Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/b9lO4JuPU_XGDEIOyFIyTFoywlI.roa
File: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (raw, json)
Hash identifier: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=
Subject key identifier: 6F:D9:4E:E0:9B:8F:53:F5:C6:0C:42:0E:C8:52:32:4C:5A:32:C2:52
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 0194258F06F177B6EB42FDF4CAA0703B487A
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/b9lO4JuPU_XGDEIOyFIyTFoywlI.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197422
IP address blocks: 2001:67c:2608::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:06:f1:77:b6:eb:42:fd:f4:ca:a0:70:3b:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd94ee09b8f53f5c60c420ec852324c5a32c252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:82:c7:26:ba:3d:b0:8f:0c:6f:0a:ba:66:
e7:e2:02:d4:a4:42:45:8b:53:57:9b:5a:96:d3:87:
3c:9a:52:2e:84:a5:b6:53:c6:ad:5a:07:85:5c:df:
28:4f:4a:d6:00:8b:a0:2e:29:9c:84:47:ee:e4:8a:
a7:6f:1c:a2:aa:56:b4:e3:80:d9:c0:33:d1:cb:ad:
14:39:f0:29:12:a3:72:28:ed:c3:2c:e7:33:65:63:
f0:64:79:55:28:6c:a2:fa:47:a0:15:15:83:e9:dc:
e6:0a:7d:c0:16:e5:48:7b:97:b2:b3:0f:92:95:20:
d6:0e:e1:50:56:d1:3c:3a:97:e4:8f:b0:eb:56:eb:
53:bb:0f:41:1f:5a:b2:c5:63:ed:dc:04:dc:29:6a:
00:8c:12:02:0e:10:ab:4b:09:e1:17:41:77:0a:b8:
bf:d9:0c:03:53:fc:da:fa:05:c0:48:55:87:b7:97:
e8:ac:84:e5:42:1e:49:1a:07:26:75:b8:eb:83:32:
f6:82:85:fa:c7:39:92:10:20:c6:63:d4:b3:e3:02:
05:76:9f:57:90:bf:28:7d:95:5e:21:1e:59:ac:5c:
27:9f:ed:01:52:a5:6e:29:62:a4:b1:eb:76:ee:21:
16:86:ab:9e:a3:b0:df:93:aa:4e:6b:4d:16:83:fe:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:4E:E0:9B:8F:53:F5:C6:0C:42:0E:C8:52:32:4C:5A:32:C2:52
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/b9lO4JuPU_XGDEIOyFIyTFoywlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2608::/48
Signature Algorithm: sha256WithRSAEncryption
29:1e:b9:31:61:c8:2d:90:ad:68:7c:1f:54:a8:4f:bb:dc:fa:
c8:6d:4b:e1:8d:c3:3f:4c:1e:d8:77:6c:07:2b:47:dd:f5:41:
cb:14:ea:0c:f0:95:0f:43:1e:fe:d3:19:ad:74:62:63:0a:95:
9f:01:b4:a2:b7:fa:ba:d0:71:ce:81:eb:dc:c0:90:87:81:00:
df:ef:e5:54:5f:c5:9c:bd:37:a2:63:81:89:dc:5c:ef:2d:e8:
56:01:ec:44:7e:26:94:c1:0f:52:a0:b7:f6:5c:5f:b6:44:47:
28:2b:ed:24:84:e9:64:f9:c3:75:65:49:5a:27:89:a6:3d:25:
f6:92:0e:ba:ca:af:4a:43:9d:77:30:29:fc:01:13:32:22:7d:
c8:09:fe:2c:07:4c:8c:48:43:4c:bc:13:eb:d7:82:d9:8f:d7:
bc:d6:d3:dc:f1:51:3c:a9:a1:db:c4:1f:c7:01:53:d8:46:27:
63:f7:31:b1:d0:ae:c8:c7:dc:72:70:e6:08:13:bb:78:04:b5:
7e:a5:79:97:49:d8:10:a7:f9:ba:2d:92:01:56:ee:a0:47:d4:
d2:33:38:e0:3b:57:38:f7:61:bd:3c:ec:20:03:f1:15:51:6c:
08:cf:e9:c9:35:d3:b1:25:01:6b:2d:1d:43:f4:7f:7e:06:9d:
53:88:9d:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljwbxd7brQv30yqBwO0h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh
MzdmNGIwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ5NGVlMDliOGY1M2Y1YzYwYzQyMGVjODUyMzI0YzVhMzJjMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+uCxya6PbCPDG8Kumbn4gLUpEJF
i1NXm1qW04c8mlIuhKW2U8atWgeFXN8oT0rWAIugLimchEfu5Iqnbxyiqla044DZ
wDPRy60UOfApEqNyKO3DLOczZWPwZHlVKGyi+kegFRWD6dzmCn3AFuVIe5eysw+S
lSDWDuFQVtE8Opfkj7DrVutTuw9BH1qyxWPt3ATcKWoAjBICDhCrSwnhF0F3Cri/
2QwDU/za+gXASFWHt5forITlQh5JGgcmdbjrgzL2goX6xzmSECDGY9Sz4wIFdp9X
kL8ofZVeIR5ZrFwnn+0BUqVuKWKkset27iEWhqueo7Dfk6pOa00Wg/5P0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG/ZTuCbj1P1xgxCDshSMkxaMsJSMB8GA1UdIwQY
MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt
NWQyNTI0NGU0YWFkLzEvYjlsTzRKdVBVX1hHREVJT3lGSXlURm95d2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk
LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCYI
MA0GCSqGSIb3DQEBCwUAA4IBAQApHrkxYcgtkK1ofB9UqE+73PrIbUvhjcM/TB7Y
d2wHK0fd9UHLFOoM8JUPQx7+0xmtdGJjCpWfAbSit/q60HHOgevcwJCHgQDf7+VU
X8WcvTeiY4GJ3FzvLehWAexEfiaUwQ9SoLf2XF+2REcoK+0khOlk+cN1ZUlaJ4mm
PSX2kg66yq9KQ513MCn8ARMyIn3ICf4sB0yMSENMvBPr14LZj9e81tPc8VE8qaHb
xB/HAVPYRidj9zGx0K7Ix9xycOYIE7t4BLV+pXmXSdgQp/m6LZIBVu6gR9TSMzjg
O1c492G9POwgA/EVUWwIz+nJNdOxJQFrLR1D9H9+Bp1TiJ3G
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:55 2025 by rpki-client