Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa
File: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (raw, json)
Hash identifier: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=
Subject key identifier: 8D:47:14:C9:AB:1D:07:51:7F:8C:9D:48:BB:82:5E:B2:ED:9B:3A:9F
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019423D6BE01086282EF60A27C5E53B89AD8
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:a30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:be:01:08:62:82:ef:60:a2:7c:5e:53:b8:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4714c9ab1d07517f8c9d48bb825eb2ed9b3a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:ef:2f:58:d0:9c:e6:4f:f7:6a:c5:af:f8:
35:e8:25:81:4b:25:78:e7:60:72:61:17:c6:c7:6c:
db:3c:87:eb:24:20:a4:66:ca:d9:ef:9c:cf:a7:c0:
85:85:21:40:6a:2b:fb:f8:ff:15:8f:43:a9:10:55:
ea:a5:dc:95:3b:bc:2f:92:56:90:e1:60:2f:e4:6f:
27:4c:9d:3b:56:1b:68:27:b9:07:f8:46:72:d1:b4:
d6:13:09:a0:ad:e7:38:f8:ef:13:f2:2e:97:90:03:
89:8a:91:bd:bf:cf:d3:ea:8e:21:de:f1:14:9e:f9:
7a:a7:d5:d1:4c:4f:a2:7d:b6:4f:33:87:57:82:db:
eb:f6:58:7c:62:62:52:79:6e:e9:ca:26:16:77:57:
b0:10:dc:2a:d7:3f:79:cb:74:ac:32:13:7d:0c:e6:
01:ec:0f:8c:a8:a5:80:2b:8a:04:1d:3f:ab:ce:e5:
3e:c2:46:7a:d1:1c:42:4b:e9:bf:0c:3b:ef:41:1f:
96:26:68:35:29:90:03:d6:a1:65:26:5d:af:b3:6f:
67:bc:b5:fb:7b:02:69:5f:af:80:18:55:7d:7f:06:
75:b7:b8:2e:95:dc:a5:fa:11:38:bf:04:19:dc:7d:
33:19:85:f6:52:a1:f6:6f:a1:bc:40:41:b0:10:4d:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:14:C9:AB:1D:07:51:7F:8C:9D:48:BB:82:5E:B2:ED:9B:3A:9F
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a30::/48
Signature Algorithm: sha256WithRSAEncryption
ac:61:17:79:30:d8:8d:5a:c8:0c:2b:66:bc:59:84:1f:d4:f6:
18:21:52:d0:71:e0:24:4a:4e:25:0c:8b:ef:e7:e2:b3:08:f4:
75:ac:6c:f8:40:3d:df:5d:df:b1:98:44:5a:03:94:26:b9:31:
09:9f:0f:e5:c3:60:4b:53:84:6e:e5:54:ac:d0:1f:8f:40:13:
ec:10:ea:95:d6:2a:32:6a:a4:85:45:e7:77:b7:3f:52:a1:86:
06:a0:d9:80:69:14:e7:89:4a:ce:33:0e:66:47:11:27:9c:21:
93:b1:f3:f6:ce:79:fb:37:79:20:86:91:5c:35:89:70:8a:c6:
cc:a3:c0:aa:4d:58:92:95:14:41:47:e9:41:47:18:84:c5:c4:
a7:f8:ac:35:05:43:98:94:88:31:71:03:b4:37:48:5b:7e:8f:
a7:19:cf:7b:d5:1c:3d:9f:fd:3c:6e:3d:80:f7:bf:e3:85:4e:
c3:b9:40:8c:55:d8:78:8d:9b:57:4a:ea:ce:85:58:17:6b:72:
e6:8a:7a:12:96:be:41:df:48:69:b6:9c:48:97:ef:4f:22:9e:
a9:9c:3c:bd:43:76:b5:72:7c:c8:b2:b7:96:08:e0:4c:83:22:
36:2a:5b:2b:53:f5:ed:e5:d8:69:e9:f9:a3:ea:8d:23:c1:18:
6c:e1:43:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1r4BCGKC72CifF5TuJrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDQ3MTRjOWFiMWQwNzUxN2Y4YzlkNDhiYjgyNWViMmVkOWIzYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LfvL1jQnOZP92rFr/g16CWBSyV4
52ByYRfGx2zbPIfrJCCkZsrZ75zPp8CFhSFAaiv7+P8Vj0OpEFXqpdyVO7wvklaQ
4WAv5G8nTJ07VhtoJ7kH+EZy0bTWEwmgrec4+O8T8i6XkAOJipG9v8/T6o4h3vEU
nvl6p9XRTE+ifbZPM4dXgtvr9lh8YmJSeW7pyiYWd1ewENwq1z95y3SsMhN9DOYB
7A+MqKWAK4oEHT+rzuU+wkZ60RxCS+m/DDvvQR+WJmg1KZAD1qFlJl2vs29nvLX7
ewJpX6+AGFV9fwZ1t7guldyl+hE4vwQZ3H0zGYX2UqH2b6G8QEGwEE39zQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI1HFMmrHQdRf4ydSLuCXrLtmzqfMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvalVjVXlhc2RCMUZfakoxSXU0SmVzdTJiT3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAow
MA0GCSqGSIb3DQEBCwUAA4IBAQCsYRd5MNiNWsgMK2a8WYQf1PYYIVLQceAkSk4l
DIvv5+KzCPR1rGz4QD3fXd+xmERaA5QmuTEJnw/lw2BLU4Ru5VSs0B+PQBPsEOqV
1ioyaqSFRed3tz9SoYYGoNmAaRTniUrOMw5mRxEnnCGTsfP2znn7N3kghpFcNYlw
isbMo8CqTViSlRRBR+lBRxiExcSn+Kw1BUOYlIgxcQO0N0hbfo+nGc971Rw9n/08
bj2A97/jhU7DuUCMVdh4jZtXSurOhVgXa3LminoSlr5B30hptpxIl+9PIp6pnDy9
Q3a1cnzIsreWCOBMgyI2KlsrU/Xt5dhp6fmj6o0jwRhs4UP5
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:37 2025 by rpki-client