Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa
File: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (raw, json)
Hash identifier: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=
Subject key identifier: 92:1E:53:D1:E1:88:1B:AA:64:8B:40:0C:9E:1C:B4:C3:D7:82:4C:B4
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 019426D9CAD183B269ECE155269E11A8262C
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212414
IP address blocks: 2a02:d0c2:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:d1:83:b2:69:ec:e1:55:26:9e:11:a8:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=921e53d1e1881baa648b400c9e1cb4c3d7824cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:77:89:e3:7c:da:28:34:14:4c:54:d0:c4:
b1:5b:43:5b:c8:e6:cd:d0:40:3a:00:3b:d8:10:1b:
32:05:99:0c:3d:dd:91:53:3d:fa:59:0d:cb:81:ca:
90:54:5b:09:2c:e6:86:f2:4d:8a:68:0b:1d:70:3e:
2a:79:ae:61:5c:21:c4:a6:36:0c:95:90:87:1f:d3:
0e:05:c6:98:60:59:29:0d:88:b1:15:66:d6:d0:38:
51:b5:6f:30:7a:11:5d:d4:22:2f:70:ae:d4:c1:27:
d9:20:70:d3:c3:05:14:5a:ad:aa:f2:95:78:b1:3b:
dc:5b:c5:cf:5f:7f:cc:d4:63:02:36:bc:58:c2:d4:
5f:52:75:12:e4:99:40:66:5e:0f:09:76:8f:9f:9f:
66:c1:6d:d0:a0:80:a5:74:60:3a:27:f3:c6:7c:eb:
6b:ed:bb:77:74:36:a6:4e:b8:e4:1c:84:26:9c:4e:
ce:5d:11:68:ed:34:dd:13:b3:fe:8a:be:12:3e:5b:
7b:19:14:cb:1f:80:f8:42:e3:fa:8f:cc:13:2f:83:
0d:cf:a8:ba:d6:aa:7c:75:b4:45:0e:ea:2d:53:be:
47:d9:0f:9e:3f:a6:f3:04:d7:2a:de:66:93:27:57:
7a:52:ed:b3:21:08:eb:1f:15:4b:3e:51:e3:10:cd:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:53:D1:E1:88:1B:AA:64:8B:40:0C:9E:1C:B4:C3:D7:82:4C:B4
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c2:2::/48
Signature Algorithm: sha256WithRSAEncryption
97:b3:61:09:69:a2:85:8d:c3:3f:d4:ed:b9:b5:be:2d:a1:be:
a0:c2:60:f1:89:af:1a:45:11:d3:7b:0d:37:e3:6e:a4:1b:47:
c5:97:9b:2e:2f:81:1b:23:49:ae:b0:cd:af:d1:1d:59:ca:ad:
d1:a2:c5:a1:a3:d5:06:37:54:1d:38:84:40:e2:4b:fb:b2:83:
6c:64:da:71:e9:5e:3c:f9:43:06:0b:7d:c6:9c:e4:69:7b:78:
12:cf:1f:81:e1:87:c5:93:f0:b7:bb:2e:ae:c1:60:83:63:8d:
5a:56:79:5b:a9:1a:a6:f2:04:de:99:db:8b:61:26:4a:8b:77:
27:5e:bf:47:f3:9b:ce:eb:bd:e6:0e:e3:24:0f:9e:50:26:15:
88:fb:bd:89:1b:60:22:e2:34:b7:64:be:1a:b0:11:71:74:1b:
c8:70:3b:69:18:2e:ab:61:4b:46:2a:79:c8:34:a7:65:8e:2f:
35:01:22:7a:1a:4f:09:18:bd:c4:e3:85:d7:3d:df:bf:36:a1:
56:b6:d6:5b:d1:eb:d9:55:fa:63:fd:4a:f2:df:d8:26:24:58:
23:f6:ba:60:95:7b:07:57:32:31:17:c1:3a:ef:89:78:2b:f9:
5c:1e:b7:e1:9d:69:c4:9c:61:f6:1a:f3:0a:46:15:ed:22:42:
7b:9b:e2:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2crRg7Jp7OFVJp4RqCYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjUwMTAyMTE0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjFlNTNkMWUxODgxYmFhNjQ4YjQwMGM5ZTFjYjRjM2Q3ODI0Y2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN13ieN82ig0FExU0MSxW0NbyObN
0EA6ADvYEBsyBZkMPd2RUz36WQ3LgcqQVFsJLOaG8k2KaAsdcD4qea5hXCHEpjYM
lZCHH9MOBcaYYFkpDYixFWbW0DhRtW8wehFd1CIvcK7UwSfZIHDTwwUUWq2q8pV4
sTvcW8XPX3/M1GMCNrxYwtRfUnUS5JlAZl4PCXaPn59mwW3QoICldGA6J/PGfOtr
7bt3dDamTrjkHIQmnE7OXRFo7TTdE7P+ir4SPlt7GRTLH4D4QuP6j8wTL4MNz6i6
1qp8dbRFDuotU75H2Q+eP6bzBNcq3maTJ1d6Uu2zIQjrHxVLPlHjEM1JawIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJIeU9HhiBuqZItADJ4ctMPXgky0MB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEva2g1VDBlR0lHNnBraTBBTW5oeTB3OWVDVExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLQwgAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCXs2EJaaKFjcM/1O25tb4tob6gwmDxia8aRRHT
ew03426kG0fFl5suL4EbI0musM2v0R1Zyq3RosWho9UGN1QdOIRA4kv7soNsZNpx
6V48+UMGC33GnORpe3gSzx+B4YfFk/C3uy6uwWCDY41aVnlbqRqm8gTemduLYSZK
i3cnXr9H85vO673mDuMkD55QJhWI+72JG2Ai4jS3ZL4asBFxdBvIcDtpGC6rYUtG
KnnINKdlji81ASJ6Gk8JGL3E44XXPd+/NqFWttZb0evZVfpj/Ury39gmJFgj9rpg
lXsHVzIxF8E674l4K/lcHrfhnWnEnGH2GvMKRhXtIkJ7m+It
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:01 2025 by rpki-client