Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/xS0xd4twtayVXNjFhi99UyY_CB4.roa
File: xS0xd4twtayVXNjFhi99UyY_CB4.roa (raw, json)
Hash identifier: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=
Subject key identifier: C5:2D:31:77:8B:70:B5:AC:95:5C:D8:C5:86:2F:7D:53:26:3F:08:1E
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 0194258E67044817E9680053ADF683D64FA3
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/xS0xd4twtayVXNjFhi99UyY_CB4.roa
Signing time: Thu 02 Jan 2025 05:47:56 +0000
ROA not before: Thu 02 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208685
IP address blocks: 2a12:5343:1::/48 maxlen: 48
2a12:5343:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:67:04:48:17:e9:68:00:53:ad:f6:83:d6:4f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Jan 2 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c52d31778b70b5ac955cd8c5862f7d53263f081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:28:d8:4a:25:b6:08:ea:3a:b5:18:93:9d:
19:99:1b:93:81:00:36:9c:cd:14:f5:8c:bb:6f:24:
66:2e:09:3c:51:6e:0a:af:b7:eb:55:1c:0a:4f:36:
14:c6:d3:c3:a6:e4:c5:82:0a:ea:54:00:59:3f:79:
60:07:6b:ea:a7:a9:6a:40:ef:b7:30:73:58:62:ce:
66:57:d3:fa:3f:92:6a:9c:8c:0a:61:51:dc:3b:90:
df:70:54:44:f8:d1:d9:ca:01:2f:70:33:68:dd:3e:
31:27:e0:c0:da:13:1a:ec:b3:91:cd:3a:c4:f6:35:
a6:94:51:60:9d:4e:3c:38:d9:27:90:48:56:9b:bf:
66:fa:59:e6:16:04:d6:96:de:50:2a:1f:c0:a2:d2:
9e:bd:40:7d:a4:fe:c4:48:41:6c:a4:ec:d7:e4:70:
4d:2c:ca:dc:7f:ca:82:98:f2:8f:e8:14:ab:93:0e:
2c:f4:c4:11:7c:19:e1:f5:e5:bb:36:91:70:35:66:
52:cf:6d:21:b6:71:78:15:e4:d7:7c:73:1e:10:a7:
56:28:73:e6:97:02:6d:3b:db:57:96:e4:c2:74:9d:
a2:c4:12:5d:37:cb:c8:fa:0a:62:68:38:df:c1:b8:
02:92:70:34:53:f3:a8:7f:bb:0d:49:3b:11:88:89:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:31:77:8B:70:B5:AC:95:5C:D8:C5:86:2F:7D:53:26:3F:08:1E
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/xS0xd4twtayVXNjFhi99UyY_CB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5343:1::-2a12:5343:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:59:39:e1:a0:9a:cc:0a:8e:91:01:63:58:c8:36:0f:e1:b4:
77:ff:85:69:f4:e7:43:f6:08:ec:3d:20:78:01:76:e9:6b:45:
91:20:df:70:13:b6:fd:15:e2:19:5f:98:f4:01:20:51:af:8a:
10:b6:f3:a8:bc:15:2e:ed:89:b3:46:a1:d2:b4:42:30:30:e7:
2d:a5:f1:bd:24:8c:56:42:f9:62:31:90:e5:74:be:54:7f:9a:
8e:45:80:1b:c3:a0:c6:c9:5b:49:69:ec:0f:03:ad:9d:94:8f:
b6:1f:a0:55:00:b4:5f:33:78:88:09:5b:88:25:6a:dc:00:17:
e4:e3:01:83:a8:6e:f5:9f:60:17:97:f6:72:07:12:b5:92:6c:
a5:38:65:52:66:df:c2:b5:8f:57:df:f8:a0:b8:53:fb:88:b0:
47:3b:b9:2c:6c:d1:5a:99:8d:3c:2a:be:64:f5:41:e3:08:e8:
3b:0e:79:f6:0d:98:ab:da:48:4e:50:e7:a5:89:cc:27:03:4a:
43:73:5c:4b:fb:1d:26:03:c6:53:0f:96:0e:bc:65:87:45:58:
a5:f4:e8:fa:08:78:e5:6d:dc:9c:02:2c:58:a3:bf:9c:ba:9d:
4f:43:d1:d8:6f:0c:a6:82:6d:b8:32:6a:61:a0:cc:1d:52:ce:
df:27:60:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQljmcESBfpaABTrfaD1k+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjUwMTAyMDU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTJkMzE3NzhiNzBiNWFjOTU1Y2Q4YzU4NjJmN2Q1MzI2M2YwODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqoo2EoltgjqOrUYk50ZmRuTgQA2
nM0U9Yy7byRmLgk8UW4Kr7frVRwKTzYUxtPDpuTFggrqVABZP3lgB2vqp6lqQO+3
MHNYYs5mV9P6P5JqnIwKYVHcO5DfcFRE+NHZygEvcDNo3T4xJ+DA2hMa7LORzTrE
9jWmlFFgnU48ONknkEhWm79m+lnmFgTWlt5QKh/AotKevUB9pP7ESEFspOzX5HBN
LMrcf8qCmPKP6BSrkw4s9MQRfBnh9eW7NpFwNWZSz20htnF4FeTXfHMeEKdWKHPm
lwJtO9tXluTCdJ2ixBJdN8vI+gpiaDjfwbgCknA0U/Oof7sNSTsRiImhjQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMUtMXeLcLWslVzYxYYvfVMmPwgeMB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEveFMweGQ0dHd0YXlWWE5qRmhpOTlVeVlfQ0I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqElND
AAEDBwAqElNDAAIwDQYJKoZIhvcNAQELBQADggEBABJZOeGgmswKjpEBY1jINg/h
tHf/hWn050P2COw9IHgBdulrRZEg33ATtv0V4hlfmPQBIFGvihC286i8FS7tibNG
odK0QjAw5y2l8b0kjFZC+WIxkOV0vlR/mo5FgBvDoMbJW0lp7A8DrZ2Uj7YfoFUA
tF8zeIgJW4glatwAF+TjAYOobvWfYBeX9nIHErWSbKU4ZVJm38K1j1ff+KC4U/uI
sEc7uSxs0VqZjTwqvmT1QeMI6DsOefYNmKvaSE5Q56WJzCcDSkNzXEv7HSYDxlMP
lg68ZYdFWKX06PoIeOVt3JwCLFijv5y6nU9D0dhvDKaCbbgyamGgzB1Szt8nYHY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:24:12 2025 by rpki-client