+CkXP8nlLBm37ExVQiw4qn
AyTlN2cZm+LpyZYz51FUMZExpuEBDQIi93HClFA71smKydsEHLl1tKDZS/kZ/CS6
90uXbRCVxGCg7aPqY9qEdJjes+f6gm6O8vq5N0W4fJRMB4s+SCrE4AfznvmDmMHa
1VkdvYg+LchOHKjQ/UW/7LSM1fF66Wyk7YHMuVpH6b/bEvrIbsShKms4XQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNZjeE01bEATFs9I3TXcxfYmvja5MB8GA1UdIwQY
MBaAFFHjG0rsxlsxJae0eskJCLClF4SDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEt
ZmQ0YjJhMmFlZmE1LzEvMW1ONFRUVnNRQk1XejBqZE5kekY5aWEtTnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEtZmQ0YjJhMmFlZmE1
LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAw4
MA0GCSqGSIb3DQEBCwUAA4IBAQAz9rNMFLO6kIN8QbgYJ4iQQezJbGlogr5AfB+D
yK7WwwOw3aTsLCsa4/wbyKj/I9NrrdBzqLamCRO5+ckMHh8n5q9FvbsSOdxwU21n
x/T4RRaXefdgTiiagcjpAUXImqFl4fnr0V7ykH8MIgh25KHLJF9wJK6O7jiPylFy
42KwWDSSJOSAY5E8szr/sVtkK4PY/tKLEzTb0Dvf06OXslf4mwOQFyHlbeUEdRwi
9RKIzsFW8jRLdJx6nnAWCc0pflQyVoYrupOLmYydL9XagszhkIt/Xj14ER7x5yLr
Woj3ARGxXsJdj8GVk3I+H68cLHrvgs+HMgYJj2pjtXODMmwy
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:59 2025 by rpki-client