Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa
File: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (raw, json)
Hash identifier: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=
Subject key identifier: C7:C1:21:BF:36:9C:E0:A8:1C:2C:33:92:7C:91:57:C5:38:28:35:63
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF72E06D96D4AF6D1B8BB413B67F5
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18041
IP address blocks: 2a0f:607:1051::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f7:2e:06:d9:6d:4a:f6:d1:b8:bb:41:3b:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7c121bf369ce0a81c2c33927c9157c538283563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:6c:26:99:d2:aa:ed:c2:65:ca:a6:2d:92:
55:5c:5c:b0:2d:ac:9d:e4:a5:ec:fc:b1:0c:ec:cb:
34:85:31:d9:2a:af:85:52:60:e6:36:5a:fc:69:38:
fd:bf:43:ed:86:a2:7e:44:cf:d9:85:bf:e1:22:e4:
67:cd:e0:0e:5e:6d:e3:58:0c:c6:38:b9:50:23:a4:
a0:6e:66:01:87:ed:ee:3b:bb:c8:64:c5:77:bf:d0:
70:cf:87:89:14:f0:b6:10:d5:bb:37:eb:52:a7:0e:
89:3f:7d:37:0d:d1:4f:71:fe:cc:ed:f0:ff:86:8f:
39:48:4b:16:0c:2c:0d:00:ef:06:62:c9:f2:b7:21:
23:c0:0a:bf:a0:af:a4:41:4f:75:53:a3:65:43:9f:
28:fc:96:1f:95:8f:17:89:fc:a3:35:d1:3e:2a:1d:
bf:e6:18:19:85:19:c3:ed:35:e1:a2:6e:b4:2e:bd:
61:bc:fc:6b:dd:83:b2:0b:0c:4b:b9:96:f2:3c:fb:
1b:1c:b4:d9:fa:3f:f8:0b:16:87:31:fd:11:71:f6:
cc:40:1c:05:3e:7e:91:cf:b6:d3:ee:5b:91:c8:ba:
3e:df:d8:78:41:0d:a0:e9:71:31:59:4b:c4:c8:d2:
60:9d:e0:12:1c:76:23:e5:1a:32:76:09:73:53:2d:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:21:BF:36:9C:E0:A8:1C:2C:33:92:7C:91:57:C5:38:28:35:63
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1051::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c6:b6:20:ab:65:8d:cf:2f:16:9f:e9:d0:ab:1d:d8:4c:45:
f6:4f:4a:c0:83:46:07:6c:e9:22:d1:2c:d3:40:17:03:95:0e:
19:14:10:01:71:9b:3d:64:80:f9:dd:9a:8f:6e:01:50:8f:b2:
b7:7a:09:0c:6e:18:bc:19:6b:88:f1:a8:19:b1:43:80:35:f0:
a1:5e:df:24:bd:ab:f3:3a:cc:63:16:8a:06:de:b8:31:2f:68:
d9:30:30:6e:4c:09:c5:c9:ae:57:6b:fb:10:3e:3f:05:66:9f:
c9:6d:97:6c:59:9a:9a:cf:aa:46:7b:74:14:74:32:78:f6:fb:
12:6d:43:b4:a0:68:b4:5f:1e:9c:74:e2:82:34:05:dd:1c:a5:
30:13:ce:73:6d:f6:dd:db:84:78:d8:53:73:6e:ef:d3:7d:82:
4f:5b:b3:f0:46:1c:1a:3a:46:09:d6:40:49:b3:35:d8:75:39:
01:dd:3d:11:6b:bc:4d:f1:4d:38:a5:4b:38:18:84:18:cd:6f:
b9:29:af:1d:06:e1:8a:00:53:80:47:f6:ac:c1:6e:42:ee:40:
06:3a:5d:e2:87:21:ce:43:ab:9d:97:e9:65:31:42:f9:01:b0:
84:21:6c:c5:74:1c:a0:82:0f:f9:ce:23:b5:2a:32:f1:82:bc:
96:b2:88:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+vcuBtltSvbRuLtBO2f1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5
NWRmYzYwHhcNMjUwMTAxMTc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2MxMjFiZjM2OWNlMGE4MWMyYzMzOTI3YzkxNTdjNTM4MjgzNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGtsJpnSqu3CZcqmLZJVXFywLayd
5KXs/LEM7Ms0hTHZKq+FUmDmNlr8aTj9v0PthqJ+RM/Zhb/hIuRnzeAOXm3jWAzG
OLlQI6SgbmYBh+3uO7vIZMV3v9Bwz4eJFPC2ENW7N+tSpw6JP303DdFPcf7M7fD/
ho85SEsWDCwNAO8GYsnytyEjwAq/oK+kQU91U6NlQ58o/JYflY8XifyjNdE+Kh2/
5hgZhRnD7TXhom60Lr1hvPxr3YOyCwxLuZbyPPsbHLTZ+j/4CxaHMf0RcfbMQBwF
Pn6Rz7bT7luRyLo+39h4QQ2g6XExWUvEyNJgneASHHYj5RoydglzUy3FrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMfBIb82nOCoHCwzknyRV8U4KDVjMB8GA1UdIwQY
MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut
YTM0NzU2NDE1OGY4LzEveDhFaHZ6YWM0S2djTERPU2ZKRlh4VGdvTldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4
LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBR
MA0GCSqGSIb3DQEBCwUAA4IBAQBfxrYgq2WNzy8Wn+nQqx3YTEX2T0rAg0YHbOki
0SzTQBcDlQ4ZFBABcZs9ZID53ZqPbgFQj7K3egkMbhi8GWuI8agZsUOANfChXt8k
vavzOsxjFooG3rgxL2jZMDBuTAnFya5Xa/sQPj8FZp/JbZdsWZqaz6pGe3QUdDJ4
9vsSbUO0oGi0Xx6cdOKCNAXdHKUwE85zbfbd24R42FNzbu/TfYJPW7PwRhwaOkYJ
1kBJszXYdTkB3T0Ra7xN8U04pUs4GIQYzW+5Ka8dBuGKAFOAR/aswW5C7kAGOl3i
hyHOQ6udl+llMUL5AbCEIWzFdByggg/5ziO1KjLxgryWsoi7
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:18 2025 by rpki-client