Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iP5gWxV1D7SSdp-AyonmS3wd8CM.roa
File: iP5gWxV1D7SSdp-AyonmS3wd8CM.roa (raw, json)
Hash identifier: gVhOdCGtBxCWpEXMf1SruGI/aZbGet0iQc66po3wmDg=
Subject key identifier: 88:FE:60:5B:15:75:0F:B4:92:76:9F:80:CA:89:E6:4B:7C:1D:F0:23
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDB427163D14BB496058589386F6F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iP5gWxV1D7SSdp-AyonmS3wd8CM.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396828
IP address blocks: 2a10:eec0:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:db:42:71:63:d1:4b:b4:96:05:85:89:38:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88fe605b15750fb492769f80ca89e64b7c1df023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:02:67:a4:89:d4:0b:7c:62:b3:ea:02:44:
5b:f4:0d:94:0d:7e:b6:4c:bc:06:00:73:81:c3:5b:
e2:78:14:fa:1f:6d:0c:91:17:b1:d4:5a:93:08:ae:
29:05:3f:9c:41:b5:99:f1:3c:61:60:66:c8:1b:b5:
5d:3b:2b:15:95:02:ea:8e:23:76:a3:01:42:ff:3c:
ca:d7:b3:15:20:89:11:56:0e:f7:a7:90:bc:5a:bc:
ea:79:f9:67:3b:80:4b:8b:29:cf:74:34:43:5b:99:
40:ad:c7:91:0f:97:2d:27:7c:6e:81:80:03:e8:c2:
bb:6a:63:8a:f6:ad:f2:92:cf:c0:5d:fb:8b:b5:54:
ee:21:bd:bc:5a:78:08:3f:82:51:0c:d9:d6:1f:46:
7a:18:bb:04:47:f6:c0:de:58:53:88:d0:0c:23:90:
1e:64:71:6f:d4:14:14:b3:33:1f:dc:6e:24:9f:27:
aa:5b:c2:ed:1f:ae:19:95:a8:22:4b:cc:e5:ef:2c:
0e:56:84:ae:a7:12:68:d2:6a:86:eb:88:cb:b8:7d:
9d:04:e8:18:f7:59:75:36:7c:13:9e:8c:2f:bc:c7:
3d:0f:f5:ab:98:45:b7:01:df:10:f3:90:cf:00:22:
eb:46:cd:a8:f1:39:10:cc:ec:d3:57:be:bf:6d:b0:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:60:5B:15:75:0F:B4:92:76:9F:80:CA:89:E6:4B:7C:1D:F0:23
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iP5gWxV1D7SSdp-AyonmS3wd8CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:b::/48
Signature Algorithm: sha256WithRSAEncryption
c6:8e:09:da:af:c9:da:04:f1:66:2e:72:ba:3a:ed:10:af:93:
c7:fd:6a:38:8d:51:ae:3c:43:c3:dd:8a:0f:d4:87:86:46:4a:
e9:c9:40:ad:0a:6e:4f:9d:3d:d0:1f:e0:e1:66:97:8c:4d:50:
60:01:f3:bb:9d:6d:4c:7f:92:64:ee:47:32:89:8f:ed:df:ea:
9c:67:fa:fa:8e:d7:51:34:23:7a:f0:e9:81:09:1f:19:4c:0b:
7d:46:58:9a:29:15:ce:8c:bc:8b:ce:f5:5f:6d:b1:cf:3e:91:
43:61:9b:9f:29:27:ee:34:e1:fa:bf:76:f7:0e:e1:87:1f:ec:
7b:2d:6e:00:6f:c7:d8:17:06:cb:ba:a7:ba:59:00:3a:01:d0:
7b:ec:06:80:56:df:3e:e5:57:44:2b:e6:36:ac:e8:04:99:27:
e7:25:46:a5:b0:3d:cc:a8:a0:db:41:9d:a9:ac:9e:44:3c:39:
f9:24:b9:0a:8b:97:61:fe:3a:0b:da:bb:6c:d0:c4:54:91:8f:
aa:d5:ba:8d:db:23:3a:6b:77:c0:59:d1:41:65:f7:c8:66:12:
07:4b:4a:f0:8b:92:b1:47:fb:35:ff:28:50:6f:4c:9f:60:fe:
53:13:44:ed:a1:c8:cc:19:89:fd:26:c9:ae:39:f1:7e:d4:87:
c8:1f:16:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+9tCcWPRS7SWBYWJOG9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGZlNjA1YjE1NzUwZmI0OTI3NjlmODBjYTg5ZTY0YjdjMWRmMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzYCZ6SJ1At8YrPqAkRb9A2UDX62
TLwGAHOBw1vieBT6H20MkRex1FqTCK4pBT+cQbWZ8TxhYGbIG7VdOysVlQLqjiN2
owFC/zzK17MVIIkRVg73p5C8WrzqeflnO4BLiynPdDRDW5lArceRD5ctJ3xugYAD
6MK7amOK9q3yks/AXfuLtVTuIb28WngIP4JRDNnWH0Z6GLsER/bA3lhTiNAMI5Ae
ZHFv1BQUszMf3G4knyeqW8LtH64ZlagiS8zl7ywOVoSupxJo0mqG64jLuH2dBOgY
91l1NnwTnowvvMc9D/WrmEW3Ad8Q85DPACLrRs2o8TkQzOzTV76/bbC7dwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIj+YFsVdQ+0knafgMqJ5kt8HfAjMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaVA1Z1d4VjFEN1NTZHAtQXlvbm1TM3dkOENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDuwAAL
MA0GCSqGSIb3DQEBCwUAA4IBAQDGjgnar8naBPFmLnK6Ou0Qr5PH/Wo4jVGuPEPD
3YoP1IeGRkrpyUCtCm5PnT3QH+DhZpeMTVBgAfO7nW1Mf5Jk7kcyiY/t3+qcZ/r6
jtdRNCN68OmBCR8ZTAt9RliaKRXOjLyLzvVfbbHPPpFDYZufKSfuNOH6v3b3DuGH
H+x7LW4Ab8fYFwbLuqe6WQA6AdB77AaAVt8+5VdEK+Y2rOgEmSfnJUalsD3MqKDb
QZ2prJ5EPDn5JLkKi5dh/joL2rts0MRUkY+q1bqN2yM6a3fAWdFBZffIZhIHS0rw
i5KxR/s1/yhQb0yfYP5TE0TtocjMGYn9JsmuOfF+1IfIHxYj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:23 2025 by rpki-client