Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/fU6yW_PiEcFG6y0YRf-8f1Jzu_Q.roa
File: fU6yW_PiEcFG6y0YRf-8f1Jzu_Q.roa (raw, json)
Hash identifier: 2+Tq9mzuPHMsXsWwvsSna6yZaCK0no4VyORSRWilikA=
Subject key identifier: 7D:4E:B2:5B:F3:E2:11:C1:46:EB:2D:18:45:FF:BC:7F:52:73:BB:F4
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0194252219E171F31483B8DF2FF2EA841217
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/fU6yW_PiEcFG6y0YRf-8f1Jzu_Q.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 46.60.128.0/17 maxlen: 24
185.224.12.0/22 maxlen: 24
2a03:c500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:19:e1:71:f3:14:83:b8:df:2f:f2:ea:84:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4eb25bf3e211c146eb2d1845ffbc7f5273bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:b2:a5:b9:22:c2:c3:55:2c:15:e6:37:7b:
75:66:56:2c:4e:63:2a:ba:f5:af:5d:4e:04:d1:68:
b8:5c:56:e0:d8:c3:dd:95:ac:aa:11:36:fb:6d:97:
21:65:d0:c3:b2:96:bc:de:50:20:56:10:48:8d:b7:
68:51:a9:c2:15:b6:9d:60:47:fe:99:31:77:29:16:
78:88:32:d2:3c:85:08:5d:27:2b:e4:60:32:0d:b0:
47:06:0a:07:22:1d:89:93:7c:19:e7:ae:b5:0f:9b:
46:f4:a1:7a:4a:50:e9:10:fc:8b:b9:eb:88:0a:a2:
45:50:7d:1b:07:b4:62:67:d5:9e:b5:92:dd:97:26:
f4:c7:14:e7:cf:1b:32:85:c9:c7:cb:fe:78:3b:d4:
c1:5d:2c:05:b0:06:61:70:30:f9:0b:3e:09:52:7f:
4a:36:25:57:47:93:d4:b8:c3:ae:ba:fb:c6:78:7e:
ed:a8:ac:cf:50:5c:48:eb:3f:bf:cd:81:65:80:98:
62:79:53:ce:6b:4d:39:01:89:8f:0f:e3:de:b7:0a:
68:82:f8:c9:cd:29:d8:e0:d7:c9:35:f2:3e:d1:bf:
80:2b:59:19:6f:56:3b:3d:47:96:55:7c:51:8e:97:
bf:a7:54:2a:7a:dd:b8:ed:0e:74:55:03:25:3d:61:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:B2:5B:F3:E2:11:C1:46:EB:2D:18:45:FF:BC:7F:52:73:BB:F4
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/fU6yW_PiEcFG6y0YRf-8f1Jzu_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.60.128.0/17
185.224.12.0/22
IPv6:
2a03:c500::/32
Signature Algorithm: sha256WithRSAEncryption
68:02:dc:57:f6:9e:63:05:f3:3b:78:e6:40:4d:07:dd:53:12:
d8:f9:3a:18:db:e9:22:be:5d:ec:43:e6:78:bc:f7:e7:31:2b:
95:da:e5:92:fe:4a:47:3f:00:5b:71:6a:d9:c6:11:0f:54:68:
e4:64:6d:1f:1f:da:1a:d4:79:68:2d:14:cc:6c:04:9f:1b:f0:
7f:49:38:7d:0d:a8:1e:19:af:e4:94:96:bd:b7:2d:f2:36:63:
29:ee:96:66:b5:cd:92:57:01:df:5e:92:3c:40:8c:73:6a:e1:
e5:e1:87:b9:15:9b:c5:b2:d4:67:e9:1e:de:44:6c:cd:37:bd:
2c:79:7b:99:3e:e7:ac:52:57:a0:14:9f:73:d9:f5:93:5d:67:
93:5a:bf:57:79:ed:d7:9b:4c:ca:c1:9c:e0:0e:29:d6:93:94:
5d:27:2e:26:fb:3c:cf:6c:da:39:f4:07:8c:71:fd:f0:2b:7f:
ed:56:d8:08:78:8f:9f:73:d0:7d:d1:8f:7a:dd:8a:ff:75:ef:
12:c0:d1:98:17:ed:6a:ab:d8:c3:0c:bd:97:5c:10:e9:cd:09:
f2:01:fa:f7:22:95:83:75:4c:31:4e:c8:97:7e:f1:46:86:47:
05:11:f1:ed:c6:77:c9:8b:a9:8d:dd:d1:5e:83:2b:e8:5c:00:
99:30:f7:5a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlIhnhcfMUg7jfL/LqhBIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjUwMTAyMDM0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDRlYjI1YmYzZTIxMWMxNDZlYjJkMTg0NWZmYmM3ZjUyNzNiYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreOypbkiwsNVLBXmN3t1ZlYsTmMq
uvWvXU4E0Wi4XFbg2MPdlayqETb7bZchZdDDspa83lAgVhBIjbdoUanCFbadYEf+
mTF3KRZ4iDLSPIUIXScr5GAyDbBHBgoHIh2Jk3wZ5661D5tG9KF6SlDpEPyLueuI
CqJFUH0bB7RiZ9WetZLdlyb0xxTnzxsyhcnHy/54O9TBXSwFsAZhcDD5Cz4JUn9K
NiVXR5PUuMOuuvvGeH7tqKzPUFxI6z+/zYFlgJhieVPOa005AYmPD+PetwpogvjJ
zSnY4NfJNfI+0b+AK1kZb1Y7PUeWVXxRjpe/p1Qqet247Q50VQMlPWG1TwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH1Oslvz4hHBRustGEX/vH9Sc7v0MB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvZlU2eVdfUGlFY0ZHNnkwWVJmLThmMUp6dV9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHLjyAAwQC
ueAMMA0EAgACMAcDBQAqA8UAMA0GCSqGSIb3DQEBCwUAA4IBAQBoAtxX9p5jBfM7
eOZATQfdUxLY+ToY2+kivl3sQ+Z4vPfnMSuV2uWS/kpHPwBbcWrZxhEPVGjkZG0f
H9oa1HloLRTMbASfG/B/STh9DageGa/klJa9ty3yNmMp7pZmtc2SVwHfXpI8QIxz
auHl4Ye5FZvFstRn6R7eRGzNN70seXuZPuesUlegFJ9z2fWTXWeTWr9Xee3Xm0zK
wZzgDinWk5RdJy4m+zzPbNo59AeMcf3wK3/tVtgIeI+fc9B90Y963Yr/de8SwNGY
F+1qq9jDDL2XXBDpzQnyAfr3IpWDdUwxTsiXfvFGhkcFEfHtxnfJi6mN3dFegyvo
XACZMPda
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:34 2025 by rpki-client