Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa
File: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (raw, json)
Hash identifier: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=
Subject key identifier: 24:97:95:B7:B5:19:A8:D5:04:B7:67:3A:C7:B8:4D:45:C3:88:EB:12
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8B3D50A5E3F158F61AAD23E7EAA4
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2094
IP address blocks: 2001:660:3203::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:3d:50:a5:e3:f1:58:f6:1a:ad:23:e7:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=249795b7b519a8d504b7673ac7b84d45c388eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:7c:2c:8c:d7:6e:a9:3d:d8:34:cb:0a:b0:
e4:d4:1a:9b:37:4a:32:ae:35:56:5f:bc:57:f6:5b:
2a:5b:ed:52:51:32:b6:c6:53:34:71:19:f9:34:a6:
ef:eb:e0:bb:32:61:b9:e3:66:01:ae:2e:dd:0a:a7:
a9:12:da:ec:20:9d:bf:39:88:fc:32:b9:d9:ef:78:
1f:80:83:85:2e:03:7c:e3:83:5a:81:21:a4:bf:30:
c7:e6:6f:85:85:1b:b3:a7:75:6a:28:4b:13:ef:c9:
49:82:94:75:05:9a:04:59:2b:58:b0:f7:68:13:08:
a7:8e:92:00:83:2f:3f:f4:2a:07:4b:d8:9d:c3:10:
7c:f7:46:16:46:29:25:05:d5:f6:09:eb:6c:e2:4e:
ab:14:7c:14:df:51:47:b5:b5:5e:59:57:f0:c5:ff:
c1:90:23:eb:49:2f:e7:ac:8a:8d:5d:78:a2:79:80:
34:32:c8:54:a3:92:c3:22:6e:8f:77:00:86:5f:7b:
ca:0b:a1:2c:c9:e8:75:80:1a:ba:64:02:ce:09:c0:
87:ed:02:97:8f:e4:3d:b7:25:14:f4:1f:d1:0b:0e:
92:fd:13:a7:a4:e3:4a:00:b1:63:3f:87:04:5e:fd:
1a:9b:03:c8:9a:16:09:91:d7:c8:5e:6d:3b:b2:22:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:95:B7:B5:19:A8:D5:04:B7:67:3A:C7:B8:4D:45:C3:88:EB:12
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:660:3203::/48
Signature Algorithm: sha256WithRSAEncryption
8e:35:31:a9:de:b7:92:af:af:fb:5f:bf:24:df:a4:95:ce:6c:
4a:b8:45:a7:d4:77:d5:1a:1b:ba:a0:6a:fa:f2:80:14:72:c6:
c1:44:15:89:ab:23:e4:62:1e:e8:1c:1a:fd:df:bc:86:bc:15:
a4:0e:22:86:54:79:cb:c0:2b:b9:37:6d:3a:d0:52:87:d6:65:
55:21:8d:12:d1:4e:24:b7:1e:04:96:0f:a4:fe:24:ee:3c:a9:
5e:a2:e8:75:9b:d5:40:1e:b0:81:aa:e3:aa:a8:eb:51:3a:b8:
19:f0:12:44:d7:1a:3e:6e:3a:8b:aa:fd:8d:65:ec:44:34:72:
e3:5f:70:a9:fd:1e:89:10:0a:75:a1:91:03:b6:e6:23:ff:73:
c4:90:29:8c:b0:9c:21:55:4e:86:b1:0e:f5:33:c4:f5:5b:b8:
8c:a2:86:d0:1a:24:f5:ab:c2:32:2a:9c:f5:37:2f:d2:4a:69:
89:96:05:aa:fe:d3:c4:45:70:36:85:8b:21:12:e1:96:99:db:
84:c2:2b:c8:44:f7:20:fe:d1:9c:7b:ed:1c:33:fd:39:4c:c1:
28:52:c9:9b:93:51:62:f8:59:c6:26:4e:33:82:2b:54:19:cf:
76:32:96:0f:fe:69:b1:d4:70:a7:f6:52:09:32:4f:91:67:9f:
67:32:cf:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj4s9UKXj8Vj2Gq0j5+qkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjUwMTAyMDU0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDk3OTViN2I1MTlhOGQ1MDRiNzY3M2FjN2I4NGQ0NWMzODhlYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5N8LIzXbqk92DTLCrDk1BqbN0oy
rjVWX7xX9lsqW+1SUTK2xlM0cRn5NKbv6+C7MmG542YBri7dCqepEtrsIJ2/OYj8
MrnZ73gfgIOFLgN844NagSGkvzDH5m+FhRuzp3VqKEsT78lJgpR1BZoEWStYsPdo
EwinjpIAgy8/9CoHS9idwxB890YWRiklBdX2Cets4k6rFHwU31FHtbVeWVfwxf/B
kCPrSS/nrIqNXXiieYA0MshUo5LDIm6PdwCGX3vKC6Esyeh1gBq6ZALOCcCH7QKX
j+Q9tyUU9B/RCw6S/ROnpONKALFjP4cEXv0amwPImhYJkdfIXm07siI9jQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCSXlbe1GajVBLdnOse4TUXDiOsSMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvSkplVnQ3VVpxTlVFdDJjNng3aE5SY09JNnhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGYDID
MA0GCSqGSIb3DQEBCwUAA4IBAQCONTGp3reSr6/7X78k36SVzmxKuEWn1HfVGhu6
oGr68oAUcsbBRBWJqyPkYh7oHBr937yGvBWkDiKGVHnLwCu5N2060FKH1mVVIY0S
0U4ktx4Elg+k/iTuPKleouh1m9VAHrCBquOqqOtROrgZ8BJE1xo+bjqLqv2NZexE
NHLjX3Cp/R6JEAp1oZEDtuYj/3PEkCmMsJwhVU6GsQ71M8T1W7iMoobQGiT1q8Iy
Kpz1Ny/SSmmJlgWq/tPERXA2hYshEuGWmduEwivIRPcg/tGce+0cM/05TMEoUsmb
k1Fi+FnGJk4zgitUGc92MpYP/mmx1HCn9lIJMk+RZ59nMs+8
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:42 2025 by rpki-client