Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa
File: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (raw, json)
Hash identifier: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=
Subject key identifier: 92:4D:42:E5:4D:01:F8:77:4A:79:78:5C:09:E4:3E:F2:71:3C:E5:40
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 0194266B35F7AF614DDC469EA6E064F1425C
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa
Signing time: Thu 02 Jan 2025 09:49:07 +0000
ROA not before: Thu 02 Jan 2025 09:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:af00::/30 maxlen: 30
2a13:af04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:35:f7:af:61:4d:dc:46:9e:a6:e0:64:f1:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=924d42e54d01f8774a79785c09e43ef2713ce540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:39:cf:09:1d:7f:22:af:f1:76:a8:d9:6a:
5c:b5:c6:15:0e:88:f0:3d:66:b7:4c:1e:c1:96:42:
6e:b3:39:8b:d2:4b:c6:47:bf:76:7f:f9:15:0e:3c:
87:f9:64:3a:e4:55:cc:52:ed:a1:4f:d3:65:87:0c:
38:ea:5b:ae:6f:c4:60:4a:4d:60:92:49:d0:25:56:
6b:02:5a:61:2f:3b:c8:fb:3b:38:f7:54:fe:a5:1f:
00:3f:c8:e3:61:66:62:25:57:4e:87:23:74:77:4d:
12:44:d3:23:67:fb:fe:11:49:5e:3f:9f:b7:45:ad:
d6:0b:6c:de:43:7a:9a:72:da:34:5a:e1:3c:b6:69:
43:53:26:62:ac:37:18:76:0f:75:a9:cb:a9:bd:a6:
15:7d:32:3e:06:a5:fa:a0:d2:cf:5e:b4:32:f9:06:
73:18:41:4f:5f:cb:38:a1:89:77:57:f5:75:89:71:
44:b2:bd:70:88:b0:4e:a6:13:45:78:d4:0d:62:fc:
fc:e4:55:ef:3d:42:64:cb:0e:6f:6b:d2:3f:d7:8f:
3c:44:17:c4:c7:94:0f:47:df:7e:5e:1b:98:30:01:
86:9b:ce:17:5d:e4:e9:e2:ad:fd:60:80:b0:c1:fe:
dd:a9:27:9b:ce:91:54:1a:f8:86:19:51:a8:32:06:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4D:42:E5:4D:01:F8:77:4A:79:78:5C:09:E4:3E:F2:71:3C:E5:40
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:af00::/29
Signature Algorithm: sha256WithRSAEncryption
38:34:38:3e:6c:3f:15:4c:03:b1:64:f8:9b:0d:58:c8:af:71:
de:af:8f:3b:de:9b:cf:d6:54:4b:56:8c:35:ee:a3:6a:53:e2:
7d:0a:23:91:48:d2:84:1a:d0:df:b5:76:27:ab:57:fe:2f:1c:
df:56:80:ff:7e:5f:a7:be:aa:7e:c7:ba:75:80:fe:0e:4f:64:
9f:66:0b:c4:58:f6:f0:9d:a5:64:48:47:2e:54:5d:a0:1c:11:
23:b8:33:c8:f8:ad:ff:b2:52:55:ab:74:96:90:48:4b:28:c7:
39:a9:fa:de:c4:65:af:dc:7b:b8:fe:2a:3b:89:97:c3:50:07:
96:f8:d0:bc:a7:a8:5f:02:9d:27:a3:8e:1e:a5:4e:2a:ec:32:
02:bf:73:63:e4:95:aa:72:f9:da:22:81:01:6b:56:6b:a6:ae:
4d:d6:91:df:70:7b:36:a1:95:e7:95:b8:fb:96:8c:70:ef:a0:
3d:31:1c:ca:9c:a4:fc:b5:6d:ad:dd:41:65:75:5a:17:35:04:
e5:54:83:9e:06:99:9b:14:ae:e0:a8:08:91:fe:ec:12:a6:9e:
50:7e:1e:03:34:3c:b9:65:20:eb:2d:b7:d6:ba:20:27:eb:fa:
6a:15:1b:ee:ab:68:c6:b9:fe:65:e2:56:f6:70:c2:61:9f:f8:
48:dd:13:3c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQmazX3r2FN3EaepuBk8UJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4
ZmVkMjEwHhcNMjUwMTAyMDk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjRkNDJlNTRkMDFmODc3NGE3OTc4NWMwOWU0M2VmMjcxM2NlNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv505zwkdfyKv8Xao2WpctcYVDojw
PWa3TB7BlkJuszmL0kvGR792f/kVDjyH+WQ65FXMUu2hT9Nlhww46luub8RgSk1g
kknQJVZrAlphLzvI+zs491T+pR8AP8jjYWZiJVdOhyN0d00SRNMjZ/v+EUleP5+3
Ra3WC2zeQ3qacto0WuE8tmlDUyZirDcYdg91qcupvaYVfTI+BqX6oNLPXrQy+QZz
GEFPX8s4oYl3V/V1iXFEsr1wiLBOphNFeNQNYvz85FXvPUJkyw5va9I/1488RBfE
x5QPR99+XhuYMAGGm84XXeTp4q39YICwwf7dqSebzpFUGviGGVGoMga4JwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJJNQuVNAfh3Snl4XAnkPvJxPOVAMB8GA1UdIwQY
MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt
Y2RmODk2ODM1NDBlLzEva2sxQzVVMEItSGRLZVhoY0NlUS04bkU4NVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl
LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOvADAN
BgkqhkiG9w0BAQsFAAOCAQEAODQ4Pmw/FUwDsWT4mw1YyK9x3q+PO96bz9ZUS1aM
Ne6jalPifQojkUjShBrQ37V2J6tX/i8c31aA/35fp76qfse6dYD+Dk9kn2YLxFj2
8J2lZEhHLlRdoBwRI7gzyPit/7JSVat0lpBISyjHOan63sRlr9x7uP4qO4mXw1AH
lvjQvKeoXwKdJ6OOHqVOKuwyAr9zY+SVqnL52iKBAWtWa6auTdaR33B7NqGV55W4
+5aMcO+gPTEcypyk/LVtrd1BZXVaFzUE5VSDngaZmxSu4KgIkf7sEqaeUH4eAzQ8
uWUg6y231rogJ+v6ahUb7qtoxrn+ZeJW9nDCYZ/4SN0TPA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:42 2025 by rpki-client