Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/q9GEYk1E6Vn8V9tRqDxBlMt-DgU.roa
File: q9GEYk1E6Vn8V9tRqDxBlMt-DgU.roa (raw, json)
Hash identifier: 6HyAND5lEZucfN0bB5kqezRFZVu/ubf6H19mD1XKuoI=
Subject key identifier: AB:D1:84:62:4D:44:E9:59:FC:57:DB:51:A8:3C:41:94:CB:7E:0E:05
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01959EC1B5665F09B756B5EBE58C5ED786DC
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/q9GEYk1E6Vn8V9tRqDxBlMt-DgU.roa
Signing time: Sun 16 Mar 2025 11:40:49 +0000
ROA not before: Sun 16 Mar 2025 11:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62403
IP address blocks: 2a12:de40:49::/48 maxlen: 48
2a12:de40:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:c1:b5:66:5f:09:b7:56:b5:eb:e5:8c:5e:d7:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Mar 16 11:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd184624d44e959fc57db51a83c4194cb7e0e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:ab:da:90:7b:57:70:fd:3c:6a:70:c4:f8:
5c:04:05:2f:83:b2:b1:a7:52:bd:c1:cd:fd:78:54:
3c:81:1e:5b:24:ee:17:cd:2b:b7:03:45:cb:9a:c9:
c1:9d:3f:0f:cb:c0:67:12:6d:84:96:02:7f:ad:4d:
82:f8:94:de:f4:43:31:f3:df:9a:20:5e:e2:eb:57:
d3:da:3c:46:10:e7:af:06:5b:65:d3:33:c6:b9:e0:
54:df:03:82:66:6c:e5:1e:46:8a:56:33:b1:c1:88:
27:e3:cf:f4:f6:2c:64:55:53:c7:19:1b:b5:02:17:
da:52:b5:f6:73:dc:3b:17:7f:e0:6e:e5:00:96:be:
80:17:75:00:3c:8d:42:c2:16:80:05:fe:b7:fb:0e:
ca:03:57:53:67:a3:15:83:46:e5:5f:c5:2c:30:bb:
83:bf:e0:4b:ab:b2:64:0c:e8:14:06:ca:6b:df:2d:
5a:cf:d1:6f:ba:bb:b0:15:78:4d:16:6b:03:4d:e5:
58:d1:62:4d:11:31:84:66:2c:01:0b:cc:6e:3a:28:
e9:44:b1:a9:20:43:d5:dd:10:b3:8e:5d:72:02:bd:
a2:06:ac:41:8c:e0:79:60:c3:4c:1f:20:1b:a1:8c:
fb:db:ec:6f:67:0b:c0:76:56:b7:b2:1d:55:57:d9:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:84:62:4D:44:E9:59:FC:57:DB:51:A8:3C:41:94:CB:7E:0E:05
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/q9GEYk1E6Vn8V9tRqDxBlMt-DgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:49::/48
2a12:de40:50::/48
Signature Algorithm: sha256WithRSAEncryption
84:2b:7e:34:a5:9b:22:9e:85:49:d1:00:85:1f:c5:1f:1c:d3:
41:0f:c0:ca:9d:33:94:28:1c:24:90:bb:4c:02:36:02:8f:39:
ee:e6:fa:1e:91:9d:41:b2:f0:49:e8:40:81:0a:7f:37:43:72:
a1:ca:0a:79:51:74:f3:fb:c4:cc:6e:d5:92:52:08:9d:39:3b:
7f:dd:1c:e6:44:22:10:e9:56:c8:16:cd:1b:78:c5:0e:f3:50:
b2:9f:5f:cb:8f:6d:3e:dd:b5:48:9e:68:13:c9:87:ce:d2:19:
5c:15:24:a0:7e:9d:45:44:a2:af:2b:11:1f:1e:bc:dd:e5:16:
bb:a8:36:6c:4b:b0:e0:6a:36:86:8f:49:63:af:d3:d0:7d:16:
a7:6a:6e:1d:6e:b5:61:38:2b:fa:b1:e0:2f:d7:6d:8b:d6:55:
cc:25:5d:c3:8f:e4:62:96:4d:d5:24:aa:27:ee:ef:ed:e2:02:
11:99:71:4a:3e:cd:e0:a6:12:30:82:f6:b1:eb:fa:bf:9e:e5:
88:ed:96:e3:e8:0b:cd:cd:e1:25:60:17:c7:01:d3:d5:7c:8b:
2e:81:0a:03:f8:35:7c:d3:08:43:d4:0e:6f:bf:6d:92:e3:20:
14:ee:a1:0e:23:94:fe:31:82:0d:02:2e:e6:ca:ef:48:93:92:
1a:f3:37:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZWewbVmXwm3VrXr5Yxe14bcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjUwMzE2MTE0MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQxODQ2MjRkNDRlOTU5ZmM1N2RiNTFhODNjNDE5NGNiN2UwZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCKr2pB7V3D9PGpwxPhcBAUvg7Kx
p1K9wc39eFQ8gR5bJO4XzSu3A0XLmsnBnT8Py8BnEm2ElgJ/rU2C+JTe9EMx89+a
IF7i61fT2jxGEOevBltl0zPGueBU3wOCZmzlHkaKVjOxwYgn48/09ixkVVPHGRu1
AhfaUrX2c9w7F3/gbuUAlr6AF3UAPI1CwhaABf63+w7KA1dTZ6MVg0blX8UsMLuD
v+BLq7JkDOgUBspr3y1az9FvuruwFXhNFmsDTeVY0WJNETGEZiwBC8xuOijpRLGp
IEPV3RCzjl1yAr2iBqxBjOB5YMNMHyAboYz72+xvZwvAdla3sh1VV9mBYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKvRhGJNROlZ/FfbUag8QZTLfg4FMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvcTlHRVlrMUU2Vm44Vjl0UnFEeEJsTXQtRGdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhLeQABJ
AwcAKhLeQABQMA0GCSqGSIb3DQEBCwUAA4IBAQCEK340pZsinoVJ0QCFH8UfHNNB
D8DKnTOUKBwkkLtMAjYCjznu5voekZ1BsvBJ6ECBCn83Q3Khygp5UXTz+8TMbtWS
UgidOTt/3RzmRCIQ6VbIFs0beMUO81Cyn1/Lj20+3bVInmgTyYfO0hlcFSSgfp1F
RKKvKxEfHrzd5Ra7qDZsS7DgajaGj0ljr9PQfRanam4dbrVhOCv6seAv122L1lXM
JV3Dj+Rilk3VJKon7u/t4gIRmXFKPs3gphIwgvax6/q/nuWI7Zbj6AvNzeElYBfH
AdPVfIsugQoD+DV80whD1A5vv22S4yAU7qEOI5T+MYINAi7myu9Ik5Ia8zfI
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:15 2025 by rpki-client