Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa
File: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (raw, json)
Hash identifier: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=
Subject key identifier: B5:E5:BE:0D:3F:33:77:33:78:1B:AA:B7:A2:DE:D9:53:FA:B6:68:35
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019420D6500D0D7B927FEA0F7D0CDAE8F9CD
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:fc0:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:50:0d:0d:7b:92:7f:ea:0f:7d:0c:da:e8:f9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e5be0d3f337733781baab7a2ded953fab66835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:7e:37:6f:b7:03:0a:c4:65:75:23:b3:31:
a5:af:6f:58:8d:9c:44:57:76:91:e7:ac:5c:4a:3c:
24:0d:fc:41:8c:d1:56:7c:fa:2b:8b:8e:1c:01:56:
b1:85:2b:32:f8:27:9a:20:08:86:ba:5b:51:34:6e:
22:b0:f9:77:7b:58:6f:4d:24:ab:b0:fb:ad:30:db:
00:2e:51:cf:58:09:1e:f1:d1:46:a7:ac:48:ee:c2:
ee:1d:c4:7a:a4:7a:4b:f1:9e:33:14:8c:8b:3e:47:
d0:af:64:52:87:93:70:84:56:12:e1:83:d1:e4:9f:
9d:9d:82:e1:83:ee:bb:e7:fa:28:c0:bd:4e:01:3f:
2e:54:66:8a:09:00:47:cc:72:9d:03:32:ce:e3:86:
ca:8f:80:a4:28:e8:45:a9:be:10:40:7e:82:dd:65:
16:4c:81:de:e9:25:4a:2e:e7:4b:19:d3:8d:68:ef:
10:e5:dc:fc:b2:3b:40:5e:8f:d3:02:6c:39:3c:53:
01:3d:63:73:3a:6f:76:b0:26:8e:fe:8a:ae:9f:f6:
e9:18:2b:f7:9a:af:70:ac:4e:f2:7b:3a:5c:b6:80:
7a:36:33:46:1e:5d:1f:00:82:a5:4e:37:3f:a0:83:
e5:17:d2:00:52:7a:79:13:a1:e5:e6:c6:b2:1f:1d:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:BE:0D:3F:33:77:33:78:1B:AA:B7:A2:DE:D9:53:FA:B6:68:35
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fc0:10::/44
Signature Algorithm: sha256WithRSAEncryption
8b:5c:72:ee:20:4e:27:8e:73:9c:c2:d7:36:7c:5a:9e:19:d1:
8f:5e:3c:1f:67:05:eb:f0:14:e1:9e:cb:23:cd:43:aa:11:12:
6b:2d:c9:b0:16:49:4b:f3:dc:a9:b4:85:e9:ae:81:5c:2c:9e:
c5:87:0e:aa:f8:c2:56:30:d1:23:6b:9d:7c:56:36:14:61:a3:
bd:d0:01:79:2a:77:30:86:c2:a5:e4:ec:13:ff:a6:9c:ac:a9:
8d:8f:6e:28:e4:59:3c:96:17:92:de:18:fc:19:7c:f7:89:72:
92:38:08:3d:2f:94:49:d1:4b:a0:46:8a:f8:84:74:6a:39:cd:
ce:8a:30:3e:03:da:21:39:5b:b1:06:0e:a8:0a:63:6e:1b:13:
b9:af:31:f4:2d:7a:03:84:8d:2f:aa:52:ed:7f:9f:d1:a6:3f:
ab:7c:5b:61:75:4f:64:79:44:08:fb:83:9f:7f:51:4d:ab:72:
47:68:2c:eb:ed:22:c4:24:c9:3b:11:7c:fd:51:a5:ea:8e:71:
d2:12:2c:2f:0d:cf:64:47:66:eb:dc:58:d3:67:db:c1:1b:2c:
5e:d1:1e:de:91:ce:45:49:28:7c:e3:cc:67:5a:6a:8d:af:de:
0c:1f:09:97:36:02:00:60:40:ab:9c:bd:4b:2b:62:8b:cb:a3:
d2:49:59:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQg1lANDXuSf+oPfQza6PnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU1YmUwZDNmMzM3NzMzNzgxYmFhYjdhMmRlZDk1M2ZhYjY2ODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBx+N2+3AwrEZXUjszGlr29YjZxE
V3aR56xcSjwkDfxBjNFWfPori44cAVaxhSsy+CeaIAiGultRNG4isPl3e1hvTSSr
sPutMNsALlHPWAke8dFGp6xI7sLuHcR6pHpL8Z4zFIyLPkfQr2RSh5NwhFYS4YPR
5J+dnYLhg+675/oowL1OAT8uVGaKCQBHzHKdAzLO44bKj4CkKOhFqb4QQH6C3WUW
TIHe6SVKLudLGdONaO8Q5dz8sjtAXo/TAmw5PFMBPWNzOm92sCaO/oqun/bpGCv3
mq9wrE7yezpctoB6NjNGHl0fAIKlTjc/oIPlF9IAUnp5E6Hl5sayHx1LxQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLXlvg0/M3czeBuqt6Le2VP6tmg1MB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvdGVXLURUOHpkek40RzZxM290N1pVX3EyYURVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhIPwAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCLXHLuIE4njnOcwtc2fFqeGdGPXjwfZwXr8BTh
nssjzUOqERJrLcmwFklL89yptIXproFcLJ7Fhw6q+MJWMNEja518VjYUYaO90AF5
KncwhsKl5OwT/6acrKmNj24o5Fk8lheS3hj8GXz3iXKSOAg9L5RJ0UugRor4hHRq
Oc3OijA+A9ohOVuxBg6oCmNuGxO5rzH0LXoDhI0vqlLtf5/Rpj+rfFthdU9keUQI
+4Off1FNq3JHaCzr7SLEJMk7EXz9UaXqjnHSEiwvDc9kR2br3FjTZ9vBGyxe0R7e
kc5FSSh848xnWmqNr94MHwmXNgIAYECrnL1LK2KLy6PSSVm7
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:37:56 2025 by rpki-client