Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa
File: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (raw, json)
Hash identifier: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=
Subject key identifier: D2:7D:10:04:F7:B4:4D:DA:0D:6F:6D:42:B0:4C:97:9B:5F:82:93:1C
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 019421444370CCAD906876E0E4B6B72B06FF
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:5640::/36 maxlen: 48
2a03:5640:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:70:cc:ad:90:68:76:e0:e4:b6:b7:2b:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27d1004f7b44dda0d6f6d42b04c979b5f82931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:7f:8a:57:4d:e3:a1:2d:41:ab:a1:18:78:
0c:ce:e0:4e:a2:62:42:d5:5a:2f:2c:43:5a:36:39:
63:00:ec:4b:66:a9:a4:00:1d:d2:12:07:82:be:0c:
06:ac:cd:b1:ca:33:dd:9f:b6:77:d3:44:81:6b:dd:
25:5a:4b:ce:1b:0e:6e:c0:bf:f9:68:d1:bf:b1:c1:
d0:8a:2e:f2:8a:11:eb:88:a2:33:5f:f8:11:a9:96:
3a:85:2b:fa:d9:08:e7:a3:c4:18:c1:85:7d:c0:36:
74:14:dc:54:d4:65:f9:02:50:ca:bb:01:4b:6b:c6:
00:b9:46:98:7f:c9:2d:f9:4a:ef:bf:c8:39:00:ff:
d2:4e:3b:b6:02:aa:86:68:0e:29:3d:75:75:03:00:
f9:a1:5b:ea:40:9f:50:12:ee:f5:51:e6:39:3e:8b:
78:9f:43:17:23:c1:bf:8d:eb:56:2c:25:07:d6:5b:
bd:07:cd:5f:0d:9c:42:b7:b3:d7:33:52:bf:ae:f3:
08:83:8c:0c:ee:c8:62:7f:9d:b1:c4:73:0d:c1:a5:
88:17:b2:d6:70:a8:cd:a8:9a:2f:6b:f2:2b:34:47:
ae:a8:2b:02:01:cd:2b:aa:ee:88:7f:1c:71:65:5c:
ba:38:a7:a5:1d:af:7b:d2:c4:64:c0:48:31:1d:07:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:10:04:F7:B4:4D:DA:0D:6F:6D:42:B0:4C:97:9B:5F:82:93:1C
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5640::/36
2a03:5640:f000::/36
Signature Algorithm: sha256WithRSAEncryption
7f:60:79:4d:cf:ae:e8:93:b7:14:20:6e:93:68:9a:bc:f7:00:
38:e4:18:d7:0f:17:a6:20:08:80:2a:3e:e9:ab:6d:35:9d:8b:
9b:0b:41:80:63:6e:46:a7:c5:1d:ec:a7:c9:21:e9:ca:d6:19:
d1:09:75:2f:fe:05:ab:c1:65:5f:9b:31:d8:50:ab:a1:92:23:
ed:2c:54:f3:88:d8:e4:e2:ac:64:c7:b7:c1:8b:8a:1b:89:4b:
02:67:fc:c0:e5:e3:9f:09:9e:11:ab:08:50:f1:c3:57:2b:bf:
f2:8e:80:66:ee:cf:b2:c9:b1:8e:6e:c5:dd:17:21:1f:c4:a4:
a7:cb:ff:c5:55:36:26:f3:47:07:3d:bb:cf:b9:b1:38:c7:21:
a9:f3:01:3d:ae:0d:52:f1:b1:47:6d:2e:cc:dc:29:5a:d4:e4:
89:b0:01:fe:80:50:72:7b:d5:f0:e6:d0:e3:11:98:f0:09:46:
58:4e:88:7c:aa:a3:76:8c:69:02:9f:e4:7a:d1:e5:ea:9e:8d:
cb:32:40:2c:b4:2a:58:9a:d1:62:4e:b5:49:d9:0d:cc:c8:4d:
ab:c5:f8:28:a1:4c:f6:93:96:ae:db:18:7c:db:46:28:c2:37:
21:ab:a3:9b:e1:e8:87:62:77:6e:e3:76:a6:68:5a:9e:1e:59:
78:5c:bd:2c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQhRENwzK2QaHbg5La3Kwb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExOGJhNGVmOTAxYWFjMTA4NzZjY2Y5NzZhNWY3ZDE2YzRj
YTc5ZjAwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjdkMTAwNGY3YjQ0ZGRhMGQ2ZjZkNDJiMDRjOTc5YjVmODI5MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0J/ildN46EtQauhGHgMzuBOomJC
1VovLENaNjljAOxLZqmkAB3SEgeCvgwGrM2xyjPdn7Z300SBa90lWkvOGw5uwL/5
aNG/scHQii7yihHriKIzX/gRqZY6hSv62Qjno8QYwYV9wDZ0FNxU1GX5AlDKuwFL
a8YAuUaYf8kt+Urvv8g5AP/STju2AqqGaA4pPXV1AwD5oVvqQJ9QEu71UeY5Pot4
n0MXI8G/jetWLCUH1lu9B81fDZxCt7PXM1K/rvMIg4wM7shif52xxHMNwaWIF7LW
cKjNqJova/IrNEeuqCsCAc0rqu6IfxxxZVy6OKelHa970sRkwEgxHQde9wIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFNJ9EAT3tE3aDW9tQrBMl5tfgpMcMB8GA1UdIwQY
MBaAFBGLpO+QGqwQh2zPl2pffRbEynnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDIt
ZjJiNGVmYmE1OWJjLzEvMG4wUUJQZTBUZG9OYjIxQ3NFeVhtMS1Da3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDItZjJiNGVmYmE1OWJj
LzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKgNWQAAD
BgQqA1ZA8DANBgkqhkiG9w0BAQsFAAOCAQEAf2B5Tc+u6JO3FCBuk2iavPcAOOQY
1w8XpiAIgCo+6attNZ2LmwtBgGNuRqfFHeynySHpytYZ0Ql1L/4Fq8FlX5sx2FCr
oZIj7SxU84jY5OKsZMe3wYuKG4lLAmf8wOXjnwmeEasIUPHDVyu/8o6AZu7Pssmx
jm7F3RchH8Skp8v/xVU2JvNHBz27z7mxOMchqfMBPa4NUvGxR20uzNwpWtTkibAB
/oBQcnvV8ObQ4xGY8AlGWE6IfKqjdoxpAp/ketHl6p6NyzJALLQqWJrRYk61SdkN
zMhNq8X4KKFM9pOWrtsYfNtGKMI3Iaujm+Hoh2J3buN2pmhanh5ZeFy9LA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:37 2025 by rpki-client