Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/G8UiAwzFIb10aUPptVFyUcasAhU.roa
File: G8UiAwzFIb10aUPptVFyUcasAhU.roa (raw, json)
Hash identifier: gjnbnlPSOiei9ZOJedhvnLB5KEhfsa1u2kzW+Nmi6/I=
Subject key identifier: 1B:C5:22:03:0C:C5:21:BD:74:69:43:E9:B5:51:72:51:C6:AC:02:15
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDB8F1D2B63E5EECA89D8ABFABA504
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/G8UiAwzFIb10aUPptVFyUcasAhU.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 2a04:9a04::/32 maxlen: 48
2a07:3506:4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b8:f1:d2:b6:3e:5e:ec:a8:9d:8a:bf:ab:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc522030cc521bd746943e9b5517251c6ac0215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:45:28:ae:72:27:cd:46:de:49:bb:c1:26:
4c:16:9d:99:35:f9:e8:9b:b0:df:f0:3a:76:17:9e:
85:c5:5c:ad:bf:d5:36:f8:58:c0:62:00:d4:ca:89:
57:7e:4f:5b:74:1d:47:06:67:a9:43:2d:78:43:84:
c1:6f:6c:0a:2e:86:05:b3:c9:a1:bd:d0:61:1c:cb:
6b:c2:42:7f:c9:71:57:71:9e:ad:45:f1:af:cf:39:
6e:56:ba:7c:66:96:61:9a:1b:7c:b3:84:b7:6f:9d:
fd:8b:0b:cb:fe:1e:ce:73:37:f1:cc:6a:41:87:fc:
d3:c3:68:15:14:33:48:a3:99:8f:46:60:d9:dc:6c:
59:cb:0e:75:c8:91:8e:05:96:2f:f9:14:37:d4:dd:
d2:e2:2e:70:c3:cf:70:6f:19:a8:be:bc:03:42:a9:
bc:45:df:b9:ee:7a:42:08:17:ac:9b:38:9c:83:6a:
40:27:0b:25:85:74:3f:c9:06:78:7d:81:4e:0e:9a:
60:70:a3:a7:5e:4c:29:9e:50:1b:b7:79:60:20:30:
e3:fa:d5:e6:78:2d:12:45:c0:d8:a2:5c:ad:ef:46:
1a:72:c6:2c:2e:8f:5c:0d:48:e3:77:e6:5e:bc:e2:
84:31:7c:21:63:a5:fc:68:31:37:24:9f:9b:93:78:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:22:03:0C:C5:21:BD:74:69:43:E9:B5:51:72:51:C6:AC:02:15
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/G8UiAwzFIb10aUPptVFyUcasAhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a04::/32
2a07:3506:4c::/48
Signature Algorithm: sha256WithRSAEncryption
4c:73:5e:22:be:40:33:c2:fc:3c:50:d4:00:fd:65:30:d2:14:
0b:54:7e:9b:5c:72:1f:7d:b5:02:7d:2f:60:65:93:47:fa:fc:
19:0a:f0:83:ba:80:e3:04:77:a4:3b:03:57:1b:c3:12:e2:c2:
31:7c:66:38:cd:14:d8:4c:0e:6d:7e:7b:1e:0f:77:06:f0:85:
f9:18:89:68:97:6e:5b:c0:94:28:da:53:b7:7e:b0:03:f4:fc:
8c:0a:13:02:74:3d:14:63:71:7d:73:64:3e:73:75:7a:bb:74:
5f:e2:bd:79:ed:11:36:a8:2f:1f:5c:f7:18:68:5f:4d:40:b1:
45:5a:a8:8b:0c:e9:91:33:99:14:69:a5:61:b5:d8:23:0a:74:
59:4c:75:5c:4f:77:06:19:35:34:ae:36:92:e0:dd:eb:70:f1:
53:bc:3c:7e:9f:44:61:31:f6:6a:8c:07:8c:8f:3a:d1:ef:6f:
8c:b2:aa:ab:39:67:5b:99:8f:32:28:e1:c5:2c:66:47:b6:9a:
8f:67:8b:4f:cd:76:d8:8f:d1:ff:ec:16:45:4d:44:cb:09:cd:
09:f8:3f:e6:a1:8b:6d:8b:84:ad:20:cb:1f:4c:2f:49:d4:c7:
fa:e5:8d:6a:f0:7c:d6:41:14:9c:89:85:88:0f:ba:5c:fb:ab:
81:98:da:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQl/bjx0rY+XuyonYq/q6UEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjUwMTAyMDc0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmM1MjIwMzBjYzUyMWJkNzQ2OTQzZTliNTUxNzI1MWM2YWMwMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cBFKK5yJ81G3km7wSZMFp2ZNfno
m7Df8Dp2F56FxVytv9U2+FjAYgDUyolXfk9bdB1HBmepQy14Q4TBb2wKLoYFs8mh
vdBhHMtrwkJ/yXFXcZ6tRfGvzzluVrp8ZpZhmht8s4S3b539iwvL/h7OczfxzGpB
h/zTw2gVFDNIo5mPRmDZ3GxZyw51yJGOBZYv+RQ31N3S4i5ww89wbxmovrwDQqm8
Rd+57npCCBesmzicg2pAJwslhXQ/yQZ4fYFODppgcKOnXkwpnlAbt3lgIDDj+tXm
eC0SRcDYolyt70YacsYsLo9cDUjjd+ZevOKEMXwhY6X8aDE3JJ+bk3jI3QIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFBvFIgMMxSG9dGlD6bVRclHGrAIVMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvRzhVaUF3ekZJYjEwYVVQcHRWRnlVY2FzQWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAKgSaBAMH
ACoHNQYATDANBgkqhkiG9w0BAQsFAAOCAQEATHNeIr5AM8L8PFDUAP1lMNIUC1R+
m1xyH321An0vYGWTR/r8GQrwg7qA4wR3pDsDVxvDEuLCMXxmOM0U2EwObX57Hg93
BvCF+RiJaJduW8CUKNpTt36wA/T8jAoTAnQ9FGNxfXNkPnN1ert0X+K9ee0RNqgv
H1z3GGhfTUCxRVqoiwzpkTOZFGmlYbXYIwp0WUx1XE93Bhk1NK42kuDd63DxU7w8
fp9EYTH2aowHjI860e9vjLKqqzlnW5mPMijhxSxmR7aaj2eLT8122I/R/+wWRU1E
ywnNCfg/5qGLbYuErSDLH0wvSdTH+uWNavB81kEUnImFiA+6XPurgZjadA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:06 2025 by rpki-client