Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7wwVE3D-9S02zZHYODu4fjgkdrA.roa
File: 7wwVE3D-9S02zZHYODu4fjgkdrA.roa (raw, json)
Hash identifier: jhonLrvuQQYH84zj5GkyKz64ve1vu38mkVq9VF1nito=
Subject key identifier: EF:0C:15:13:70:FE:F5:2D:36:CD:91:D8:38:3B:B8:7E:38:24:76:B0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194282571B7608BDF217D08A255C9DF467A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7wwVE3D-9S02zZHYODu4fjgkdrA.roa
Signing time: Thu 02 Jan 2025 17:52:09 +0000
ROA not before: Thu 02 Jan 2025 17:52:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 922
IP address blocks: 2a0f:b241::/48 maxlen: 48
2a0f:b241:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:71:b7:60:8b:df:21:7d:08:a2:55:c9:df:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0c151370fef52d36cd91d8383bb87e382476b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:b0:99:43:ab:a8:88:2d:0e:bf:ee:64:29:
8f:b3:69:90:0f:5a:6c:3b:12:56:41:f5:b8:4e:a5:
e0:2c:31:30:e6:b8:30:bd:ed:5b:ca:f7:64:9b:71:
b3:49:54:15:77:ef:cf:f0:28:fd:eb:bc:f7:b3:d3:
97:84:f6:cf:c9:87:66:01:fb:c5:02:09:87:c9:59:
05:3e:cc:e8:89:19:43:94:6f:a7:84:ed:e1:8c:35:
55:a7:35:f1:2f:b4:4b:36:6e:76:de:a1:6a:8c:5c:
68:2e:50:fe:00:eb:c6:4f:ff:d5:f8:27:e0:e2:93:
ad:5d:2e:6c:d6:70:39:88:2b:69:8f:dd:1b:2d:7a:
51:86:6a:a9:9a:ea:ec:df:73:12:87:5f:d2:6d:0d:
2e:51:8d:ab:c2:fe:bf:25:61:0a:ac:f2:92:a9:11:
ed:6a:02:fe:54:b8:9d:6d:02:4f:c7:66:23:aa:48:
de:91:6c:ea:02:57:76:12:0d:33:8e:73:86:ed:bb:
64:a9:c6:e6:5e:f5:d9:09:23:96:72:7f:c6:f3:ac:
76:ab:e4:50:95:2f:5e:fe:cc:e9:87:22:55:e6:b6:
0b:41:f5:35:dc:5b:6e:e3:c2:64:dd:4f:1e:ac:ab:
5b:66:d0:30:ab:ea:46:07:ec:ee:1e:4c:93:38:c1:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:15:13:70:FE:F5:2D:36:CD:91:D8:38:3B:B8:7E:38:24:76:B0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7wwVE3D-9S02zZHYODu4fjgkdrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241::/48
2a0f:b241:2::/48
Signature Algorithm: sha256WithRSAEncryption
74:f3:1d:37:2f:3a:8f:b8:dc:13:7c:a8:d7:23:00:db:f8:f8:
37:d8:5e:3a:7c:6a:10:92:fa:f9:44:f2:64:6e:76:f9:91:07:
30:62:0e:d3:17:60:0a:ce:c4:07:98:2b:49:46:f2:3b:10:87:
55:ad:4d:e0:86:d6:a0:1a:bf:9d:8a:68:e5:4b:ab:39:b1:87:
ae:aa:4f:c8:12:1f:d1:3f:e7:fa:7b:bd:ea:32:c3:64:bb:63:
4c:5b:f9:54:d9:75:cd:42:56:60:c4:18:f0:7d:a6:7c:7e:ae:
1f:85:26:fa:6b:67:aa:a1:a8:ad:74:e4:be:f1:50:57:ea:6e:
25:3b:fb:1e:fc:a9:37:39:00:a3:3f:19:5e:26:ef:6d:2b:95:
ff:02:34:28:ba:9e:69:ae:a7:57:e5:2b:22:cd:b6:e4:71:ee:
b1:30:8d:bf:0c:bc:13:ae:a4:7d:3f:74:e8:2f:83:9c:0f:5f:
d1:a7:8c:7d:45:a5:6d:57:bf:c0:27:b9:7a:9f:1f:9e:e2:a3:
6b:86:46:ad:72:c0:b1:cf:6e:00:3b:91:86:74:9a:2f:65:6d:
f4:58:3c:10:09:f2:ec:fd:b7:6e:f1:f9:e3:d6:40:da:80:26:
2c:4f:cd:e9:8e:77:dc:87:1f:17:b5:70:b6:e8:92:74:f8:8d:
a2:fb:f3:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJXG3YIvfIX0IolXJ30Z6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwMTAyMTc1MjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjBjMTUxMzcwZmVmNTJkMzZjZDkxZDgzODNiYjg3ZTM4MjQ3NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GGwmUOrqIgtDr/uZCmPs2mQD1ps
OxJWQfW4TqXgLDEw5rgwve1byvdkm3GzSVQVd+/P8Cj967z3s9OXhPbPyYdmAfvF
AgmHyVkFPszoiRlDlG+nhO3hjDVVpzXxL7RLNm523qFqjFxoLlD+AOvGT//V+Cfg
4pOtXS5s1nA5iCtpj90bLXpRhmqpmurs33MSh1/SbQ0uUY2rwv6/JWEKrPKSqRHt
agL+VLidbQJPx2YjqkjekWzqAld2Eg0zjnOG7btkqcbmXvXZCSOWcn/G86x2q+RQ
lS9e/szphyJV5rYLQfU13Ftu48Jk3U8erKtbZtAwq+pGB+zuHkyTOMHV/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO8MFRNw/vUtNs2R2Dg7uH44JHawMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvN3d3VkUzRC05UzAyelpIWU9EdTRmamdrZHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+yQQAA
AwcAKg+yQQACMA0GCSqGSIb3DQEBCwUAA4IBAQB08x03LzqPuNwTfKjXIwDb+Pg3
2F46fGoQkvr5RPJkbnb5kQcwYg7TF2AKzsQHmCtJRvI7EIdVrU3ghtagGr+dimjl
S6s5sYeuqk/IEh/RP+f6e73qMsNku2NMW/lU2XXNQlZgxBjwfaZ8fq4fhSb6a2eq
oaitdOS+8VBX6m4lO/se/Kk3OQCjPxleJu9tK5X/AjQoup5prqdX5Ssizbbkce6x
MI2/DLwTrqR9P3ToL4OcD1/Rp4x9RaVtV7/AJ7l6nx+e4qNrhkatcsCxz24AO5GG
dJovZW30WDwQCfLs/bdu8fnj1kDagCYsT83pjnfchx8XtXC26JJ0+I2i+/Md
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:35 2025 by rpki-client