Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/Kjku4NdODNb86T7rYKviNN80g_Y.roa
File: Kjku4NdODNb86T7rYKviNN80g_Y.roa (raw, json)
Hash identifier: C15WPOEhIEuHuWmkBM+wrV/ZFpk05tzR6he1q4DRzvM=
Subject key identifier: 2A:39:2E:E0:D7:4E:0C:D6:FC:E9:3E:EB:60:AB:E2:34:DF:34:83:F6
Certificate issuer: /CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Certificate serial: 01856F6FFA438B212E1F8E348205923B57C7
Authority key identifier: 48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/Kjku4NdODNb86T7rYKviNN80g_Y.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:5940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fa:43:8b:21:2e:1f:8e:34:82:05:92:3b:57:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a392ee0d74e0cd6fce93eeb60abe234df3483f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:12:52:6e:98:c3:53:51:54:9d:18:ae:e1:
f2:d2:ce:00:41:fa:ba:77:d4:d4:25:9d:73:3f:88:
bc:22:66:95:0e:1c:05:5b:66:8e:db:79:b4:96:2d:
b8:aa:d9:20:90:cc:96:d2:72:77:aa:a5:35:a8:dc:
fd:2f:6a:39:f9:ac:77:a0:1a:74:01:1e:0e:a6:32:
97:e2:87:a2:12:30:3c:88:10:a6:a1:7e:db:c1:f8:
5a:d9:83:69:77:0b:ce:7f:35:93:c9:48:c9:81:75:
f4:f8:66:b5:e1:48:fe:dd:02:cc:8b:aa:99:af:4a:
87:9f:0b:a7:29:b8:32:50:1c:21:84:80:67:2c:60:
75:7f:33:21:88:08:c7:80:7c:94:bd:48:33:82:1c:
95:0b:8d:86:74:c1:c5:99:a1:e9:b9:95:00:8b:2d:
a4:95:16:ac:a9:ec:cc:1c:d2:11:1f:bb:c5:c0:46:
83:ae:cf:88:af:ee:f8:6f:86:ff:dc:f8:0c:66:5c:
45:6f:55:cd:1a:af:ee:78:54:83:33:8e:b7:a8:7e:
c9:d4:ff:c6:b6:71:de:a8:b0:57:eb:33:9c:c6:3a:
6f:33:cb:36:ec:fb:51:38:43:96:25:24:79:e6:19:
c5:86:a5:62:96:8c:f2:13:af:64:63:25:71:0d:64:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:2E:E0:D7:4E:0C:D6:FC:E9:3E:EB:60:AB:E2:34:DF:34:83:F6
X509v3 Authority Key Identifier:
keyid:48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/Kjku4NdODNb86T7rYKviNN80g_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/SK2Gz_EWcKs8aai24FBANzOqMO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5940::/29
Signature Algorithm: sha256WithRSAEncryption
46:6c:a3:59:76:55:61:98:09:27:58:ae:60:13:48:59:ce:97:
71:ec:59:24:67:3f:6f:41:59:74:17:96:dd:c5:0d:83:61:f0:
f9:84:b6:17:31:33:4c:f2:82:6d:cf:c7:b3:37:c6:62:92:9d:
d0:90:96:49:76:dc:b1:1c:97:73:97:6e:57:e7:61:9c:8c:18:
04:cc:f0:d7:fd:38:0b:99:aa:8a:db:8b:4e:00:05:65:df:06:
97:20:fe:4d:d1:df:ed:53:00:b1:2c:ec:06:e9:a0:64:ca:99:
1f:a9:dd:0a:1d:f1:58:3d:97:d7:fb:4a:4d:88:d6:d8:9f:fc:
35:2e:a8:55:04:62:4c:6a:00:4b:90:4f:38:b8:68:6c:ca:18:
d6:75:32:75:bb:5c:5f:5f:bb:50:a9:22:ea:4a:6d:31:f8:25:
1b:19:6b:e1:8b:91:9d:db:dc:b1:b9:7e:e5:97:39:c7:5d:10:
44:ea:74:74:9f:d0:b1:a8:f7:98:a2:79:e6:dd:86:47:b8:01:
0a:b6:20:93:c9:37:a0:05:cb:cb:2b:be:cb:0f:4f:ba:69:6c:
9b:06:dc:71:e5:cf:b6:20:00:11:1b:02:ec:f3:76:50:82:1c:
cb:05:18:52:2a:6c:36:84:94:f1:e6:c1:9c:b2:ab:ad:9e:90:
87:a3:2c:0a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvb/pDiyEuH440ggWSO1fHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWQ4NmNmZjExNjcwYWIzYzY5YThiNmUwNTA0MDM3MzNh
YTMwZWYwHhcNMjMwMTAxMjIyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTM5MmVlMGQ3NGUwY2Q2ZmNlOTNlZWI2MGFiZTIzNGRmMzQ4M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/oSUm6Yw1NRVJ0YruHy0s4AQfq6
d9TUJZ1zP4i8ImaVDhwFW2aO23m0li24qtkgkMyW0nJ3qqU1qNz9L2o5+ax3oBp0
AR4OpjKX4oeiEjA8iBCmoX7bwfha2YNpdwvOfzWTyUjJgXX0+Ga14Uj+3QLMi6qZ
r0qHnwunKbgyUBwhhIBnLGB1fzMhiAjHgHyUvUgzghyVC42GdMHFmaHpuZUAiy2k
lRasqezMHNIRH7vFwEaDrs+Ir+74b4b/3PgMZlxFb1XNGq/ueFSDM463qH7J1P/G
tnHeqLBX6zOcxjpvM8s27PtROEOWJSR55hnFhqVilozyE69kYyVxDWRlbQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCo5LuDXTgzW/Ok+62Cr4jTfNIP2MB8GA1UdIwQY
MBaAFEiths/xFnCrPGmotuBQQDczqjDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0syR3pfRVdjS3M4YWFpMjRGQkFOek9xTU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZWZmODYtNWMyMi00ZWQzLTlhMjgt
NWNlMDkxMmNhYmRkLzEvS2prdTROZE9ETmI4NlQ3cllLdmlOTjgwZ19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZWZmODYtNWMyMi00ZWQzLTlhMjgtNWNlMDkxMmNhYmRk
LzEvU0syR3pfRVdjS3M4YWFpMjRGQkFOek9xTU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFZQDAN
BgkqhkiG9w0BAQsFAAOCAQEARmyjWXZVYZgJJ1iuYBNIWc6XcexZJGc/b0FZdBeW
3cUNg2Hw+YS2FzEzTPKCbc/HszfGYpKd0JCWSXbcsRyXc5duV+dhnIwYBMzw1/04
C5mqituLTgAFZd8GlyD+TdHf7VMAsSzsBumgZMqZH6ndCh3xWD2X1/tKTYjW2J/8
NS6oVQRiTGoAS5BPOLhobMoY1nUydbtcX1+7UKki6kptMfglGxlr4YuRndvcsbl+
5Zc5x10QROp0dJ/Qsaj3mKJ55t2GR7gBCrYgk8k3oAXLyyu+yw9PumlsmwbcceXP
tiAAERsC7PN2UIIcywUYUipsNoSU8ebBnLKrrZ6Qh6MsCg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:37 2025 by rpki-client