Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EoDsWIUI_x0BEOlxR3EaAfRApOM.roa
File: EoDsWIUI_x0BEOlxR3EaAfRApOM.roa (raw, json)
Hash identifier: UdfT+0mZeQTANEoQdnRGBzlefHj23u0wPir34UQNJak=
Subject key identifier: 12:80:EC:58:85:08:FF:1D:01:10:E9:71:47:71:1A:01:F4:40:A4:E3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24A68E9A96CEBF946C881DFB0F0CD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EoDsWIUI_x0BEOlxR3EaAfRApOM.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209562
IP address blocks: 2a09:13c0::/48 maxlen: 48
2a09:4f40::/48 maxlen: 48
2a09:4fc0::/48 maxlen: 48
2a09:5040::/48 maxlen: 48
2a09:95c0::/48 maxlen: 48
2a09:9ac0::/48 maxlen: 48
2a09:9b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4a:68:e9:a9:6c:eb:f9:46:c8:81:df:b0:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1280ec588508ff1d0110e97147711a01f440a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:83:6d:e1:3f:18:3b:20:ea:33:cb:e6:04:
6a:96:d3:82:21:e5:8e:af:4b:37:a0:48:d2:59:bc:
d6:37:f9:23:a3:97:7c:31:5d:b9:73:5f:e3:15:aa:
38:91:44:40:31:d1:89:2e:e5:c3:06:c9:36:f3:9e:
a8:38:7b:72:98:a2:74:fa:82:a1:aa:85:01:5c:e7:
57:d2:58:11:0f:4e:02:de:8f:be:cb:a4:0c:e8:ae:
97:31:f1:fb:e4:c9:dd:a6:ff:a8:5a:a7:62:6a:22:
b7:db:ac:8d:23:6e:c1:19:2a:a6:9a:60:d5:7c:78:
39:39:ba:ea:42:6b:61:53:3f:80:78:c8:bf:95:7d:
df:74:f2:fa:45:91:f8:3e:e1:4a:f6:33:38:cd:8d:
ab:67:66:ad:5f:2c:9a:fa:88:4c:55:6b:ac:b4:c3:
67:df:cd:aa:ce:7f:43:27:73:ff:66:7a:18:d3:1d:
08:aa:f3:11:c2:e2:10:ef:89:0b:f3:2f:29:b2:aa:
67:83:e1:a3:78:e0:d0:c1:42:24:6e:9f:29:25:a4:
36:9a:f0:a5:06:59:1c:6f:a5:68:5b:a8:ea:5c:d9:
e8:c5:4f:7a:b8:cf:ed:cd:00:06:4f:80:ab:68:a0:
09:44:aa:76:eb:dd:2c:30:35:1d:bf:15:ce:a7:c8:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:EC:58:85:08:FF:1D:01:10:E9:71:47:71:1A:01:F4:40:A4:E3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EoDsWIUI_x0BEOlxR3EaAfRApOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:13c0::/48
2a09:4f40::/48
2a09:4fc0::/48
2a09:5040::/48
2a09:95c0::/48
2a09:9ac0::/48
2a09:9b40::/48
Signature Algorithm: sha256WithRSAEncryption
c1:9f:a4:83:66:0c:a9:fc:e2:0a:a9:c7:eb:32:30:6c:00:f4:
85:7c:0b:c2:8b:1a:43:00:d9:69:ba:d1:dc:85:41:a7:73:e1:
55:33:da:52:1a:a2:43:c3:ac:2d:79:61:1b:af:39:ac:61:10:
41:63:07:7a:d8:99:ca:9b:a3:ca:4c:79:77:fb:bb:1d:63:48:
9e:17:a6:26:e2:8c:a4:15:28:83:5c:e3:92:7b:44:2d:a1:d0:
4d:c6:69:92:8c:d6:d8:f1:a8:99:d7:27:8b:88:30:c1:ce:6e:
71:b0:ae:50:24:3f:cb:15:90:61:90:1a:61:49:03:db:34:05:
fb:52:f0:a0:99:f4:29:07:ec:b1:f1:31:56:23:a3:ff:a3:6c:
b3:2f:30:02:35:40:77:b1:31:6f:b9:35:e7:e5:ed:4a:16:ff:
18:f7:d2:f4:5b:bc:7f:73:58:81:66:c9:e8:18:0e:90:be:a5:
85:91:57:f8:86:96:62:40:54:a4:2e:95:ce:bb:30:20:d0:94:
14:db:60:76:16:0a:f2:c5:43:cb:a7:34:87:4e:9e:a5:75:75:
30:b4:f5:04:2c:87:7d:5c:f6:0c:60:13:69:60:60:68:aa:fc:
e7:1f:48:7f:d0:89:75:2a:fd:41:22:d8:8c:d4:f9:25:9c:4f:
2e:f7:53:31
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQhskpo6als6/lGyIHfsPDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjgwZWM1ODg1MDhmZjFkMDExMGU5NzE0NzcxMWEwMWY0NDBhNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOyDbeE/GDsg6jPL5gRqltOCIeWO
r0s3oEjSWbzWN/kjo5d8MV25c1/jFao4kURAMdGJLuXDBsk2856oOHtymKJ0+oKh
qoUBXOdX0lgRD04C3o++y6QM6K6XMfH75Mndpv+oWqdiaiK326yNI27BGSqmmmDV
fHg5ObrqQmthUz+AeMi/lX3fdPL6RZH4PuFK9jM4zY2rZ2atXyya+ohMVWustMNn
382qzn9DJ3P/ZnoY0x0IqvMRwuIQ74kL8y8psqpng+GjeODQwUIkbp8pJaQ2mvCl
Blkcb6VoW6jqXNnoxU96uM/tzQAGT4CraKAJRKp2690sMDUdvxXOp8i01QIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFBKA7FiFCP8dARDpcUdxGgH0QKTjMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRW9Ec1dJVUlfeDBCRU9seFIzRWFBZlJBcE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwcAKgkTwAAA
AwcAKglPQAAAAwcAKglPwAAAAwcAKglQQAAAAwcAKgmVwAAAAwcAKgmawAAAAwcA
KgmbQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDBn6SDZgyp/OIKqcfrMjBsAPSFfAvC
ixpDANlputHchUGnc+FVM9pSGqJDw6wteWEbrzmsYRBBYwd62JnKm6PKTHl3+7sd
Y0ieF6Ym4oykFSiDXOOSe0QtodBNxmmSjNbY8aiZ1yeLiDDBzm5xsK5QJD/LFZBh
kBphSQPbNAX7UvCgmfQpB+yx8TFWI6P/o2yzLzACNUB3sTFvuTXn5e1KFv8Y99L0
W7x/c1iBZsnoGA6QvqWFkVf4hpZiQFSkLpXOuzAg0JQU22B2FgryxUPLpzSHTp6l
dXUwtPUELId9XPYMYBNpYGBoqvznH0h/0Il1Kv1BItiM1PklnE8u91Mx
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:17 2025 by rpki-client