Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/9-7PXLkycA5xYo3u8CzH5ezxMXA.roa
File: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (raw, json)
Hash identifier: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=
Subject key identifier: F7:EE:CF:5C:B9:32:70:0E:71:62:8D:EE:F0:2C:C7:E5:EC:F1:31:70
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 019420681C41DA3D2FD7A9DFA6A9B633A4F1
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/9-7PXLkycA5xYo3u8CzH5ezxMXA.roa
Signing time: Wed 01 Jan 2025 05:48:01 +0000
ROA not before: Wed 01 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45038
IP address blocks: 2001:67c:630::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1c:41:da:3d:2f:d7:a9:df:a6:a9:b6:33:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Jan 1 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7eecf5cb932700e71628deef02cc7e5ecf13170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:e8:34:c7:aa:7f:bc:46:32:7f:b7:16:e4:
bc:cc:6b:a7:13:66:39:56:9d:f5:d3:80:08:5d:c4:
e3:7c:86:2e:b5:a2:e6:f0:82:2a:dc:44:fd:ca:b2:
1e:85:a6:f7:b6:29:28:4a:7f:13:d1:df:4c:c6:9f:
24:bb:54:9c:5c:fd:69:09:0a:d5:23:e5:87:3e:c6:
1b:59:a6:10:8c:2b:4b:49:0e:8f:db:5e:24:a2:50:
37:e1:0f:f5:d1:95:cd:0b:ff:30:12:9a:90:14:8f:
ea:92:d1:fa:5b:a3:5b:dc:75:2c:4b:10:7a:ca:70:
d3:fd:11:66:b4:59:0d:3c:b6:d2:4d:16:38:81:3a:
1a:0b:42:39:04:9e:74:20:11:2b:0c:af:cd:61:fc:
31:a2:00:dc:94:ae:93:5e:de:1e:4a:91:15:77:d6:
60:fa:93:7f:55:56:4f:91:35:f0:59:23:8e:d0:12:
78:6c:3d:17:47:3e:3a:51:b6:64:b8:f9:98:0d:80:
34:5b:2b:a6:09:c8:38:56:8b:36:a6:17:64:94:ca:
a6:97:14:92:38:35:f8:a3:2c:e6:8e:4c:f1:48:c6:
51:db:46:b5:a6:f2:a6:d8:47:85:c5:00:b3:fb:f8:
be:97:61:ce:e5:f2:f5:8c:82:16:a7:3e:c7:96:29:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EE:CF:5C:B9:32:70:0E:71:62:8D:EE:F0:2C:C7:E5:EC:F1:31:70
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/9-7PXLkycA5xYo3u8CzH5ezxMXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:630::/48
Signature Algorithm: sha256WithRSAEncryption
ae:01:69:ee:bb:31:75:99:89:f5:65:fe:11:1c:16:ab:56:72:
95:ea:b6:ca:9d:1e:10:24:d1:df:ac:a4:b2:89:b2:b2:c9:26:
3a:69:e8:12:b3:59:c5:e4:da:a6:91:01:1b:9a:8d:40:3f:64:
4f:c6:2b:c1:80:42:75:e6:16:2c:b1:18:b0:44:a5:e5:59:1c:
7f:a2:00:80:21:ac:30:80:aa:4c:be:a9:8c:ea:ea:7f:5b:53:
bf:f8:cb:50:5f:7c:39:77:09:1c:93:68:ac:42:e0:76:6e:63:
a8:0c:9a:4a:a2:eb:31:b6:cf:95:95:36:7a:d4:6b:6b:99:3c:
09:98:60:e6:78:1f:87:bf:60:f0:0b:de:bf:e8:e8:81:e6:8d:
54:e7:ce:54:b5:78:4c:f5:1b:a7:d8:6d:31:27:84:70:6e:e4:
ac:41:e5:07:55:a9:3b:c6:4d:0d:4b:90:16:f5:cc:17:b9:65:
c0:2a:16:2f:ba:ce:da:14:e1:16:73:e4:61:7a:a5:e4:02:2c:
d1:73:64:09:a6:04:c1:b5:75:46:70:ef:a3:95:7d:54:14:7e:
5e:7f:4e:03:ed:f9:7c:ab:5a:8f:53:06:ed:d2:af:1e:21:4d:
16:44:fc:1d:c4:09:a3:2b:11:dc:dc:d8:fe:c4:26:80:3f:d8:
a7:b9:8a:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgaBxB2j0v16nfpqm2M6TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw
NjMxYWYwHhcNMjUwMTAxMDU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2VlY2Y1Y2I5MzI3MDBlNzE2MjhkZWVmMDJjYzdlNWVjZjEzMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRfoNMeqf7xGMn+3FuS8zGunE2Y5
Vp3104AIXcTjfIYutaLm8IIq3ET9yrIehab3tikoSn8T0d9Mxp8ku1ScXP1pCQrV
I+WHPsYbWaYQjCtLSQ6P214kolA34Q/10ZXNC/8wEpqQFI/qktH6W6Nb3HUsSxB6
ynDT/RFmtFkNPLbSTRY4gToaC0I5BJ50IBErDK/NYfwxogDclK6TXt4eSpEVd9Zg
+pN/VVZPkTXwWSOO0BJ4bD0XRz46UbZkuPmYDYA0WyumCcg4Vos2phdklMqmlxSS
ODX4oyzmjkzxSMZR20a1pvKm2EeFxQCz+/i+l2HO5fL1jIIWpz7HlintGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPfuz1y5MnAOcWKN7vAsx+Xs8TFwMB8GA1UdIwQY
MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt
NDg0NTlkMDdiNDFlLzEvOS03UFhMa3ljQTV4WW8zdThDekg1ZXp4TVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl
LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYw
MA0GCSqGSIb3DQEBCwUAA4IBAQCuAWnuuzF1mYn1Zf4RHBarVnKV6rbKnR4QJNHf
rKSyibKyySY6aegSs1nF5NqmkQEbmo1AP2RPxivBgEJ15hYssRiwRKXlWRx/ogCA
IawwgKpMvqmM6up/W1O/+MtQX3w5dwkck2isQuB2bmOoDJpKousxts+VlTZ61Gtr
mTwJmGDmeB+Hv2DwC96/6OiB5o1U585UtXhM9Run2G0xJ4RwbuSsQeUHVak7xk0N
S5AW9cwXuWXAKhYvus7aFOEWc+RheqXkAizRc2QJpgTBtXVGcO+jlX1UFH5ef04D
7fl8q1qPUwbt0q8eIU0WRPwdxAmjKxHc3Nj+xCaAP9inuYoz
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:16:28 2025 by rpki-client