Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CkYXhhmX-LIlvsGdG43avkWvxZk.roa
File: CkYXhhmX-LIlvsGdG43avkWvxZk.roa (raw, json)
Hash identifier: 7dP54MXLq76/WCqAuYfITq15vmrugKYVT2prYg7O52Y=
Subject key identifier: 0A:46:17:86:19:97:F8:B2:25:BE:C1:9D:1B:8D:DA:BE:45:AF:C5:99
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01923D8C29AAE54B40615F3B3F4287AE7F68
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CkYXhhmX-LIlvsGdG43avkWvxZk.roa
Signing time: Sun 29 Sep 2024 11:30:48 +0000
ROA not before: Sun 29 Sep 2024 11:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a04:a5c0::/32 maxlen: 32
2a04:a5c1::/32 maxlen: 32
2a04:a5c2::/32 maxlen: 32
2a04:a5c3::/32 maxlen: 32
2a04:a5c4::/32 maxlen: 32
2a04:a5c5::/32 maxlen: 32
2a04:a5c6::/32 maxlen: 32
2a04:a5c7::/32 maxlen: 32
2a0e:d00::/32 maxlen: 32
2a0e:d01::/32 maxlen: 32
2a0e:d02::/32 maxlen: 32
2a0e:d03::/32 maxlen: 32
2a0e:d04::/32 maxlen: 32
2a0e:d05::/32 maxlen: 32
2a0e:d06::/32 maxlen: 32
2a0e:d07::/32 maxlen: 32
2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0e:c380::/30 maxlen: 30
2a0e:c384::/30 maxlen: 30
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
2a13:1340::/30 maxlen: 30
2a13:1344::/30 maxlen: 30
2a13:4fc0::/30 maxlen: 30
2a13:4fc4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:8c:29:aa:e5:4b:40:61:5f:3b:3f:42:87:ae:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 29 11:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a4617861997f8b225bec19d1b8ddabe45afc599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:fa:ac:25:dd:ff:1c:1c:f0:eb:5a:85:f1:
ef:d9:90:0b:2d:c1:48:f9:f2:a3:e7:50:49:b3:3e:
d4:22:69:99:9d:44:81:bb:71:8a:5d:2b:f4:95:b5:
a5:13:c8:30:64:b9:8e:a1:17:24:7d:90:06:7e:6c:
9a:d7:c2:2f:68:ed:9b:bc:d6:e6:57:12:6a:17:47:
d6:57:32:b7:8b:12:a9:9c:cf:a1:6d:75:44:4f:33:
fa:52:53:33:33:b4:b5:16:2b:de:f1:5c:2a:ba:ec:
80:b8:00:63:d7:2c:e7:26:97:7c:4f:21:00:1c:c6:
2b:3e:16:a6:d0:0d:1a:af:5b:a9:08:1e:ee:5a:24:
9e:57:0d:67:70:d0:5e:df:e9:3a:f9:ce:9e:40:89:
08:4d:7d:c2:a4:df:3a:ff:bc:e5:3d:f5:ce:d7:64:
52:eb:76:f7:9b:ac:3e:01:2d:fb:6d:46:c5:1d:63:
61:f1:c0:80:05:d4:05:24:f9:ff:19:75:e1:ac:9f:
93:23:7c:0b:0a:44:44:85:9f:75:1b:6a:22:4a:e3:
f4:1a:9c:aa:7a:09:a4:47:17:cd:2d:f4:e0:00:84:
5f:c4:ae:94:cc:5d:b3:e2:41:25:95:25:fc:ae:bb:
7f:92:33:45:f8:11:2a:d3:37:d4:2e:0b:d3:b5:9f:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:46:17:86:19:97:F8:B2:25:BE:C1:9D:1B:8D:DA:BE:45:AF:C5:99
