Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5Itm07y0ybgza6otUT0AwwsogX4.roa
File: 5Itm07y0ybgza6otUT0AwwsogX4.roa (raw, json)
Hash identifier: UlwenaLF8MmFCVrYpyyjJSaBSRekzT3zh878dS0j1xw=
Subject key identifier: E4:8B:66:D3:BC:B4:C9:B8:33:6B:AA:2D:51:3D:00:C3:0B:28:81:7E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369EA6E5738D2F6DA47259494A16CE6
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5Itm07y0ybgza6otUT0AwwsogX4.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198266
IP address blocks: 2a0f:7803:f890::/44 maxlen: 48
2a0f:7803:ffd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ea:6e:57:38:d2:f6:da:47:25:94:94:a1:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e48b66d3bcb4c9b8336baa2d513d00c30b28817e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:39:84:8f:37:5a:3b:df:50:f4:03:30:98:
ce:5c:11:be:77:d8:ca:95:22:2b:51:99:e1:6c:c2:
30:a7:78:f4:80:98:02:8d:b6:3e:df:eb:7a:b5:69:
38:d9:82:93:cc:7d:03:3e:01:83:a0:70:e7:c7:2c:
29:75:fe:1c:87:7d:54:ef:ca:d1:bd:ce:46:7e:42:
44:6b:ca:c6:57:ae:6a:3b:ae:89:0e:68:b3:c0:aa:
74:01:1a:6f:5a:dd:17:1c:9a:3a:0d:8b:cd:e3:03:
5d:27:90:79:c1:08:ad:64:9a:37:b7:99:e7:c0:ee:
88:c9:0d:af:c0:08:cf:4f:d0:0f:7e:17:8c:a2:f9:
64:52:f4:2c:16:b4:32:9f:93:bb:90:ff:39:ff:73:
f1:46:a5:d9:90:dd:e8:79:bd:69:5d:d3:3c:28:94:
17:36:2c:36:2f:1e:ab:e2:c8:6b:c8:aa:79:81:6b:
e2:36:da:ea:45:cd:f6:ab:28:0e:44:f4:3a:63:d9:
4b:11:15:16:ef:a2:ff:7d:1d:a4:81:82:95:af:84:
f8:d6:ae:bc:39:81:ad:5a:1b:ea:f5:52:ce:d5:41:
f0:f8:c4:00:14:32:a4:57:78:86:aa:e7:ea:a8:b1:
ad:ca:c6:2d:01:d4:18:0c:57:0d:17:7d:ea:cc:03:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:66:D3:BC:B4:C9:B8:33:6B:AA:2D:51:3D:00:C3:0B:28:81:7E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5Itm07y0ybgza6otUT0AwwsogX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f890::/44
2a0f:7803:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
32:07:90:f3:a6:02:b8:f7:9c:01:84:e8:33:d6:86:87:13:bb:
ad:ec:36:fb:26:0b:be:ad:dc:e7:c8:9a:ba:31:fe:34:b0:a8:
95:fe:58:b5:24:cd:ee:20:2d:05:d0:9b:a5:e5:86:0b:cf:cd:
62:8b:0f:06:df:79:63:8d:91:82:c1:ac:6f:b8:c4:6c:26:d7:
eb:ee:03:02:1d:9c:51:78:ec:8e:0c:d1:f6:fa:87:ef:d9:96:
49:36:aa:5f:ae:96:df:15:5c:08:e2:3c:fe:3d:43:94:12:78:
e7:e2:66:60:cb:99:d4:a9:94:82:4e:aa:52:c6:49:ea:47:b3:
1b:a5:4d:3b:ef:5c:74:e4:a8:e5:26:11:29:06:7d:f7:7f:29:
6d:ac:78:98:88:3a:f5:f0:b4:36:6a:2c:6e:6e:e3:d7:30:f5:
7c:ca:83:a9:a9:4c:72:8e:74:46:4d:55:1d:4c:75:e3:13:45:
9c:a4:21:b5:fa:d1:4e:94:13:db:99:ee:fb:54:89:45:52:7a:
18:ea:85:d1:62:27:26:c8:e5:5b:08:41:58:f6:a8:58:c3:b8:
49:f5:a6:4c:23:fe:20:85:4e:6d:cc:34:f6:f3:36:c3:95:66:
0b:35:6d:ba:82:2e:18:4c:ee:4c:39:b7:57:c5:54:53:e1:91:
92:20:89:5c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQjaepuVzjS9tpHJZSUoWzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjUwMTAxMTk0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDhiNjZkM2JjYjRjOWI4MzM2YmFhMmQ1MTNkMDBjMzBiMjg4MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvA5hI83WjvfUPQDMJjOXBG+d9jK
lSIrUZnhbMIwp3j0gJgCjbY+3+t6tWk42YKTzH0DPgGDoHDnxywpdf4ch31U78rR
vc5GfkJEa8rGV65qO66JDmizwKp0ARpvWt0XHJo6DYvN4wNdJ5B5wQitZJo3t5nn
wO6IyQ2vwAjPT9APfheMovlkUvQsFrQyn5O7kP85/3PxRqXZkN3oeb1pXdM8KJQX
Niw2Lx6r4shryKp5gWviNtrqRc32qygORPQ6Y9lLERUW76L/fR2kgYKVr4T41q68
OYGtWhvq9VLO1UHw+MQAFDKkV3iGqufqqLGtysYtAdQYDFcNF33qzAMhvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOSLZtO8tMm4M2uqLVE9AMMLKIF+MB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvNUl0bTA3eTB5Ymd6YTZvdFVUMEF3d3NvZ1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/iQ
AwcEKg94A//QMA0GCSqGSIb3DQEBCwUAA4IBAQAyB5DzpgK495wBhOgz1oaHE7ut
7Db7Jgu+rdznyJq6Mf40sKiV/li1JM3uIC0F0Jul5YYLz81iiw8G33ljjZGCwaxv
uMRsJtfr7gMCHZxReOyODNH2+ofv2ZZJNqpfrpbfFVwI4jz+PUOUEnjn4mZgy5nU
qZSCTqpSxknqR7MbpU0771x05KjlJhEpBn33fyltrHiYiDr18LQ2aixubuPXMPV8
yoOpqUxyjnRGTVUdTHXjE0WcpCG1+tFOlBPbme77VIlFUnoY6oXRYicmyOVbCEFY
9qhYw7hJ9aZMI/4ghU5tzDT28zbDlWYLNW26gi4YTO5MObdXxVRT4ZGSIIlc
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:16 2025 by rpki-client