Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/r6jIlFnbB34FhHASQ9IB0GoCLYc.roa
File: r6jIlFnbB34FhHASQ9IB0GoCLYc.roa (raw, json)
Hash identifier: kOdeMovmJffay1BhoLQiE9+6iE71yJgJsRBwNps/WDs=
Subject key identifier: AF:A8:C8:94:59:DB:07:7E:05:84:70:12:43:D2:01:D0:6A:02:2D:87
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01868E80DC4ED4DDE8D32298329D9C2CFA2E
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/r6jIlFnbB34FhHASQ9IB0GoCLYc.roa
Signing time: Sun 26 Feb 2023 16:14:15 +0000
ROA not before: Sun 26 Feb 2023 16:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 2a09:3701::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:80:dc:4e:d4:dd:e8:d3:22:98:32:9d:9c:2c:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Feb 26 16:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa8c89459db077e0584701243d201d06a022d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:df:1b:3b:28:f2:41:8c:25:de:af:ef:a1:
f3:59:e5:8a:b2:27:55:64:88:c2:ec:da:9d:84:64:
f8:ae:47:e2:9b:be:7b:f0:b6:92:6a:04:b3:6c:bf:
4e:c4:cd:b6:7a:72:d9:ca:0a:19:90:98:c9:40:7d:
c1:3a:d6:7c:ad:22:66:27:4e:4c:d6:2c:62:d8:fd:
1e:a5:89:ad:43:72:40:8c:14:32:69:ef:28:bc:6a:
8b:b9:6a:15:3f:9e:a6:28:05:81:58:47:61:03:92:
fe:75:92:b0:15:24:d6:7c:4a:08:5e:2d:ae:3f:23:
61:a3:dd:54:2b:98:1b:f8:f8:6a:2b:75:13:82:bc:
f7:cb:21:21:70:1a:eb:33:77:45:66:c4:a7:4a:30:
13:20:42:36:59:6c:98:d1:47:7d:8d:94:0e:fb:c2:
31:6e:00:da:c4:a5:c7:b4:1a:90:28:8f:35:7f:ea:
82:33:a7:fd:5e:4d:a2:ec:b6:fe:55:ff:80:de:83:
1c:c3:9d:8c:2e:60:57:85:70:8a:14:1e:c6:a1:66:
1e:32:8a:69:2b:5f:af:8b:e2:38:b7:56:85:63:0e:
97:32:9f:b3:ff:eb:20:17:27:4a:6a:fb:37:94:fd:
e1:7c:88:d9:38:a8:f5:1f:8f:92:c5:ca:44:86:27:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:C8:94:59:DB:07:7E:05:84:70:12:43:D2:01:D0:6A:02:2D:87
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/r6jIlFnbB34FhHASQ9IB0GoCLYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3701::/32
Signature Algorithm: sha256WithRSAEncryption
7f:30:cb:26:69:fd:be:39:ae:f9:1b:9c:8a:5a:93:fe:90:c2:
14:25:28:ed:c4:d0:54:b0:fd:b5:ec:f2:d2:91:5e:60:66:19:
76:26:9a:6d:fd:59:02:c5:31:89:fa:44:ea:21:05:9d:f6:18:
c0:42:1f:44:7c:93:2a:c4:60:80:d4:5d:f7:03:97:3a:02:a3:
de:d7:a3:5a:1a:1d:c6:a2:78:9e:af:90:53:a9:3d:4c:1f:61:
26:7e:7e:4c:5a:89:94:9e:19:8d:4e:db:55:f6:0b:64:0b:07:
c7:70:5c:30:63:b5:6d:e1:5a:c1:a0:68:cf:ed:a9:b4:10:13:
1e:98:f0:de:51:6b:cf:e8:1b:f8:e3:ec:73:7d:51:50:61:7e:
27:4d:dd:a9:9f:07:89:a5:af:bf:f0:f9:c9:d5:6b:1c:f3:01:
9a:09:ac:b0:19:fc:19:bd:d9:ac:da:4f:74:74:58:42:9d:2f:
9e:08:ab:96:f7:a4:82:39:ea:ad:2e:c5:1e:33:0e:53:c5:ce:
c7:0d:24:3f:39:cb:63:1b:55:6e:a7:6b:db:ce:de:87:7d:dc:
40:f2:1b:7d:dd:7e:ae:ad:da:1a:74:6e:ea:5b:6c:2f:4b:c3:
a3:72:09:1c:3f:9b:b1:49:8c:03:09:c8:f7:c1:8d:de:ec:a9:
4a:e3:f0:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYaOgNxO1N3o0yKYMp2cLPouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjMwMjI2MTYxNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmE4Yzg5NDU5ZGIwNzdlMDU4NDcwMTI0M2QyMDFkMDZhMDIyZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7fGzso8kGMJd6v76HzWeWKsidV
ZIjC7NqdhGT4rkfim7578LaSagSzbL9OxM22enLZygoZkJjJQH3BOtZ8rSJmJ05M
1ixi2P0epYmtQ3JAjBQyae8ovGqLuWoVP56mKAWBWEdhA5L+dZKwFSTWfEoIXi2u
PyNho91UK5gb+PhqK3UTgrz3yyEhcBrrM3dFZsSnSjATIEI2WWyY0Ud9jZQO+8Ix
bgDaxKXHtBqQKI81f+qCM6f9Xk2i7Lb+Vf+A3oMcw52MLmBXhXCKFB7GoWYeMopp
K1+vi+I4t1aFYw6XMp+z/+sgFydKavs3lP3hfIjZOKj1H4+SxcpEhicLTwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK+oyJRZ2wd+BYRwEkPSAdBqAi2HMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvcjZqSWxGbmJCMzRGaEhBU1E5SUIwR29DTFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgk3ATAN
BgkqhkiG9w0BAQsFAAOCAQEAfzDLJmn9vjmu+RucilqT/pDCFCUo7cTQVLD9tezy
0pFeYGYZdiaabf1ZAsUxifpE6iEFnfYYwEIfRHyTKsRggNRd9wOXOgKj3tejWhod
xqJ4nq+QU6k9TB9hJn5+TFqJlJ4ZjU7bVfYLZAsHx3BcMGO1beFawaBoz+2ptBAT
Hpjw3lFrz+gb+OPsc31RUGF+J03dqZ8HiaWvv/D5ydVrHPMBmgmssBn8Gb3ZrNpP
dHRYQp0vngirlvekgjnqrS7FHjMOU8XOxw0kPznLYxtVbqdr287eh33cQPIbfd1+
rq3aGnRu6ltsL0vDo3IJHD+bsUmMAwnI98GN3uypSuPw4w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:55 2025 by rpki-client