Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/gZAbXdKIIXZyGHDR512yiOhKrvc.roa
File: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (raw, json)
Hash identifier: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=
Subject key identifier: 81:90:1B:5D:D2:88:21:76:72:18:70:D1:E7:5D:B2:88:E8:4A:AE:F7
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 01942143BF4EB7900A16D05C719E5B5B82C5
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/gZAbXdKIIXZyGHDR512yiOhKrvc.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203529
IP address blocks: 2a13:79c7:1600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bf:4e:b7:90:0a:16:d0:5c:71:9e:5b:5b:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81901b5dd2882176721870d1e75db288e84aaef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:87:f6:b6:c5:e2:98:c3:b7:9e:04:4a:21:
48:2e:08:c1:91:c7:58:57:3c:13:09:38:8d:cc:cf:
29:ed:1c:1f:9b:c4:a4:48:2e:ed:5a:ce:9d:ad:f7:
2d:a2:8e:8f:c2:cf:3e:b7:27:1d:1b:c2:6c:ed:7e:
4e:36:9a:7b:20:b2:02:dd:f4:4d:f7:38:81:22:e5:
aa:43:dd:2a:9d:9f:13:f3:94:76:88:5f:e2:78:f2:
f3:62:f4:3f:d1:58:e4:a8:fc:94:f6:8f:2e:a2:17:
48:d5:d5:11:81:4c:53:ca:f8:ce:ed:78:f8:0b:74:
d5:4b:e8:ae:16:49:e0:b5:9e:07:c0:ce:af:9f:37:
57:c6:13:b2:ff:a4:bf:6c:8a:1d:fe:ac:4f:b2:66:
6f:6b:8a:81:c8:07:f6:84:a3:ba:bf:0a:3d:aa:2b:
b7:54:21:bc:c4:15:84:81:c5:06:90:d1:8f:ec:03:
a2:5f:8a:e9:d1:00:3d:55:56:f6:2d:0e:02:de:17:
1a:98:10:18:99:90:db:c9:70:53:c4:b0:d9:dc:7b:
b6:1f:f1:70:ab:aa:42:36:08:c0:e7:11:c7:5e:c0:
ea:44:2a:51:76:2c:c7:05:48:9d:24:d7:82:c3:95:
b9:f2:66:db:3c:16:12:bf:b8:ce:3c:42:43:93:4c:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:1B:5D:D2:88:21:76:72:18:70:D1:E7:5D:B2:88:E8:4A:AE:F7
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/gZAbXdKIIXZyGHDR512yiOhKrvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:79c7:1600::/40
Signature Algorithm: sha256WithRSAEncryption
cb:3f:b3:ef:97:07:9c:22:89:6e:70:92:7f:c6:1b:8b:6f:be:
20:6b:84:cd:d2:41:e2:d1:d0:74:7d:db:d0:ac:8c:d7:d0:61:
54:bf:48:11:ff:4b:ab:2e:8a:a9:cd:5c:0e:e7:cd:5f:3e:1b:
d0:93:ed:e2:e4:88:92:3f:89:84:82:55:1c:0e:7f:49:57:d4:
f5:87:5e:ca:62:b5:4b:a4:b1:ae:ba:f1:65:d9:de:59:78:72:
60:54:bd:7a:45:1f:e1:24:99:ee:24:34:97:d9:8d:11:26:53:
4b:e5:83:0e:47:d4:85:de:6e:77:d0:cc:8f:a5:5b:51:f1:c4:
63:8c:32:46:07:7e:ab:0f:c2:03:b3:86:44:af:55:ed:58:4c:
fd:66:7e:78:0a:83:5e:73:bd:f5:fe:e7:6b:cb:2b:77:15:66:
e0:96:c4:12:ff:7e:41:72:5a:e8:86:2d:73:3b:0d:32:06:6b:
83:8f:db:23:eb:e3:83:3d:0e:15:b2:87:11:f4:c4:ba:5d:57:
b0:d0:52:26:ca:1d:b1:7f:d0:7f:f6:dd:7a:8e:6b:45:e2:36:
b7:57:64:01:14:43:89:64:c0:c2:62:36:e6:d5:52:a4:0f:70:
10:bb:91:53:57:b3:a3:a8:75:a4:54:4f:13:15:b5:d7:5d:97:
5c:27:ad:f2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQhQ79Ot5AKFtBccZ5bW4LFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTY1ZWE2YjM5YzIyYWVjMmFkMmQ0ZDRjMGEzYTMxM2Rm
MWRlZmEwHhcNMjUwMTAxMDk0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTkwMWI1ZGQyODgyMTc2NzIxODcwZDFlNzVkYjI4OGU4NGFhZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNSH9rbF4pjDt54ESiFILgjBkcdY
VzwTCTiNzM8p7Rwfm8SkSC7tWs6drfctoo6Pws8+tycdG8Js7X5ONpp7ILIC3fRN
9ziBIuWqQ90qnZ8T85R2iF/iePLzYvQ/0VjkqPyU9o8uohdI1dURgUxTyvjO7Xj4
C3TVS+iuFkngtZ4HwM6vnzdXxhOy/6S/bIod/qxPsmZva4qByAf2hKO6vwo9qiu3
VCG8xBWEgcUGkNGP7AOiX4rp0QA9VVb2LQ4C3hcamBAYmZDbyXBTxLDZ3Hu2H/Fw
q6pCNgjA5xHHXsDqRCpRdizHBUidJNeCw5W58mbbPBYSv7jOPEJDk0z3vQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIGQG13SiCF2chhw0eddsojoSq73MB8GA1UdIwQY
MBaAFH2WXqaznCKuwq0tTUwKOjE98d76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpaZXByT2NJcTdDclMxTlRBbzZNVDN4M3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kYmIyMmItMmExYS00NzYyLWEwZjct
MzJmNWE5NTA3NzMxLzEvZ1pBYlhkS0lJWFp5R0hEUjUxMnlpT2hLcnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kYmIyMmItMmExYS00NzYyLWEwZjctMzJmNWE5NTA3NzMx
LzEvZlpaZXByT2NJcTdDclMxTlRBbzZNVDN4M3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhN5xxYw
DQYJKoZIhvcNAQELBQADggEBAMs/s++XB5wiiW5wkn/GG4tvviBrhM3SQeLR0HR9
29CsjNfQYVS/SBH/S6suiqnNXA7nzV8+G9CT7eLkiJI/iYSCVRwOf0lX1PWHXspi
tUuksa668WXZ3ll4cmBUvXpFH+Ekme4kNJfZjREmU0vlgw5H1IXebnfQzI+lW1Hx
xGOMMkYHfqsPwgOzhkSvVe1YTP1mfngKg15zvfX+52vLK3cVZuCWxBL/fkFyWuiG
LXM7DTIGa4OP2yPr44M9DhWyhxH0xLpdV7DQUibKHbF/0H/23XqOa0XiNrdXZAEU
Q4lkwMJiNubVUqQPcBC7kVNXs6OodaRUTxMVtdddl1wnrfI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:17 2025 by rpki-client