Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/DkFI2i-dlKroiwNlcRZFWrwEfrM.roa
File: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (raw, json)
Hash identifier: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=
Subject key identifier: 0E:41:48:DA:2F:9D:94:AA:E8:8B:03:65:71:16:45:5A:BC:04:7E:B3
Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Certificate serial: 01948F4673708CA574ADDD70FEB6D7C7CC05
Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/DkFI2i-dlKroiwNlcRZFWrwEfrM.roa
Signing time: Wed 22 Jan 2025 18:29:06 +0000
ROA not before: Wed 22 Jan 2025 18:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50066
IP address blocks: 2001:67c:2a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:46:73:70:8c:a5:74:ad:dd:70:fe:b6:d7:c7:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Validity
Not Before: Jan 22 18:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e4148da2f9d94aae88b03657116455abc047eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:16:72:4b:d9:35:75:f2:9e:f8:6b:81:25:
ab:1e:48:e8:ee:fd:30:fa:67:e5:a0:8b:c3:86:90:
18:99:c8:7e:85:45:c9:e5:75:71:04:a4:50:79:05:
fe:0c:36:b8:ba:9c:f3:79:26:74:62:8a:31:52:28:
e5:1a:c8:d3:27:c6:ff:24:fb:7e:e3:31:ea:28:9a:
d2:7e:db:94:c7:c1:73:4d:11:96:7e:1e:f3:9f:c6:
f9:65:79:8a:d9:4a:01:c6:27:07:45:e2:74:2a:5f:
8a:19:e1:d9:0b:48:01:ed:7e:87:ca:d3:b3:e5:13:
ec:08:ef:64:03:34:bb:a9:94:0e:0c:d9:92:53:5e:
4d:71:94:d9:98:91:af:b0:72:b6:4f:78:d7:a7:7f:
e1:a9:8f:3e:db:cc:66:eb:d7:a5:56:8e:ac:60:9d:
7e:93:55:17:7d:95:9c:6c:09:e3:5f:d8:bc:bc:a7:
ed:5f:15:fb:22:ae:7c:07:d5:37:c9:c1:76:c7:a3:
aa:be:a5:67:2a:07:6f:b6:34:95:ee:41:5d:f7:01:
49:7a:16:b6:a2:94:e8:aa:a1:99:9d:08:d8:c1:bf:
ce:22:11:b3:a4:63:c2:cc:6c:38:9a:70:e4:d3:18:
a0:cf:f5:7d:bd:ee:6b:1b:a9:dd:76:29:c2:3d:53:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:48:DA:2F:9D:94:AA:E8:8B:03:65:71:16:45:5A:BC:04:7E:B3
X509v3 Authority Key Identifier:
keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/DkFI2i-dlKroiwNlcRZFWrwEfrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2a0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:eb:5d:34:81:e6:4c:fd:bc:9d:4a:5a:51:07:0c:23:eb:88:
3d:68:13:c8:7c:83:b1:95:e3:88:16:ff:66:3f:78:f2:1f:3a:
cc:8d:a7:f5:cf:ae:2b:a7:3e:fb:e8:f2:c5:85:83:85:07:a5:
80:f1:4f:45:a0:4f:96:12:2f:11:65:80:0e:97:0d:2a:bb:fd:
6f:06:a4:7b:55:20:5b:33:ba:18:f9:c6:a8:83:c9:5d:85:bc:
03:ab:ca:bd:78:9c:cf:84:2c:c0:63:11:39:00:90:85:b4:1f:
54:4d:55:b2:59:2f:b9:fc:bd:7f:b5:e9:d6:31:fb:57:35:5b:
18:fc:21:7f:52:77:21:be:bb:20:76:1e:33:fe:52:77:33:d1:
38:70:1b:e1:44:e0:ac:33:d1:e9:b4:df:7b:e6:e1:4c:4e:1c:
d9:6e:02:0c:21:a1:c2:8e:99:ca:a2:1b:d9:b0:2f:09:72:6b:
4a:c6:60:2b:55:52:bc:57:5f:92:56:63:bf:33:98:85:9f:c0:
0e:95:ac:d0:fe:27:b5:2e:7e:aa:8b:42:03:d4:aa:4e:3b:09:
d1:1e:20:ca:6e:88:38:02:8d:48:ba:9e:30:47:00:9a:e1:87:
74:7f:c0:e6:bf:3b:e2:43:54:29:a7:0c:ed:66:5c:8d:bc:93:
58:85:38:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZSPRnNwjKV0rd1w/rbXx8wFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl
MjVjYjUwHhcNMjUwMTIyMTgyOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQxNDhkYTJmOWQ5NGFhZTg4YjAzNjU3MTE2NDU1YWJjMDQ3ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA0WckvZNXXynvhrgSWrHkjo7v0w
+mfloIvDhpAYmch+hUXJ5XVxBKRQeQX+DDa4upzzeSZ0YooxUijlGsjTJ8b/JPt+
4zHqKJrSftuUx8FzTRGWfh7zn8b5ZXmK2UoBxicHReJ0Kl+KGeHZC0gB7X6HytOz
5RPsCO9kAzS7qZQODNmSU15NcZTZmJGvsHK2T3jXp3/hqY8+28xm69elVo6sYJ1+
k1UXfZWcbAnjX9i8vKftXxX7Iq58B9U3ycF2x6OqvqVnKgdvtjSV7kFd9wFJeha2
opToqqGZnQjYwb/OIhGzpGPCzGw4mnDk0xigz/V9ve5rG6nddinCPVOUHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA5BSNovnZSq6IsDZXEWRVq8BH6zMB8GA1UdIwQY
MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt
MmI3YzFlZGYxMTZhLzEvRGtGSTJpLWRsS3JvaXdObGNSWkZXcndFZnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh
LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAKg
MA0GCSqGSIb3DQEBCwUAA4IBAQB/6100geZM/bydSlpRBwwj64g9aBPIfIOxleOI
Fv9mP3jyHzrMjaf1z64rpz776PLFhYOFB6WA8U9FoE+WEi8RZYAOlw0qu/1vBqR7
VSBbM7oY+caog8ldhbwDq8q9eJzPhCzAYxE5AJCFtB9UTVWyWS+5/L1/tenWMftX
NVsY/CF/Unchvrsgdh4z/lJ3M9E4cBvhROCsM9HptN975uFMThzZbgIMIaHCjpnK
ohvZsC8JcmtKxmArVVK8V1+SVmO/M5iFn8AOlazQ/ie1Ln6qi0ID1KpOOwnRHiDK
bog4Ao1Iup4wRwCa4Yd0f8DmvzviQ1QppwztZlyNvJNYhTjm
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:39:14 2025 by rpki-client