Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T8EstHxRACszOYyO0KBgonZs1jY.roa
File: T8EstHxRACszOYyO0KBgonZs1jY.roa (raw, json)
Hash identifier: JUS60/dX23k1BQVb3BQNKaZsAMww7mB+C3sP9KZS/ME=
Subject key identifier: 4F:C1:2C:B4:7C:51:00:2B:33:39:8C:8E:D0:A0:60:A2:76:6C:D6:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195A5564857E64AE6F0E174F3D2CF015AAA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T8EstHxRACszOYyO0KBgonZs1jY.roa
Signing time: Mon 17 Mar 2025 18:20:49 +0000
ROA not before: Mon 17 Mar 2025 18:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27176
IP address blocks: 2a0a:2d06:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:56:48:57:e6:4a:e6:f0:e1:74:f3:d2:cf:01:5a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 17 18:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc12cb47c51002b33398c8ed0a060a2766cd636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:91:98:98:18:eb:0c:7a:a5:f2:6e:81:f7:
e6:79:f8:02:4f:b9:e6:a3:67:ae:9d:cd:51:fa:36:
9d:bf:f9:f4:0c:9d:e0:cf:69:57:76:d2:f2:fe:9f:
85:5d:0c:0e:9a:e2:aa:9b:b8:1f:8a:0c:68:e5:7a:
ba:8a:15:2e:c1:7d:95:6f:94:a4:4a:49:a7:d0:41:
9f:eb:72:d8:7e:5b:0f:e3:84:71:b0:3b:9b:dd:6e:
13:04:9b:6b:8b:18:5c:10:6d:f6:f2:78:cd:ac:e8:
ed:19:11:e2:89:3e:8c:f5:e0:14:51:9b:56:03:7a:
e4:e4:3b:28:09:39:2e:0e:78:20:4d:aa:f4:89:4e:
43:69:e8:5f:a5:0b:5f:b4:7e:38:bc:03:fa:fe:dd:
e6:d9:54:b4:0d:16:ae:eb:fe:d7:71:57:73:07:be:
ac:1e:49:d5:0c:b1:59:a9:6a:f9:4c:a4:86:5e:88:
aa:e9:f2:2d:81:38:12:98:b0:b0:d7:9b:c2:5f:11:
aa:8c:83:e5:86:da:95:98:53:e6:5e:b5:07:f5:13:
5b:e7:e8:4c:a5:24:6f:be:09:14:6d:79:7c:cc:6a:
52:e8:c0:81:a7:64:aa:12:74:0d:a1:bd:e6:79:82:
4c:de:1b:54:6c:22:a9:69:15:0a:d0:e6:5a:d4:d1:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:2C:B4:7C:51:00:2B:33:39:8C:8E:D0:A0:60:A2:76:6C:D6:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T8EstHxRACszOYyO0KBgonZs1jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:22::/48
Signature Algorithm: sha256WithRSAEncryption
40:ce:87:61:ce:04:25:c7:af:f5:dd:3e:98:e0:dc:e5:ec:2f:
08:10:3e:78:16:5d:ea:00:7b:f8:cf:a5:0e:39:8f:8e:60:82:
c8:95:3b:33:e7:1e:c5:74:0c:f4:2c:7f:30:0a:dc:81:f0:e5:
7c:9c:65:35:86:8c:2f:47:93:d5:ba:36:1f:41:0b:90:de:8a:
1b:c6:a0:00:5f:b5:38:10:28:44:02:ea:de:1e:34:20:ee:e6:
25:d1:aa:68:55:fa:89:d2:fa:84:2f:9b:03:4d:de:bb:f2:ed:
d2:3e:f5:7b:48:0b:00:f1:28:e9:12:d2:4f:75:7e:5a:7b:56:
2b:06:1a:b3:09:ae:67:03:d8:4f:db:19:65:5c:a3:5d:c1:fa:
b9:1e:d9:94:be:4f:dd:fa:19:1a:3f:82:dc:3b:8f:d6:6d:42:
4f:40:d2:1a:55:b9:4c:ca:32:91:79:1b:7c:25:12:7f:ad:93:
a1:b2:e5:f8:0b:3d:25:7b:ec:a4:67:85:87:88:f3:1b:30:96:
ad:a5:6f:1b:3b:39:e6:47:c4:a5:c3:1d:1c:ed:7d:2b:9c:58:
aa:dd:58:ad:5f:2c:e2:b8:43:67:68:33:b6:02:8f:4f:3d:0c:
19:ed:90:f3:ad:e7:e3:05:f1:60:cf:39:47:4a:45:30:4a:64:
1f:c6:23:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZWlVkhX5krm8OF089LPAVqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE3MTgyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmMxMmNiNDdjNTEwMDJiMzMzOThjOGVkMGEwNjBhMjc2NmNkNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd6RmJgY6wx6pfJugffmefgCT7nm
o2eunc1R+jadv/n0DJ3gz2lXdtLy/p+FXQwOmuKqm7gfigxo5Xq6ihUuwX2Vb5Sk
Skmn0EGf63LYflsP44RxsDub3W4TBJtrixhcEG328njNrOjtGRHiiT6M9eAUUZtW
A3rk5DsoCTkuDnggTar0iU5DaehfpQtftH44vAP6/t3m2VS0DRau6/7XcVdzB76s
HknVDLFZqWr5TKSGXoiq6fItgTgSmLCw15vCXxGqjIPlhtqVmFPmXrUH9RNb5+hM
pSRvvgkUbXl8zGpS6MCBp2SqEnQNob3meYJM3htUbCKpaRUK0OZa1NFSfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE/BLLR8UQArMzmMjtCgYKJ2bNY2MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVDhFc3RIeFJBQ3N6T1l5TzBLQmdvblpzMWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotBgAi
MA0GCSqGSIb3DQEBCwUAA4IBAQBAzodhzgQlx6/13T6Y4Nzl7C8IED54Fl3qAHv4
z6UOOY+OYILIlTsz5x7FdAz0LH8wCtyB8OV8nGU1howvR5PVujYfQQuQ3oobxqAA
X7U4EChEAureHjQg7uYl0apoVfqJ0vqEL5sDTd678u3SPvV7SAsA8SjpEtJPdX5a
e1YrBhqzCa5nA9hP2xllXKNdwfq5HtmUvk/d+hkaP4LcO4/WbUJPQNIaVblMyjKR
eRt8JRJ/rZOhsuX4Cz0le+ykZ4WHiPMbMJatpW8bOznmR8Slwx0c7X0rnFiq3Vit
XyziuENnaDO2Ao9PPQwZ7ZDzrefjBfFgzzlHSkUwSmQfxiOm
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:34 2025 by rpki-client