Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa
File: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (raw, json)
Hash identifier: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=
Subject key identifier: 11:C6:FE:98:F2:41:D0:48:04:B6:60:B1:04:EF:91:F1:0E:25:F0:F7
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 019425219154AB8C537360D0CBB074BE3FB3
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211194
IP address blocks: 2001:67c:b28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:91:54:ab:8c:53:73:60:d0:cb:b0:74:be:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c6fe98f241d04804b660b104ef91f10e25f0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:63:c3:5f:79:d8:62:78:2e:5c:53:92:61:
9e:20:7a:48:40:da:0a:3c:bf:fa:36:66:6a:8b:1c:
83:c7:99:91:79:b2:82:8d:75:3a:fb:90:7d:97:aa:
0d:ba:da:2a:98:13:5e:26:3e:be:9a:bd:50:a3:3a:
87:53:82:80:97:cb:fe:b7:e0:b7:04:c9:d5:40:6e:
8f:74:3e:bc:8b:e7:4c:f7:88:ff:b3:25:61:c7:35:
4d:d6:28:f0:7f:75:b3:82:10:2f:78:ac:d5:5e:8b:
08:fc:de:4a:09:9e:66:7e:f7:bb:5a:e9:17:63:bc:
2f:d3:c4:72:aa:cf:74:c9:d0:84:1f:4f:5f:53:3b:
e9:51:99:7d:0e:36:93:fe:ac:40:45:8c:53:9a:11:
82:0d:e2:ce:6f:a9:11:df:f7:34:61:46:54:99:69:
11:08:c5:73:5c:78:4d:ec:94:1c:07:68:0d:13:05:
b1:2f:d5:ca:99:29:7d:a6:6d:0c:b1:2f:15:47:8b:
61:35:b3:e5:2c:4a:a4:bc:3f:c8:88:cb:62:61:63:
c0:17:03:eb:3b:bf:fa:d1:4c:c9:85:b8:6f:70:93:
1e:b4:58:9f:90:1d:8f:ef:3f:5f:64:70:2f:14:76:
22:1d:3e:01:f2:09:38:67:28:bc:25:6b:c5:25:22:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:FE:98:F2:41:D0:48:04:B6:60:B1:04:EF:91:F1:0E:25:F0:F7
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b28::/48
Signature Algorithm: sha256WithRSAEncryption
5d:f2:52:10:cf:68:12:f2:e1:37:f5:8f:53:e6:f5:92:93:36:
61:79:db:33:22:ee:dc:cd:b9:df:92:b3:50:d8:a0:1e:01:46:
d8:0a:02:33:ab:d7:36:a8:5a:a8:c1:ac:a0:74:02:cd:90:97:
f6:f4:ec:64:0a:1c:1c:43:24:32:11:97:38:f8:42:71:66:8b:
40:24:73:50:3a:51:f2:d6:a3:3d:97:ca:82:22:2b:02:1a:d6:
e9:68:f4:72:92:27:81:97:29:07:55:de:98:78:09:cb:9d:62:
3e:1a:23:c7:f1:8d:31:23:3e:94:31:14:36:ef:7c:5a:c9:39:
78:1d:a0:00:06:13:fe:eb:4b:f9:87:89:13:57:76:17:e2:87:
0f:b3:34:65:f1:1a:e6:61:be:9f:a8:5f:2a:4a:4e:1b:a4:b5:
23:df:b8:76:fe:bd:75:0a:ea:70:13:96:49:6e:9e:f2:87:bd:
fc:35:b1:33:c5:7e:51:1d:71:89:73:15:13:41:7c:b3:7e:70:
c0:d0:c4:27:f4:5c:6d:2a:c7:71:47:a4:60:c1:f8:a7:6d:07:
69:5b:ea:8d:ca:c7:d1:6c:41:5e:ff:ab:60:08:25:59:ac:6f:
44:c6:fb:4d:2c:a0:ea:cb:58:53:cb:8f:18:f2:b8:df:8c:17:
f2:3f:88:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIZFUq4xTc2DQy7B0vj+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmFjMmMyMWIyZGJjODEyZGQyNWQxY2I3OWMzZmJhNTQx
OWU1OTMwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM2ZmU5OGYyNDFkMDQ4MDRiNjYwYjEwNGVmOTFmMTBlMjVmMGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z9jw1952GJ4LlxTkmGeIHpIQNoK
PL/6NmZqixyDx5mRebKCjXU6+5B9l6oNutoqmBNeJj6+mr1QozqHU4KAl8v+t+C3
BMnVQG6PdD68i+dM94j/syVhxzVN1ijwf3WzghAveKzVXosI/N5KCZ5mfve7WukX
Y7wv08Ryqs90ydCEH09fUzvpUZl9DjaT/qxARYxTmhGCDeLOb6kR3/c0YUZUmWkR
CMVzXHhN7JQcB2gNEwWxL9XKmSl9pm0MsS8VR4thNbPlLEqkvD/IiMtiYWPAFwPr
O7/60UzJhbhvcJMetFifkB2P7z9fZHAvFHYiHT4B8gk4Zyi8JWvFJSLVUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBHG/pjyQdBIBLZgsQTvkfEOJfD3MB8GA1UdIwQY
MBaAFPf6wsIbLbyBLdJdHLecP7pUGeWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2Mt
ZmZhZDRmYjBhNzEzLzEvRWNiLW1QSkIwRWdFdG1DeEJPLVI4UTRsOFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2MtZmZhZDRmYjBhNzEz
LzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAso
MA0GCSqGSIb3DQEBCwUAA4IBAQBd8lIQz2gS8uE39Y9T5vWSkzZhedszIu7czbnf
krNQ2KAeAUbYCgIzq9c2qFqowaygdALNkJf29OxkChwcQyQyEZc4+EJxZotAJHNQ
OlHy1qM9l8qCIisCGtbpaPRykieBlykHVd6YeAnLnWI+GiPH8Y0xIz6UMRQ273xa
yTl4HaAABhP+60v5h4kTV3YX4ocPszRl8RrmYb6fqF8qSk4bpLUj37h2/r11Cupw
E5ZJbp7yh738NbEzxX5RHXGJcxUTQXyzfnDA0MQn9FxtKsdxR6RgwfinbQdpW+qN
ysfRbEFe/6tgCCVZrG9ExvtNLKDqy1hTy48Y8rjfjBfyP4iO
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:57 2025 by rpki-client