Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AFN8OqvwZcsViNN-78O6BvKElME.roa
File: AFN8OqvwZcsViNN-78O6BvKElME.roa (raw, json)
Hash identifier: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=
Subject key identifier: 00:53:7C:3A:AB:F0:65:CB:15:88:D3:7E:EF:C3:BA:06:F2:84:94:C1
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221E7289E7530E5A37B8DA622F3D85
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AFN8OqvwZcsViNN-78O6BvKElME.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209844
IP address blocks: 2001:67c:2960::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1e:72:89:e7:53:0e:5a:37:b8:da:62:2f:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00537c3aabf065cb1588d37eefc3ba06f28494c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:ce:8e:0a:fb:40:ae:b4:ed:f3:74:f2:fe:
b4:79:a8:8e:49:de:35:62:07:1f:56:78:09:37:c5:
e4:9c:10:41:c3:55:aa:e5:dc:e6:c4:80:fa:fc:e5:
8e:16:2b:fd:14:43:dd:09:4c:a3:56:99:3a:19:9b:
c9:4b:f2:50:0e:3e:6c:16:06:61:5e:ae:e3:dd:d5:
dd:b3:c6:96:dd:1b:83:24:89:b6:c1:8f:d9:1c:49:
fc:d7:96:9d:ce:c9:e3:8f:27:a8:51:de:a2:4b:cd:
c1:3b:f4:30:52:b4:7c:fa:97:6a:42:68:df:a9:ae:
1d:30:e3:b1:d0:4d:a1:17:13:53:b5:39:57:af:b4:
3e:de:45:5a:db:2b:21:24:b9:0d:51:c2:8f:54:1d:
42:1c:b6:32:34:61:bf:b1:4f:31:83:01:d0:44:56:
a7:84:90:94:7f:48:9f:85:9f:94:8f:34:37:d9:db:
1b:2b:0b:5b:94:4f:e9:6c:4d:7e:49:83:1a:59:81:
ef:fa:0a:61:57:e9:42:39:d9:40:5b:7b:46:9a:e8:
e3:61:93:f0:2f:81:3f:d9:03:79:62:37:c6:09:27:
b6:96:35:77:34:65:58:8c:ce:ac:0a:17:07:df:54:
72:14:43:ee:59:96:cb:43:5a:e8:3b:49:0f:c0:1b:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:7C:3A:AB:F0:65:CB:15:88:D3:7E:EF:C3:BA:06:F2:84:94:C1
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AFN8OqvwZcsViNN-78O6BvKElME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2960::/48
Signature Algorithm: sha256WithRSAEncryption
56:6a:7f:85:39:db:6d:6b:b8:dc:26:dc:0b:06:85:cc:5f:78:
ea:e0:10:85:d5:2d:b2:d6:65:aa:3c:e6:2e:f3:ec:20:18:25:
ee:74:8c:5d:ed:e0:30:88:d6:81:a3:5c:ac:d6:0b:9a:83:27:
c4:f7:93:4e:8c:8d:ef:3f:4c:47:b4:60:f8:42:0c:ce:be:94:
89:81:58:71:05:41:f8:35:ac:34:46:f4:c2:e0:63:9e:33:03:
f7:b3:6a:5e:af:47:8b:b0:b8:ef:f8:1b:b9:9c:f1:c6:2e:60:
a9:40:44:47:51:de:99:8c:f7:97:dd:80:22:21:a3:d9:74:d5:
0e:d9:c1:b8:35:84:98:37:02:5b:61:4a:7c:c4:22:4e:a7:41:
20:58:da:3c:25:46:fd:f7:06:2d:ea:a1:98:95:c8:75:6b:99:
84:f0:47:90:14:c7:24:bf:93:ad:21:c3:d8:f7:37:72:d5:88:
57:d2:bf:b5:d6:01:a8:ff:56:7b:20:2e:93:8a:21:8b:0f:70:
72:67:e5:d6:e8:a8:b4:48:a1:ab:58:db:84:ca:0c:ca:94:10:
6f:11:2a:e8:68:3a:26:8d:27:76:6e:77:6d:26:17:d9:08:17:
d3:31:03:e2:87:e4:f8:a1:87:27:80:d4:b3:6a:09:c1:72:4c:
0e:ed:9d:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIh5yiedTDlo3uNpiLz2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjUwMTAyMDM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDUzN2MzYWFiZjA2NWNiMTU4OGQzN2VlZmMzYmEwNmYyODQ5NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWbOjgr7QK607fN08v60eaiOSd41
YgcfVngJN8XknBBBw1Wq5dzmxID6/OWOFiv9FEPdCUyjVpk6GZvJS/JQDj5sFgZh
Xq7j3dXds8aW3RuDJIm2wY/ZHEn815adzsnjjyeoUd6iS83BO/QwUrR8+pdqQmjf
qa4dMOOx0E2hFxNTtTlXr7Q+3kVa2yshJLkNUcKPVB1CHLYyNGG/sU8xgwHQRFan
hJCUf0ifhZ+UjzQ32dsbKwtblE/pbE1+SYMaWYHv+gphV+lCOdlAW3tGmujjYZPw
L4E/2QN5YjfGCSe2ljV3NGVYjM6sChcH31RyFEPuWZbLQ1roO0kPwBsYTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFABTfDqr8GXLFYjTfu/DugbyhJTBMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvQUZOOE9xdndaY3NWaU5OLTc4TzZCdktFbE1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfClg
MA0GCSqGSIb3DQEBCwUAA4IBAQBWan+FOdtta7jcJtwLBoXMX3jq4BCF1S2y1mWq
POYu8+wgGCXudIxd7eAwiNaBo1ys1guagyfE95NOjI3vP0xHtGD4QgzOvpSJgVhx
BUH4Naw0RvTC4GOeMwP3s2per0eLsLjv+Bu5nPHGLmCpQERHUd6ZjPeX3YAiIaPZ
dNUO2cG4NYSYNwJbYUp8xCJOp0EgWNo8JUb99wYt6qGYlch1a5mE8EeQFMckv5Ot
IcPY9zdy1YhX0r+11gGo/1Z7IC6TiiGLD3ByZ+XW6Ki0SKGrWNuEygzKlBBvESro
aDomjSd2bndtJhfZCBfTMQPih+T4oYcngNSzagnBckwO7Z0d
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:45 2025 by rpki-client