Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa
File: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (raw, json)
Hash identifier: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=
Subject key identifier: 09:30:40:CA:AC:02:A4:AC:5B:D5:94:71:4C:EF:5B:D6:FC:1F:4E:8C
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0194F06641427729AA2D8061DAED087DA3D2
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa
Signing time: Mon 10 Feb 2025 15:07:00 +0000
ROA not before: Mon 10 Feb 2025 15:07:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:8302::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:66:41:42:77:29:aa:2d:80:61:da:ed:08:7d:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Feb 10 15:07:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=093040caac02a4ac5bd594714cef5bd6fc1f4e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:28:d3:72:dc:99:46:46:ed:37:9c:5d:fc:
96:39:41:6a:97:85:86:52:8e:a3:9d:fc:45:a6:a5:
1b:3e:21:97:db:33:d6:7e:fc:d3:bd:fa:b5:95:b0:
d2:ac:eb:ea:77:9b:60:27:0d:dd:90:ba:79:4a:d0:
6c:d6:00:90:54:00:b3:59:7d:06:72:f6:50:46:59:
b9:59:b2:90:c4:7f:53:8e:ca:61:2a:61:96:45:e4:
9f:a7:92:90:36:98:60:e0:ce:4f:10:f6:31:d9:62:
ed:5a:0d:83:10:55:ce:a2:9b:1c:37:ac:1e:cd:6d:
52:6c:c8:9d:b9:a8:e3:c4:3e:cf:63:f7:6b:3e:b5:
02:a7:77:9e:e2:4d:32:fc:31:14:9f:7e:0f:13:89:
2b:42:eb:ce:20:8f:93:62:c2:e9:92:d4:c6:1f:ec:
68:5c:29:7c:d5:32:0c:ae:5f:2c:0c:a2:a8:8d:30:
87:49:07:fa:7b:e0:20:ea:76:6d:8a:dc:c0:0c:e6:
74:36:2c:71:dc:91:4d:b7:4c:f4:8d:4c:f2:f0:9a:
82:e9:30:78:73:00:49:e4:4d:66:95:fb:36:8a:25:
2b:9d:64:e4:f4:fb:56:ea:6b:ce:8f:36:a2:8a:b0:
bd:e4:95:37:53:93:b7:0e:05:d5:d7:ee:2c:7c:9f:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:40:CA:AC:02:A4:AC:5B:D5:94:71:4C:EF:5B:D6:FC:1F:4E:8C
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8302::/32
Signature Algorithm: sha256WithRSAEncryption
97:77:50:42:d1:46:b7:0d:f5:49:23:48:65:7c:f7:85:b0:e5:
46:57:96:df:1b:2f:0a:7d:93:0a:70:f2:c3:23:61:8a:d4:b0:
2c:59:45:ff:cd:ed:f9:c4:10:b6:aa:50:d9:39:67:57:81:05:
8b:20:b5:41:93:23:21:2f:85:e4:f9:05:d4:bd:c1:13:3b:28:
d7:28:84:44:78:01:7d:35:6c:7b:3f:e6:96:ff:f8:ee:cc:e5:
c9:5f:91:5b:82:0c:b8:75:14:73:a7:7c:2c:8a:9b:6e:f5:55:
c0:42:a0:de:8e:76:03:b9:6f:eb:83:57:ef:57:bf:3b:39:4c:
d0:b4:6f:89:d1:aa:c4:44:21:f8:8e:d0:bb:54:46:b9:15:43:
c9:71:49:41:46:75:74:fb:5c:2e:e8:23:de:5d:55:c2:bd:d0:
ae:3c:f0:3e:92:34:68:e1:b8:5b:ce:58:26:25:dc:a4:d4:17:
fb:4f:92:ad:5f:a9:71:9f:69:d4:34:49:57:04:9f:31:c0:65:
ab:71:c1:b1:08:8d:10:e4:4d:7d:e4:2e:f2:71:14:f4:79:40:
03:1a:61:e6:fe:17:74:06:ae:b0:d9:09:ad:54:08:3b:a0:d8:
02:0f:62:fd:88:91:26:f2:00:c5:2a:7b:a7:4d:53:5a:2e:eb:
97:b4:64:2d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZTwZkFCdymqLYBh2u0IfaPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2
MDJmYmYwHhcNMjUwMjEwMTUwNzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTMwNDBjYWFjMDJhNGFjNWJkNTk0NzE0Y2VmNWJkNmZjMWY0ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fso03LcmUZG7TecXfyWOUFql4WG
Uo6jnfxFpqUbPiGX2zPWfvzTvfq1lbDSrOvqd5tgJw3dkLp5StBs1gCQVACzWX0G
cvZQRlm5WbKQxH9TjsphKmGWReSfp5KQNphg4M5PEPYx2WLtWg2DEFXOopscN6we
zW1SbMiduajjxD7PY/drPrUCp3ee4k0y/DEUn34PE4krQuvOII+TYsLpktTGH+xo
XCl81TIMrl8sDKKojTCHSQf6e+Ag6nZtitzADOZ0Nixx3JFNt0z0jUzy8JqC6TB4
cwBJ5E1mlfs2iiUrnWTk9PtW6mvOjzaiirC95JU3U5O3DgXV1+4sfJ8g8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAkwQMqsAqSsW9WUcUzvW9b8H06MMB8GA1UdIwQY
MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt
NTUxMDQxNzNiMTgwLzEvQ1RCQXlxd0NwS3hiMVpSeFRPOWIxdndmVG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw
LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGDAjAN
BgkqhkiG9w0BAQsFAAOCAQEAl3dQQtFGtw31SSNIZXz3hbDlRleW3xsvCn2TCnDy
wyNhitSwLFlF/83t+cQQtqpQ2TlnV4EFiyC1QZMjIS+F5PkF1L3BEzso1yiERHgB
fTVsez/mlv/47szlyV+RW4IMuHUUc6d8LIqbbvVVwEKg3o52A7lv64NX71e/OzlM
0LRvidGqxEQh+I7Qu1RGuRVDyXFJQUZ1dPtcLugj3l1Vwr3QrjzwPpI0aOG4W85Y
JiXcpNQX+0+SrV+pcZ9p1DRJVwSfMcBlq3HBsQiNEORNfeQu8nEU9HlAAxph5v4X
dAausNkJrVQIO6DYAg9i/YiRJvIAxSp7p01TWi7rl7RkLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:48 2025 by rpki-client