Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa
File: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (raw, json)
Hash identifier: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=
Subject key identifier: DF:1C:8D:8B:0C:4C:2E:DD:85:82:79:F3:0F:C1:56:3B:45:A7:02:17
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 0194221FBD262D9DF59F85F156B21640D83F
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 2a00:b703:fff1::/48 maxlen: 48
2a00:b703:fff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:26:2d:9d:f5:9f:85:f1:56:b2:16:40:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df1c8d8b0c4c2edd858279f30fc1563b45a70217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:3e:29:82:6d:f2:d3:d7:8d:b3:0d:d7:96:
03:12:eb:db:e9:33:ca:ad:3c:96:5a:25:66:9c:c0:
28:43:c6:b3:47:06:82:e8:de:35:f1:00:d7:1c:6c:
8c:0e:26:db:44:e2:08:38:fa:8d:93:f9:23:48:17:
e7:d3:09:f9:4a:e0:b4:95:14:13:b6:60:be:bd:13:
13:6d:aa:6c:85:72:54:ff:e1:9a:1c:bc:04:fa:30:
52:29:ed:28:65:2b:18:6b:84:79:80:59:a0:65:46:
7a:4b:37:4a:f4:6d:60:e4:f4:c6:4c:6d:40:e8:3a:
4e:c7:96:78:c7:5c:83:80:da:8f:6a:ab:6e:28:a5:
a3:09:33:ed:90:ee:1a:9b:0b:ab:ae:17:dc:57:1a:
d9:7d:11:94:45:8a:a9:04:6c:20:d3:18:d8:35:3a:
0a:48:38:19:7f:8c:dc:4f:43:3e:8a:0e:55:f8:31:
03:22:a1:91:73:77:b2:fd:de:ea:b6:52:a5:a1:35:
2f:db:3b:38:96:c9:06:0d:11:79:b9:5e:21:a5:19:
3c:5e:e7:3a:bc:ff:6c:42:51:f3:5c:f9:40:ae:b8:
fe:bf:42:26:7c:06:8f:ba:4e:6f:6c:61:a7:ee:a6:
e5:3e:1f:9d:5b:39:87:4f:e8:aa:4e:e5:21:73:7e:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:8D:8B:0C:4C:2E:DD:85:82:79:F3:0F:C1:56:3B:45:A7:02:17
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:b703:fff1::-2a00:b703:fff2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:02:40:91:f0:c1:91:79:d9:c4:04:40:03:88:29:1e:30:a2:
94:45:c6:68:a0:05:56:d4:20:dd:7a:dc:b1:3d:79:f1:16:71:
da:4f:bc:08:4d:3c:c0:16:e2:7d:1d:40:6c:d9:9c:71:6f:84:
3e:4c:fb:43:3d:c9:e9:ed:c6:61:2a:78:d4:c9:99:67:87:61:
b4:7b:a0:00:13:bb:45:3f:a5:63:00:42:22:4d:d4:d7:55:2d:
4b:8d:ab:1a:d9:01:25:4f:69:70:14:06:fa:66:97:2c:cd:b8:
bd:94:5b:bc:cb:b2:d6:3c:20:17:11:49:75:32:6c:60:e9:10:
90:31:d4:81:81:fb:d4:1e:65:16:8c:2d:cc:92:7a:aa:26:b0:
57:8c:24:58:8f:09:5d:fa:05:2e:d2:24:ae:5f:e1:eb:75:31:
dd:46:a4:3c:14:e1:2f:b7:1b:06:6d:3f:d6:41:4d:4e:3d:13:
3c:42:c2:8d:9b:87:09:91:e9:6e:96:f0:06:44:81:3d:28:98:
03:46:fe:5e:8d:74:05:0a:5f:99:47:30:45:e9:9c:29:df:f9:
ce:b8:ec:1c:94:84:f4:eb:1d:a9:d2:9a:77:2a:38:a6:bf:b6:
cc:c1:f7:21:b8:3a:12:6e:1f:e3:5e:97:53:29:36:d6:e8:10:
17:c4:0c:9f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQiH70mLZ31n4XxVrIWQNg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjFjOGQ4YjBjNGMyZWRkODU4Mjc5ZjMwZmMxNTYzYjQ1YTcwMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWU+KYJt8tPXjbMN15YDEuvb6TPK
rTyWWiVmnMAoQ8azRwaC6N418QDXHGyMDibbROIIOPqNk/kjSBfn0wn5SuC0lRQT
tmC+vRMTbapshXJU/+GaHLwE+jBSKe0oZSsYa4R5gFmgZUZ6SzdK9G1g5PTGTG1A
6DpOx5Z4x1yDgNqPaqtuKKWjCTPtkO4amwurrhfcVxrZfRGURYqpBGwg0xjYNToK
SDgZf4zcT0M+ig5V+DEDIqGRc3ey/d7qtlKloTUv2zs4lskGDRF5uV4hpRk8Xuc6
vP9sQlHzXPlArrj+v0ImfAaPuk5vbGGn7qblPh+dWzmHT+iqTuUhc37UuQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFN8cjYsMTC7dhYJ58w/BVjtFpwIXMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvM3h5Tml3eE1MdDJGZ25uekQ4RldPMFduQWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqALcD
//EDBwAqALcD//IwDQYJKoZIhvcNAQELBQADggEBAEYCQJHwwZF52cQEQAOIKR4w
opRFxmigBVbUIN163LE9efEWcdpPvAhNPMAW4n0dQGzZnHFvhD5M+0M9yentxmEq
eNTJmWeHYbR7oAATu0U/pWMAQiJN1NdVLUuNqxrZASVPaXAUBvpmlyzNuL2UW7zL
stY8IBcRSXUybGDpEJAx1IGB+9QeZRaMLcySeqomsFeMJFiPCV36BS7SJK5f4et1
Md1GpDwU4S+3GwZtP9ZBTU49EzxCwo2bhwmR6W6W8AZEgT0omANG/l6NdAUKX5lH
MEXpnCnf+c647ByUhPTrHanSmncqOKa/tszB9yG4OhJuH+Nel1MpNtboEBfEDJ8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:17 2025 by rpki-client