Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xHjQCwAgL8fwQlpegGu0ve7BMk8.roa
File: xHjQCwAgL8fwQlpegGu0ve7BMk8.roa (raw, json)
Hash identifier: YtJXh5s6KEi2j/N9vSE1HJOWvguD8RhapLwq6OtDnNY=
Subject key identifier: C4:78:D0:0B:00:20:2F:C7:F0:42:5A:5E:80:6B:B4:BD:EE:C1:32:4F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482CE84BADEC712BE37D1B77B9E7F0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xHjQCwAgL8fwQlpegGu0ve7BMk8.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 2a0f:4f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2c:e8:4b:ad:ec:71:2b:e3:7d:1b:77:b9:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c478d00b00202fc7f0425a5e806bb4bdeec1324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:bf:56:22:07:ad:14:a2:12:ce:0b:5b:23:
78:9e:f1:4a:c7:dc:24:d1:44:66:34:a3:74:2e:a7:
9a:f4:24:78:79:1c:92:17:8b:af:a9:64:60:a8:13:
ca:64:ea:f2:7b:50:b4:ad:d3:07:4e:47:fc:7f:55:
99:c1:95:24:57:b5:d5:47:a1:7b:9b:4f:32:46:ac:
32:f7:04:93:8a:c4:19:ec:c9:cd:94:45:d4:7e:0a:
2e:be:01:ac:c3:9e:a2:11:84:72:90:a0:59:b3:44:
2c:4b:91:98:49:e1:b2:08:7f:07:84:50:53:f2:1e:
41:76:41:86:34:b5:77:3e:38:cf:23:59:ba:28:53:
1b:42:39:b6:22:85:76:7b:48:2f:86:0e:58:fe:8f:
dd:04:7c:e9:a5:7c:91:a1:d1:65:2c:1b:88:da:3e:
1d:a8:dd:97:51:bf:9b:30:de:8c:36:21:07:74:ae:
a8:a8:d0:10:c5:cc:83:68:31:26:8d:0c:48:f4:76:
d3:0f:85:b2:5d:23:65:4b:da:60:e9:80:02:54:3c:
6d:8a:bf:f2:91:34:69:5b:b4:62:65:f8:e1:3c:50:
ae:72:a8:86:3f:bd:ad:be:5e:f6:08:6e:3f:84:8d:
ba:9a:1d:01:45:61:41:d2:a0:ab:9b:24:29:64:b8:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:D0:0B:00:20:2F:C7:F0:42:5A:5E:80:6B:B4:BD:EE:C1:32:4F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xHjQCwAgL8fwQlpegGu0ve7BMk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
a2:04:b3:dc:b0:bc:ba:f6:33:0b:6f:cf:6a:0f:2b:b5:d6:cf:
84:0f:9b:ef:97:7f:7e:b7:4b:ef:cf:dc:39:6a:ec:ca:4e:61:
8c:d6:95:13:54:91:f9:95:d5:1e:b7:0a:c1:be:54:d0:61:ed:
ef:f4:8a:68:a9:db:45:e1:e0:dc:fa:d3:6b:75:10:68:24:66:
92:2b:e3:44:d1:5d:24:18:7a:d3:34:d9:cb:d8:26:f0:fe:cc:
4c:42:dc:ff:9c:8e:3c:1c:e0:18:13:49:3b:03:73:06:56:69:
0a:8e:c6:4b:ca:ff:2a:3c:ea:d0:45:cb:d4:37:14:72:15:9a:
ad:b8:a0:5e:31:80:f1:f8:b6:78:4b:14:47:63:c3:2c:33:0b:
ed:62:f3:2a:77:f0:df:1b:4c:43:30:7a:ca:64:74:4d:d7:d5:
8d:39:41:d0:20:35:c4:e0:2b:5b:d8:9a:43:9c:29:81:0c:a6:
96:dc:ff:96:69:e5:fc:53:c1:c5:ad:2a:1e:b4:09:c9:c9:d2:
41:c0:15:ce:20:c6:ae:ce:77:a1:8d:f6:bd:7a:13:d7:15:e5:
f5:d9:55:73:33:78:e0:d8:cf:3f:da:ed:9f:86:5e:0b:d1:c4:
4e:e4:da:5b:f4:e6:d6:8e:fc:04:78:45:ff:55:5d:78:46:60:
cb:18:08:bd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSCzoS63scSvjfRt3uefwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDc4ZDAwYjAwMjAyZmM3ZjA0MjVhNWU4MDZiYjRiZGVlYzEzMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuce/ViIHrRSiEs4LWyN4nvFKx9wk
0URmNKN0Lqea9CR4eRySF4uvqWRgqBPKZOrye1C0rdMHTkf8f1WZwZUkV7XVR6F7
m08yRqwy9wSTisQZ7MnNlEXUfgouvgGsw56iEYRykKBZs0QsS5GYSeGyCH8HhFBT
8h5BdkGGNLV3PjjPI1m6KFMbQjm2IoV2e0gvhg5Y/o/dBHzppXyRodFlLBuI2j4d
qN2XUb+bMN6MNiEHdK6oqNAQxcyDaDEmjQxI9HbTD4WyXSNlS9pg6YACVDxtir/y
kTRpW7RiZfjhPFCucqiGP72tvl72CG4/hI26mh0BRWFB0qCrmyQpZLj+VQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMR40AsAIC/H8EJaXoBrtL3uwTJPMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveEhqUUN3QWdMOGZ3UWxwZWdHdTB2ZTdCTWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9PgDAN
BgkqhkiG9w0BAQsFAAOCAQEAogSz3LC8uvYzC2/Pag8rtdbPhA+b75d/frdL78/c
OWrsyk5hjNaVE1SR+ZXVHrcKwb5U0GHt7/SKaKnbReHg3PrTa3UQaCRmkivjRNFd
JBh60zTZy9gm8P7MTELc/5yOPBzgGBNJOwNzBlZpCo7GS8r/Kjzq0EXL1DcUchWa
rbigXjGA8fi2eEsUR2PDLDML7WLzKnfw3xtMQzB6ymR0TdfVjTlB0CA1xOArW9ia
Q5wpgQymltz/lmnl/FPBxa0qHrQJycnSQcAVziDGrs53oY32vXoT1xXl9dlVczN4
4NjPP9rtn4ZeC9HETuTaW/Tm1o78BHhF/1VdeEZgyxgIvQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:43 2025 by rpki-client