Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lzFclAiK-AKgH976Yl_uXg9r5wM.roa
File: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (raw, json)
Hash identifier: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=
Subject key identifier: 97:31:5C:94:08:8A:F8:02:A0:1F:DE:FA:62:5F:EE:5E:0F:6B:E7:03
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D94D9BEB6163A4A13667CCEB682273
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lzFclAiK-AKgH976Yl_uXg9r5wM.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51783
IP address blocks: 2a04:ac00:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4d:9b:eb:61:63:a4:a1:36:67:cc:eb:68:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97315c94088af802a01fdefa625fee5e0f6be703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:fd:5f:22:04:9b:a4:db:97:7e:52:60:82:
b6:35:14:3b:52:9a:c5:40:0d:c4:b7:b7:ed:91:ef:
f0:a8:53:38:43:cc:48:cd:f8:25:66:2a:1c:32:f2:
03:e8:74:ec:50:cf:d4:c2:63:68:a4:83:36:86:b4:
5f:c4:bf:27:89:8a:8a:29:19:21:e7:bd:14:ce:fb:
b5:49:69:49:12:c5:aa:08:92:c2:6b:32:4f:f4:ea:
80:8b:07:57:1e:29:ee:a6:19:48:ff:58:36:ec:4f:
1a:9a:e7:7b:f7:13:ec:a2:87:f3:3d:05:9f:14:f9:
12:55:58:f1:2f:a9:02:ed:cd:1f:5f:fe:51:03:71:
87:4a:5b:a3:ac:8b:51:0f:db:a3:35:fb:8d:4a:56:
32:f3:c2:ae:b1:10:56:46:4b:45:3a:9d:e8:44:4a:
96:25:1e:e1:21:85:5d:3b:85:46:e5:b9:14:f1:b8:
c0:55:a6:95:02:60:10:f7:2a:c6:ae:59:cf:8a:4c:
7d:43:87:d8:1b:58:c3:8a:d3:9d:47:19:f3:ee:bc:
5b:d4:42:f4:77:c9:c6:37:28:53:97:ae:c9:46:92:
9a:89:fd:a0:1c:71:ee:f1:fa:2e:e4:3b:e8:ac:66:
e0:ea:f2:c7:82:65:55:a3:7f:12:b6:4b:d8:d9:83:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:5C:94:08:8A:F8:02:A0:1F:DE:FA:62:5F:EE:5E:0F:6B:E7:03
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lzFclAiK-AKgH976Yl_uXg9r5wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:3::/48
Signature Algorithm: sha256WithRSAEncryption
a7:8c:2b:62:bf:38:06:0f:07:6a:5f:19:f5:c7:07:40:07:85:
4d:df:22:a9:1b:ca:03:d3:2b:e4:0e:65:55:0d:7c:00:b8:5f:
cd:05:4b:11:d6:84:a0:5c:06:5d:b9:c3:d7:a5:44:61:68:0d:
31:9e:c2:df:ee:bb:76:89:51:a6:4e:61:29:df:5f:b5:b5:62:
be:ef:66:2e:2f:5f:54:be:60:0f:1f:81:16:02:51:38:eb:7f:
3d:54:d8:b0:86:d4:5f:98:ca:92:21:7a:fd:15:d2:31:6e:f6:
df:40:95:7b:c4:d2:0b:ee:51:ea:47:9f:43:1f:f4:3e:20:ab:
22:02:9d:f0:53:24:fb:b0:08:60:2c:aa:4a:c5:e3:45:de:9a:
e2:10:25:35:b0:70:5d:34:a9:d3:37:60:b2:be:28:ec:f6:6e:
31:d3:83:52:fe:90:5c:a1:45:fc:95:e4:70:ae:c4:5d:dd:a7:
35:f0:8c:23:90:c7:36:57:51:40:8d:bf:67:14:11:fd:01:04:
95:a6:c8:88:39:a8:13:b3:0f:e6:6c:93:26:22:c9:5e:3c:ae:
e9:89:58:01:09:b2:a6:1e:79:5e:3f:df:ca:61:8c:c3:29:a6:
e7:fe:a2:dd:9d:6f:c8:b0:2e:42:73:75:66:0d:d6:23:01:57:
a1:d4:22:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2U2b62FjpKE2Z8zraCJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjUwMTAyMTE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzMxNWM5NDA4OGFmODAyYTAxZmRlZmE2MjVmZWU1ZTBmNmJlNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F/9XyIEm6Tbl35SYIK2NRQ7UprF
QA3Et7ftke/wqFM4Q8xIzfglZiocMvID6HTsUM/UwmNopIM2hrRfxL8niYqKKRkh
570Uzvu1SWlJEsWqCJLCazJP9OqAiwdXHinuphlI/1g27E8amud79xPsoofzPQWf
FPkSVVjxL6kC7c0fX/5RA3GHSlujrItRD9ujNfuNSlYy88KusRBWRktFOp3oREqW
JR7hIYVdO4VG5bkU8bjAVaaVAmAQ9yrGrlnPikx9Q4fYG1jDitOdRxnz7rxb1EL0
d8nGNyhTl67JRpKaif2gHHHu8fou5DvorGbg6vLHgmVVo38StkvY2YOChwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJcxXJQIivgCoB/e+mJf7l4Pa+cDMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvbHpGY2xBaUstQUtnSDk3NllsX3VYZzlyNXdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSsAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQCnjCtivzgGDwdqXxn1xwdAB4VN3yKpG8oD0yvk
DmVVDXwAuF/NBUsR1oSgXAZducPXpURhaA0xnsLf7rt2iVGmTmEp31+1tWK+72Yu
L19UvmAPH4EWAlE46389VNiwhtRfmMqSIXr9FdIxbvbfQJV7xNIL7lHqR59DH/Q+
IKsiAp3wUyT7sAhgLKpKxeNF3priECU1sHBdNKnTN2Cyvijs9m4x04NS/pBcoUX8
leRwrsRd3ac18IwjkMc2V1FAjb9nFBH9AQSVpsiIOagTsw/mbJMmIslePK7piVgB
CbKmHnleP9/KYYzDKabn/qLdnW/IsC5Cc3VmDdYjAVeh1CJn
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:35 2025 by rpki-client