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CkYXhhmX-LIlvsGdG43avkWvxZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:d00::/29
2a0e:b140::/29
2a0e:c380::/29
2a0f:db80::/29
2a10:4700::/29
2a12:4300::/29
2a13:1340::/29
2a13:4fc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:fa:f8:09:b2:6f:49:f2:0d:21:cd:52:17:53:f6:90:58:82:
f0:3c:67:2a:9e:2b:78:77:bf:61:ee:24:f3:ca:b0:a3:b7:f0:
26:06:00:03:bb:64:b0:9f:19:7f:b2:69:24:75:7d:29:4f:9a:
65:86:58:3a:d1:29:f1:12:5e:29:21:6b:09:ac:97:5d:3e:6a:
c3:79:fe:6a:dc:bd:da:a7:df:2a:c9:22:cf:93:e2:75:f8:bf:
0e:f6:df:b8:8c:0e:78:c1:b8:cd:06:5a:36:9d:77:8e:6e:f3:
95:36:c3:e8:2b:10:51:18:75:d2:4f:3d:bd:c4:0c:ff:5c:33:
1a:e3:0e:4c:78:6b:73:15:fb:87:bf:1a:63:a0:ba:b9:bf:f0:
e8:73:f6:63:f1:53:63:bb:1f:c7:e5:ee:e6:61:34:a6:73:73:
31:f6:41:79:c0:fb:9b:45:2d:96:0b:c6:de:dc:e6:96:a6:df:
f4:1e:93:f1:a9:76:03:e4:24:4e:52:7d:ce:f9:4b:e4:96:fd:
0e:b4:e2:b5:70:ae:33:4f:79:e1:80:8e:94:0b:33:84:d1:34:
1b:9b:e1:59:bb:cc:6c:b7:ba:01:98:51:f7:65:40:4e:37:64:
d3:7d:ff:d6:65:3e:94:9b:43:29:d5:ff:34:3c:ee:32:80:40:
4b:b4:37:39
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZI9jCmq5UtAYV87P0KHrn9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQwOTI5MTEzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQ2MTc4NjE5OTdmOGIyMjViZWMxOWQxYjhkZGFiZTQ1YWZjNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprT6rCXd/xwc8OtahfHv2ZALLcFI
+fKj51BJsz7UImmZnUSBu3GKXSv0lbWlE8gwZLmOoRckfZAGfmya18IvaO2bvNbm
VxJqF0fWVzK3ixKpnM+hbXVETzP6UlMzM7S1Five8VwquuyAuABj1yznJpd8TyEA
HMYrPham0A0ar1upCB7uWiSeVw1ncNBe3+k6+c6eQIkITX3CpN86/7zlPfXO12RS
63b3m6w+AS37bUbFHWNh8cCABdQFJPn/GXXhrJ+TI3wLCkREhZ91G2oiSuP0Gpyq
egmkRxfNLfTgAIRfxK6UzF2z4kEllSX8rrt/kjNF+BEq0zfULgvTtZ+FAwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFApGF4YZl/iyJb7BnRuN2r5Fr8WZMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvQ2tZWGhobVgtTElsdnNHZEc0M2F2a1d2eFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwUDKgSlwAMF
AyoODQADBQMqDrFAAwUDKg7DgAMFAyoP24ADBQMqEEcAAwUDKhJDAAMFAyoTE0AD
BQMqE0/AMA0GCSqGSIb3DQEBCwUAA4IBAQBS+vgJsm9J8g0hzVIXU/aQWILwPGcq
nit4d79h7iTzyrCjt/AmBgADu2Swnxl/smkkdX0pT5plhlg60SnxEl4pIWsJrJdd
PmrDef5q3L3ap98qySLPk+J1+L8O9t+4jA54wbjNBlo2nXeObvOVNsPoKxBRGHXS
Tz29xAz/XDMa4w5MeGtzFfuHvxpjoLq5v/Doc/Zj8VNjux/H5e7mYTSmc3Mx9kF5
wPubRS2WC8be3OaWpt/0HpPxqXYD5CROUn3O+Uvklv0OtOK1cK4zT3nhgI6UCzOE
0TQbm+FZu8xst7oBmFH3ZUBON2TTff/WZT6Um0Mp1f80PO4ygEBLtDc5
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:17 2025 by rpki-client