Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oBYYyC-60L0r_wZLXxoKJx4dcNM.roa
File: oBYYyC-60L0r_wZLXxoKJx4dcNM.roa (raw, json)
Hash identifier: c8+S4REkomysdKzJeTRoybfVEmKwiNvT9F//LPq37KU=
Subject key identifier: A0:16:18:C8:2F:BA:D0:BD:2B:FF:06:4B:5F:1A:0A:27:1E:1D:70:D3
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B5716ABA61FA67E4111AD79ACE09D0
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oBYYyC-60L0r_wZLXxoKJx4dcNM.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211027
IP address blocks: 2a10:4100::/32 maxlen: 32
2a12:a345::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:71:6a:ba:61:fa:67:e4:11:1a:d7:9a:ce:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01618c82fbad0bd2bff064b5f1a0a271e1d70d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:05:6b:94:63:18:75:5e:ff:a2:f6:e3:7b:
bd:1f:b6:2d:d2:94:cd:60:c3:70:ab:37:27:a9:8e:
fd:69:2c:91:68:ef:81:3c:fc:92:b1:0b:46:4c:77:
63:a3:88:41:1f:a0:46:71:d6:fb:e6:e3:9d:aa:c1:
be:1a:97:05:e8:64:4f:6f:7c:42:b0:7a:77:81:14:
2c:24:0d:9e:55:18:a3:68:c6:76:4a:91:7e:16:da:
ff:93:ff:a5:cb:8f:ab:7a:0c:36:78:8a:65:d4:f9:
5d:59:e1:1d:1f:d8:42:a6:da:b9:df:f7:ab:ff:43:
aa:02:36:e6:0c:16:dc:10:26:82:21:94:ab:cd:28:
72:5e:f0:3d:e7:83:7f:81:d7:f6:be:b5:68:08:99:
b7:f5:39:cf:ff:40:05:1e:40:19:2e:ec:fe:92:c5:
62:43:69:85:00:b3:07:d1:69:bc:21:c2:9b:3a:0b:
b8:68:07:28:b8:db:eb:08:46:72:15:d6:05:bc:2d:
64:db:98:c5:42:30:4f:6b:c2:65:be:3d:a1:c9:70:
a2:96:48:6a:4a:94:6a:06:9e:62:c8:f3:3c:3c:1a:
78:b0:ff:cd:1d:b9:e2:72:e8:3f:ff:da:6d:b3:69:
d5:ea:53:b7:50:2b:8c:a6:df:1f:dd:54:9a:b7:6a:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:18:C8:2F:BA:D0:BD:2B:FF:06:4B:5F:1A:0A:27:1E:1D:70:D3
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oBYYyC-60L0r_wZLXxoKJx4dcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4100::/32
2a12:a345::/32
Signature Algorithm: sha256WithRSAEncryption
38:d9:ad:2b:c9:1e:9f:1a:8a:0f:22:f8:68:6a:82:25:88:0b:
02:dd:6e:c5:bd:ad:f9:60:a1:03:50:2f:c8:6f:ab:07:1b:3c:
4e:7b:65:c4:23:d1:a7:22:33:90:4d:be:a3:b7:b9:dd:25:43:
eb:2f:48:26:2a:8f:ba:e7:a1:37:c8:5d:37:d5:8f:28:8b:cd:
d4:4f:b8:f3:85:83:35:e9:fa:ac:cd:cb:9d:3a:1a:db:db:8f:
1d:80:ed:5f:a5:d7:ea:13:b4:f5:0f:35:b0:bf:17:09:a3:70:
ab:9b:b2:2c:d7:85:40:18:80:74:b4:1a:ed:77:76:3e:33:c0:
14:62:2d:91:73:7d:5d:59:2f:56:0f:a8:14:8f:bf:12:14:c6:
e7:87:42:f9:11:da:26:d9:f3:06:41:5e:af:a5:bb:01:e0:df:
2e:12:51:dd:c3:d1:df:87:3b:bf:c4:13:a3:45:13:3f:8d:a7:
a3:ee:45:7b:8d:79:a4:58:d2:01:c2:e1:db:37:84:56:b1:a6:
8e:4a:66:20:51:47:d5:a0:55:34:1b:26:25:f6:f0:ba:93:28:
cd:61:c3:7a:71:cc:76:45:49:ec:24:29:4d:a5:9e:b6:2a:69:
40:ec:2c:03:aa:55:c8:ca:bf:52:1b:da:c5:a0:60:c2:20:ce:
37:86:7e:d4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQntXFqumH6Z+QRGteazgnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTAyMTU0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDE2MThjODJmYmFkMGJkMmJmZjA2NGI1ZjFhMGEyNzFlMWQ3MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZAFa5RjGHVe/6L243u9H7Yt0pTN
YMNwqzcnqY79aSyRaO+BPPySsQtGTHdjo4hBH6BGcdb75uOdqsG+GpcF6GRPb3xC
sHp3gRQsJA2eVRijaMZ2SpF+Ftr/k/+ly4+regw2eIpl1PldWeEdH9hCptq53/er
/0OqAjbmDBbcECaCIZSrzShyXvA954N/gdf2vrVoCJm39TnP/0AFHkAZLuz+ksVi
Q2mFALMH0Wm8IcKbOgu4aAcouNvrCEZyFdYFvC1k25jFQjBPa8Jlvj2hyXCilkhq
SpRqBp5iyPM8PBp4sP/NHbnicug//9pts2nV6lO3UCuMpt8f3VSat2qQvwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKAWGMgvutC9K/8GS18aCiceHXDTMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvb0JZWXlDLTYwTDByX3daTFh4b0tKeDRkY05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhBBAAMF
ACoSo0UwDQYJKoZIhvcNAQELBQADggEBADjZrSvJHp8aig8i+GhqgiWICwLdbsW9
rflgoQNQL8hvqwcbPE57ZcQj0aciM5BNvqO3ud0lQ+svSCYqj7rnoTfIXTfVjyiL
zdRPuPOFgzXp+qzNy506Gtvbjx2A7V+l1+oTtPUPNbC/FwmjcKubsizXhUAYgHS0
Gu13dj4zwBRiLZFzfV1ZL1YPqBSPvxIUxueHQvkR2ibZ8wZBXq+luwHg3y4SUd3D
0d+HO7/EE6NFEz+Np6PuRXuNeaRY0gHC4ds3hFaxpo5KZiBRR9WgVTQbJiX28LqT
KM1hw3pxzHZFSewkKU2lnrYqaUDsLAOqVcjKv1Ib2sWgYMIgzjeGftQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:09 2025 by rpki-client