Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/e70_76D8VUKzyOllsP-C6ko3aJ4.roa
File: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (raw, json)
Hash identifier: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=
Subject key identifier: 7B:BD:3F:EF:A0:FC:55:42:B3:C8:E9:65:B0:FF:82:EA:4A:37:68:9E
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01941FFA6E4B0F811FF811182CDE858E94BD
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/e70_76D8VUKzyOllsP-C6ko3aJ4.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204333
IP address blocks: 2a13:5681::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:4b:0f:81:1f:f8:11:18:2c:de:85:8e:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bbd3fefa0fc5542b3c8e965b0ff82ea4a37689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:9c:91:0a:af:58:9c:9f:1e:d0:cf:a0:a9:
3f:d4:25:c1:89:2e:d3:27:64:04:da:a4:69:4b:8c:
37:05:54:ed:f2:e4:14:8b:4b:d2:19:b8:a2:5e:a5:
ab:de:1e:ab:03:ed:91:c9:ef:38:d1:9f:82:65:7e:
9d:62:99:ae:99:5a:9e:98:64:ab:fa:05:9b:91:31:
f5:53:d3:27:75:3c:cd:1b:2e:f6:e3:2a:90:e6:4f:
4f:bb:ba:a1:f2:0a:c3:ce:e5:6c:0e:fd:4b:04:01:
da:35:9a:e3:46:2d:43:66:2d:64:ef:a4:97:f7:3d:
62:68:47:13:13:6a:86:06:ab:b8:af:3b:bb:51:23:
5c:43:91:18:04:a5:b7:27:12:6f:62:08:89:72:a6:
19:9b:fc:c3:07:19:f2:31:a4:aa:1c:ca:25:34:52:
63:b1:a7:44:f9:39:18:86:d0:d1:67:ec:3f:98:08:
b2:ef:26:d3:94:8b:2f:dc:6c:01:c3:4c:01:c7:59:
95:1b:5d:e1:bd:6c:9e:d2:27:c9:17:1b:52:3d:de:
1d:40:61:05:7c:36:73:be:bc:7c:01:fe:9e:2b:d0:
62:47:2d:cd:68:65:0a:75:9d:b7:91:88:95:08:37:
ab:57:56:fd:77:8c:24:bb:80:d3:5a:e6:92:d4:4f:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:3F:EF:A0:FC:55:42:B3:C8:E9:65:B0:FF:82:EA:4A:37:68:9E
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/e70_76D8VUKzyOllsP-C6ko3aJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5681::/40
Signature Algorithm: sha256WithRSAEncryption
82:76:96:62:4f:cc:28:aa:19:47:63:46:b6:fd:e8:33:d6:18:
b2:04:80:ee:8a:a0:94:33:95:01:ae:2d:ae:4c:23:79:52:75:
59:c3:f3:2e:4b:48:9b:66:b2:e0:b2:85:bc:ae:c3:a5:ee:41:
e8:24:a0:6f:3a:66:58:d3:1b:e6:77:97:ba:a0:3c:8e:9e:3b:
e2:a6:7a:e6:5f:60:5b:e6:20:d7:25:6c:bf:5e:d8:81:76:43:
1f:66:34:28:d2:f5:39:69:be:2c:5d:de:81:80:2e:20:bc:b4:
d2:ca:8c:cf:e5:c3:f5:9a:42:b6:e8:93:e3:ff:ef:ac:5c:9b:
d0:2d:1a:5e:e3:0b:ee:3e:d3:06:20:b2:06:3f:cc:00:6f:c9:
b5:f7:68:3f:84:97:8c:a9:2c:2e:1b:6e:03:64:61:41:ae:d7:
bc:23:17:18:4f:78:43:e8:75:a8:58:c2:ac:03:49:d5:7d:83:
15:41:55:43:ce:01:06:e9:10:5e:ac:6f:d4:5c:a4:7c:53:1f:
b2:a1:b2:e3:63:8a:ac:65:9c:02:ec:54:fe:82:af:a4:b4:5b:
24:a7:c6:ca:48:70:90:52:ab:41:a8:e9:f9:38:50:e2:8b:39:
78:06:31:80:1a:92:06:d4:cf:7f:fd:93:27:63:11:ef:d8:94:
28:eb:48:ec
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQf+m5LD4Ef+BEYLN6FjpS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmJkM2ZlZmEwZmM1NTQyYjNjOGU5NjViMGZmODJlYTRhMzc2ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4GckQqvWJyfHtDPoKk/1CXBiS7T
J2QE2qRpS4w3BVTt8uQUi0vSGbiiXqWr3h6rA+2Rye840Z+CZX6dYpmumVqemGSr
+gWbkTH1U9MndTzNGy724yqQ5k9Pu7qh8grDzuVsDv1LBAHaNZrjRi1DZi1k76SX
9z1iaEcTE2qGBqu4rzu7USNcQ5EYBKW3JxJvYgiJcqYZm/zDBxnyMaSqHMolNFJj
sadE+TkYhtDRZ+w/mAiy7ybTlIsv3GwBw0wBx1mVG13hvWye0ifJFxtSPd4dQGEF
fDZzvrx8Af6eK9BiRy3NaGUKdZ23kYiVCDerV1b9d4wku4DTWuaS1E/uUwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHu9P++g/FVCs8jpZbD/gupKN2ieMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvZTcwXzc2RDhWVUt6eU9sbHNQLUM2a28zYUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhNWgQAw
DQYJKoZIhvcNAQELBQADggEBAIJ2lmJPzCiqGUdjRrb96DPWGLIEgO6KoJQzlQGu
La5MI3lSdVnD8y5LSJtmsuCyhbyuw6XuQegkoG86ZljTG+Z3l7qgPI6eO+KmeuZf
YFvmINclbL9e2IF2Qx9mNCjS9Tlpvixd3oGALiC8tNLKjM/lw/WaQrbok+P/76xc
m9AtGl7jC+4+0wYgsgY/zABvybX3aD+El4ypLC4bbgNkYUGu17wjFxhPeEPodahY
wqwDSdV9gxVBVUPOAQbpEF6sb9RcpHxTH7KhsuNjiqxlnALsVP6Cr6S0WySnxspI
cJBSq0Go6fk4UOKLOXgGMYAakgbUz3/9kydjEe/YlCjrSOw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:30:16 2025 by rpki-client