Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/mDeYoI6CSjPzHgLICRWgHjXWWG8.roa
File: mDeYoI6CSjPzHgLICRWgHjXWWG8.roa (raw, json)
Hash identifier: FhOLeXYoRB0+laeRh6g6/NoBQjzJLs6SKK8sxbeWNhM=
Subject key identifier: 98:37:98:A0:8E:82:4A:33:F3:1E:02:C8:09:15:A0:1E:35:D6:58:6F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC25576A3F92657E413017AA91259
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/mDeYoI6CSjPzHgLICRWgHjXWWG8.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203396
IP address blocks: 2a04:9a00:1021::/48 maxlen: 48
2a04:9a00:1022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c2:55:76:a3:f9:26:57:e4:13:01:7a:a9:12:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983798a08e824a33f31e02c80915a01e35d6586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:a2:8f:7a:2b:25:c2:7e:72:51:5e:89:c2:
60:ce:a2:17:c7:ce:4c:6f:00:47:c6:44:84:93:e7:
99:4c:ed:0c:ba:7d:d2:7a:9f:43:39:a4:fa:1f:1b:
98:97:9d:ac:af:96:63:8a:8a:41:26:06:09:13:7a:
34:aa:8b:48:fd:96:d5:bc:5f:1c:c4:28:a3:0a:ae:
20:7f:9a:67:b1:66:35:3b:cd:5a:a2:bc:92:99:81:
68:92:7b:4e:27:91:b3:bb:00:9d:74:04:02:01:0c:
8c:ba:5e:13:de:b6:97:48:63:b3:0e:28:49:a8:a1:
78:d8:2f:cb:bb:69:94:ef:7b:b2:c1:03:91:b0:ef:
f9:2b:d7:78:2a:88:32:bb:d5:f0:34:2f:55:47:cd:
d7:0d:30:b7:97:a9:48:10:95:bc:be:6d:41:f2:e3:
f6:03:e2:e9:7a:6a:84:f6:96:5d:e1:80:95:81:70:
70:fa:9f:7a:73:18:68:bc:7c:79:6e:bb:63:d9:2f:
62:2c:07:b1:e8:fd:65:5e:87:29:3a:69:31:5c:9f:
25:9c:c7:a0:0a:b5:76:8f:04:bc:f7:17:43:59:2b:
f9:dd:10:bc:05:1d:b9:2c:5f:11:33:b9:fa:d7:91:
69:c7:ab:03:6c:20:3e:4c:08:3d:45:5c:de:64:97:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:98:A0:8E:82:4A:33:F3:1E:02:C8:09:15:A0:1E:35:D6:58:6F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/mDeYoI6CSjPzHgLICRWgHjXWWG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1021::-2a04:9a00:1022:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:ab:90:23:6c:42:df:e2:5d:8c:94:7b:5a:2c:b4:83:27:30:
a6:1f:e4:3f:4b:c3:a3:ea:0a:30:16:5d:f6:05:0d:cb:5c:f3:
79:d3:48:8d:7d:38:9f:2c:ac:fa:e3:9e:c8:1b:ce:b6:04:fa:
23:b4:2d:de:f6:53:10:a2:92:db:31:a8:dc:ec:10:60:4b:43:
da:dc:02:d5:e9:12:85:09:73:a8:7c:c5:bb:8a:14:c8:6d:74:
db:5a:42:9a:95:98:51:3a:b4:71:6e:a2:e4:40:96:54:27:84:
1a:1b:5b:9d:2a:c4:51:39:5f:b4:1d:e8:02:74:77:c5:fa:48:
d4:ab:17:82:87:ef:d6:09:1a:83:76:54:38:c9:2c:f8:1d:d7:
81:e7:7c:1a:1c:3b:2b:90:a5:0a:cd:22:2d:c0:03:69:73:fd:
d4:b0:2c:7f:05:1b:66:d8:8e:dc:30:9e:34:07:b2:24:83:e8:
3e:fb:89:e9:1d:af:4d:ab:2a:b6:d2:db:1a:57:9a:d9:bc:61:
06:44:56:10:2b:3c:ac:4d:24:25:6c:88:89:b1:dd:61:c0:39:
42:ca:09:22:d2:aa:a5:2e:5f:94:1c:12:bc:59:ef:5e:a1:76:
ce:7f:0a:01:7d:4a:59:b7:02:eb:19:35:79:f2:f5:a9:4a:ef:
e9:f4:f2:f1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQl/cJVdqP5JlfkEwF6qRJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjUwMTAyMDc0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODM3OThhMDhlODI0YTMzZjMxZTAyYzgwOTE1YTAxZTM1ZDY1ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcOij3orJcJ+clFeicJgzqIXx85M
bwBHxkSEk+eZTO0Mun3Sep9DOaT6HxuYl52sr5ZjiopBJgYJE3o0qotI/ZbVvF8c
xCijCq4gf5pnsWY1O81aorySmYFokntOJ5GzuwCddAQCAQyMul4T3raXSGOzDihJ
qKF42C/Lu2mU73uywQORsO/5K9d4Kogyu9XwNC9VR83XDTC3l6lIEJW8vm1B8uP2
A+LpemqE9pZd4YCVgXBw+p96cxhovHx5brtj2S9iLAex6P1lXocpOmkxXJ8lnMeg
CrV2jwS89xdDWSv53RC8BR25LF8RM7n615Fpx6sDbCA+TAg9RVzeZJeoewIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJg3mKCOgkoz8x4CyAkVoB411lhvMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvbURlWW9JNkNTalB6SGdMSUNSV2dIalhXV0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBJoA
ECEDBwAqBJoAECIwDQYJKoZIhvcNAQELBQADggEBABarkCNsQt/iXYyUe1ostIMn
MKYf5D9Lw6PqCjAWXfYFDctc83nTSI19OJ8srPrjnsgbzrYE+iO0Ld72UxCiktsx
qNzsEGBLQ9rcAtXpEoUJc6h8xbuKFMhtdNtaQpqVmFE6tHFuouRAllQnhBobW50q
xFE5X7Qd6AJ0d8X6SNSrF4KH79YJGoN2VDjJLPgd14HnfBocOyuQpQrNIi3AA2lz
/dSwLH8FG2bYjtwwnjQHsiSD6D77iekdr02rKrbS2xpXmtm8YQZEVhArPKxNJCVs
iImx3WHAOULKCSLSqqUuX5QcErxZ716hds5/CgF9Slm3AusZNXny9alK7+n08vE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:31 2025 by rpki-client