Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s2ACVztzA1vsZj0LeR6CzlnTOm8.roa
File: s2ACVztzA1vsZj0LeR6CzlnTOm8.roa (raw, json)
Hash identifier: oz7Vsf3An5MBbrJmvyyxPiGXT2v35uRZRv/m5nuw4mg=
Subject key identifier: B3:60:02:57:3B:73:03:5B:EC:66:3D:0B:79:1E:82:CE:59:D3:3A:6F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01956BEF9DCF1AA81D50AA87F9902216DAAB
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s2ACVztzA1vsZj0LeR6CzlnTOm8.roa
Signing time: Thu 06 Mar 2025 14:50:20 +0000
ROA not before: Thu 06 Mar 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209709
IP address blocks: 2a0e:f180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:ef:9d:cf:1a:a8:1d:50:aa:87:f9:90:22:16:da:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b36002573b73035bec663d0b791e82ce59d33a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:66:4c:51:6e:0d:b4:24:2a:39:c6:cd:dc:
5d:17:e0:58:7d:79:7b:04:a1:f6:4b:a5:fa:72:99:
cd:80:b3:ad:47:8d:17:42:b7:0e:ae:98:43:22:df:
3e:dc:93:5c:a0:fd:b7:5f:72:c3:25:7a:c2:5e:21:
89:19:d3:17:0c:41:f1:d1:2f:a2:9b:23:80:f2:03:
80:83:5d:ef:ba:dd:f8:83:a7:d1:97:78:91:41:37:
45:5e:ed:45:3b:c0:a4:77:a6:62:ad:fa:68:f2:36:
1c:74:00:4d:0e:2e:35:46:c1:d2:ae:db:df:97:01:
b3:c3:a6:4f:b4:21:2c:68:73:b0:1c:2f:51:c8:cb:
bc:19:90:7e:66:bf:73:39:fc:70:e0:9c:8e:64:31:
c3:6e:46:ea:43:05:67:91:73:11:73:80:b4:8e:cc:
87:6e:7f:1c:58:26:13:75:19:1f:3d:39:3f:25:04:
43:3f:fe:a1:df:58:a2:ed:46:1e:98:fb:5c:64:3b:
d6:58:e3:36:86:07:b9:32:2a:34:a6:cb:f3:e3:70:
04:04:de:62:6c:56:87:2e:8f:66:27:2c:71:8c:cb:
2f:c4:34:69:82:89:b5:8e:c8:ed:e5:23:77:70:56:
4a:28:1f:c9:34:a2:cd:42:50:62:6d:23:18:08:ac:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:02:57:3B:73:03:5B:EC:66:3D:0B:79:1E:82:CE:59:D3:3A:6F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s2ACVztzA1vsZj0LeR6CzlnTOm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f180::/29
Signature Algorithm: sha256WithRSAEncryption
6b:64:70:93:a6:8b:c8:51:2c:56:09:28:2c:fa:33:4b:23:4f:
75:e5:57:1a:99:fc:aa:59:4a:ca:8f:0a:5a:67:09:58:0d:fc:
fc:f1:04:41:1d:0d:58:55:05:b6:13:d9:7b:1f:5b:cd:d8:1b:
83:64:61:9b:c9:82:65:11:9e:56:3f:84:41:d1:23:02:6d:79:
76:38:0c:5f:2d:3e:91:6f:2b:16:88:53:e4:4a:12:e2:eb:e9:
35:3f:e4:cd:87:a3:60:7f:76:fa:7a:ca:ee:72:00:6e:61:a7:
8a:09:f8:74:fa:30:4e:0c:68:cd:67:a2:8e:21:7e:09:ab:13:
93:d3:e1:61:4d:a2:2a:58:f4:c2:53:2a:ce:0c:d4:8e:2c:83:
03:fc:84:81:c7:1b:28:d5:1d:84:52:07:fc:ff:8b:37:1e:b6:
11:89:ea:9d:e4:36:81:b8:12:fa:a4:70:a4:be:aa:0e:e4:7f:
1c:54:94:1d:aa:d5:f9:e8:b5:4b:cc:c3:c5:b7:38:12:04:ea:
e4:c2:b9:a6:30:ef:c4:b9:0d:fd:05:3e:da:33:e0:12:fa:e8:
21:fe:de:e3:b9:96:a9:03:26:91:21:bb:4c:8f:c6:d4:05:e1:
9a:c1:f5:c0:22:c4:2a:5b:18:0b:84:e6:bf:bb:ab:d6:e7:1a:
4e:d7:2e:74
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZVr753PGqgdUKqH+ZAiFtqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMzA2MTQ1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzYwMDI1NzNiNzMwMzViZWM2NjNkMGI3OTFlODJjZTU5ZDMzYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FJmTFFuDbQkKjnGzdxdF+BYfXl7
BKH2S6X6cpnNgLOtR40XQrcOrphDIt8+3JNcoP23X3LDJXrCXiGJGdMXDEHx0S+i
myOA8gOAg13vut34g6fRl3iRQTdFXu1FO8Ckd6Zirfpo8jYcdABNDi41RsHSrtvf
lwGzw6ZPtCEsaHOwHC9RyMu8GZB+Zr9zOfxw4JyOZDHDbkbqQwVnkXMRc4C0jsyH
bn8cWCYTdRkfPTk/JQRDP/6h31ii7UYemPtcZDvWWOM2hge5Mio0psvz43AEBN5i
bFaHLo9mJyxxjMsvxDRpgom1jsjt5SN3cFZKKB/JNKLNQlBibSMYCKzx0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLNgAlc7cwNb7GY9C3kegs5Z0zpvMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvczJBQ1Z6dHpBMXZzWmowTGVSNkN6bG5UT204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7xgDAN
BgkqhkiG9w0BAQsFAAOCAQEAa2Rwk6aLyFEsVgkoLPozSyNPdeVXGpn8qllKyo8K
WmcJWA38/PEEQR0NWFUFthPZex9bzdgbg2Rhm8mCZRGeVj+EQdEjAm15djgMXy0+
kW8rFohT5EoS4uvpNT/kzYejYH92+nrK7nIAbmGnign4dPowTgxozWeijiF+CasT
k9PhYU2iKlj0wlMqzgzUjiyDA/yEgccbKNUdhFIH/P+LNx62EYnqneQ2gbgS+qRw
pL6qDuR/HFSUHarV+ei1S8zDxbc4EgTq5MK5pjDvxLkN/QU+2jPgEvroIf7e47mW
qQMmkSG7TI/G1AXhmsH1wCLEKlsYC4Tmv7ur1ucaTtcudA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:40 2025 by rpki-client