Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ejoHbECKWtOTmlU1jMC5YQ3435w.roa
File: ejoHbECKWtOTmlU1jMC5YQ3435w.roa (raw, json)
Hash identifier: jmbJshVYAz59IR0iFIczbyb0RtuhIZI0DCiKT54aNGg=
Subject key identifier: 7A:3A:07:6C:40:8A:5A:D3:93:9A:55:35:8C:C0:B9:61:0D:F8:DF:9C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482AA48C9040A8D6A25295E9670410
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ejoHbECKWtOTmlU1jMC5YQ3435w.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 2a0f:3d80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:a4:8c:90:40:a8:d6:a2:52:95:e9:67:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a3a076c408a5ad3939a55358cc0b9610df8df9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:c3:ab:ed:2a:eb:00:ec:53:0f:ee:fd:11:
1c:05:b6:ae:18:5b:a7:2a:1d:56:64:05:2d:4a:22:
a1:6a:67:d1:a9:b1:e0:0c:b0:9d:f7:a9:ac:ac:fd:
a0:61:ce:9a:c9:a2:ab:5b:19:ef:e2:77:68:75:ef:
86:74:02:cd:11:d8:f4:f8:fd:1d:7b:c6:1b:8a:60:
cc:5c:9d:c6:a8:c3:24:87:88:44:90:ec:d9:e8:7b:
8a:45:97:4e:8c:71:c8:f7:de:76:1a:31:bf:b7:d9:
23:69:f4:6f:2f:23:33:4d:64:d3:f9:2d:a7:ff:a3:
4c:af:d9:c2:df:68:cc:a9:e8:86:12:35:f5:3f:8c:
38:8a:cf:28:f9:71:46:c9:42:11:c0:7f:30:96:2e:
79:4f:d8:f8:04:4c:fa:dc:ed:38:ad:20:b2:d8:f7:
7e:ca:64:aa:75:d7:ea:9e:85:3c:9b:e4:62:6c:3b:
31:e9:86:99:c4:e5:41:d7:5a:8d:16:e1:39:71:60:
d7:4b:ae:7a:54:71:3a:5f:cd:7e:9a:73:d6:59:48:
f6:25:d0:8e:6e:aa:76:4d:cc:8a:7f:bc:04:40:7c:
02:73:d5:90:67:22:73:07:2d:26:be:b2:7f:46:52:
2e:99:f6:42:64:75:63:73:73:fa:6d:aa:b6:9f:6d:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:07:6C:40:8A:5A:D3:93:9A:55:35:8C:C0:B9:61:0D:F8:DF:9C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ejoHbECKWtOTmlU1jMC5YQ3435w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d80:3::/48
Signature Algorithm: sha256WithRSAEncryption
82:4e:c2:cd:7b:36:8a:63:ee:ee:d6:fc:ce:c2:0c:36:e8:7d:
00:84:c5:9c:7c:36:02:e3:bc:76:8c:4d:aa:21:e4:17:55:aa:
a2:54:e0:07:84:f6:c7:c4:34:f1:47:1d:c6:3d:81:f3:37:38:
1a:0e:c6:06:ae:41:ef:d8:db:0f:98:7e:38:34:b5:e3:18:54:
92:85:e6:2b:fb:01:1b:61:19:58:ef:fb:28:a4:69:9d:9d:f4:
d5:e4:a0:81:0a:bf:2c:6c:a7:c4:65:2b:1c:74:3b:1f:e6:50:
f4:83:99:25:d7:ce:35:64:30:fb:33:56:15:14:2b:14:f7:d5:
68:5c:bc:38:da:55:e9:55:31:d7:45:52:8e:8c:6c:a4:87:11:
20:e0:46:05:03:bf:f7:fe:55:aa:89:22:2d:8d:4e:08:99:a4:
94:f3:44:65:40:01:5e:d1:24:af:94:97:ac:6d:71:1a:e0:0a:
39:0a:2e:8d:05:66:c0:eb:64:c5:5a:ad:2f:3b:40:88:16:52:
c7:2c:e8:84:73:5c:0a:10:4a:50:67:5f:f5:e8:45:37:93:5a:
74:eb:49:01:73:1b:34:38:ae:59:7b:b3:93:04:bb:cf:fb:b0:
73:54:17:d0:d5:f3:29:de:10:61:b8:e3:70:75:b6:0b:4b:a8:
5f:28:49:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnSCqkjJBAqNaiUpXpZwQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTNhMDc2YzQwOGE1YWQzOTM5YTU1MzU4Y2MwYjk2MTBkZjhkZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUrDq+0q6wDsUw/u/REcBbauGFun
Kh1WZAUtSiKhamfRqbHgDLCd96msrP2gYc6ayaKrWxnv4ndode+GdALNEdj0+P0d
e8YbimDMXJ3GqMMkh4hEkOzZ6HuKRZdOjHHI9952GjG/t9kjafRvLyMzTWTT+S2n
/6NMr9nC32jMqeiGEjX1P4w4is8o+XFGyUIRwH8wli55T9j4BEz63O04rSCy2Pd+
ymSqddfqnoU8m+RibDsx6YaZxOVB11qNFuE5cWDXS656VHE6X81+mnPWWUj2JdCO
bqp2TcyKf7wEQHwCc9WQZyJzBy0mvrJ/RlIumfZCZHVjc3P6baq2n2115wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHo6B2xAilrTk5pVNYzAuWEN+N+cMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZWpvSGJFQ0tXdE9UbWxVMWpNQzVZUTM0MzV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg89gAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQCCTsLNezaKY+7u1vzOwgw26H0AhMWcfDYC47x2
jE2qIeQXVaqiVOAHhPbHxDTxRx3GPYHzNzgaDsYGrkHv2NsPmH44NLXjGFSSheYr
+wEbYRlY7/sopGmdnfTV5KCBCr8sbKfEZSscdDsf5lD0g5kl1841ZDD7M1YVFCsU
99VoXLw42lXpVTHXRVKOjGykhxEg4EYFA7/3/lWqiSItjU4ImaSU80RlQAFe0SSv
lJesbXEa4Ao5Ci6NBWbA62TFWq0vO0CIFlLHLOiEc1wKEEpQZ1/16EU3k1p060kB
cxs0OK5Ze7OTBLvP+7BzVBfQ1fMp3hBhuONwdbYLS6hfKEn6
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:44 2025 by rpki-client