Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa
File: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (raw, json)
Hash identifier: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=
Subject key identifier: EA:61:F5:C8:39:54:87:AA:46:F5:19:5E:65:BD:C4:19:7B:B9:F5:98
Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial: 019426D9EB32460725B10F1F8BED88942C13
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200559
IP address blocks: 2001:67c:2edc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:eb:32:46:07:25:b1:0f:1f:8b:ed:88:94:2c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea61f5c8395487aa46f5195e65bdc4197bb9f598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:d1:04:2f:fb:44:30:d3:3e:ea:8e:43:18:
27:0f:c1:7b:a4:d8:79:ce:06:5e:3f:d3:ef:7b:cf:
e2:b6:65:59:79:dc:c6:47:b3:e4:73:f0:9e:c3:e5:
8d:79:2d:8a:6e:b2:42:be:6e:bd:f8:32:c6:c2:e7:
f6:ec:f3:b1:fc:c2:02:09:cb:2d:0d:5b:69:b6:0f:
16:4b:ef:ae:38:28:ff:af:7a:81:89:77:6e:b5:26:
f0:87:17:c5:03:e4:80:c5:7e:04:97:ec:d9:4c:6a:
28:58:dd:f0:e1:68:38:b4:75:6d:c5:8a:33:9d:de:
b0:77:c8:99:57:36:f3:aa:d7:30:3e:36:ef:8c:b3:
05:27:2e:7e:59:28:c8:76:59:60:63:48:03:9c:ff:
11:92:cb:c7:1d:38:d0:4f:61:9b:2a:4e:12:47:f2:
60:a9:b8:b5:22:85:e9:57:69:d8:3c:cb:ea:2e:e4:
08:b3:7b:90:4d:44:e9:b6:71:d0:be:76:87:68:41:
25:c9:a5:76:af:24:d5:cd:6d:2f:b7:34:3e:82:6a:
1b:66:c2:38:ce:5b:d7:8b:df:f8:e5:df:3b:e2:ff:
d0:06:f6:ed:78:f0:09:02:c9:51:3a:a1:23:59:5d:
6e:d5:80:bc:3b:d7:02:de:3c:99:14:f1:a9:29:36:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:F5:C8:39:54:87:AA:46:F5:19:5E:65:BD:C4:19:7B:B9:F5:98
X509v3 Authority Key Identifier:
keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2edc::/48
Signature Algorithm: sha256WithRSAEncryption
68:b9:39:95:3b:23:17:06:5b:91:97:5c:8d:cf:9e:ed:b9:f4:
6f:de:3d:75:6f:91:7e:d2:35:32:e8:b5:fa:04:21:45:4d:08:
9f:09:dd:42:83:66:ad:4b:87:bc:ee:6a:7e:ab:99:ea:06:3b:
d4:5e:f7:cc:43:99:2f:d7:13:cc:fc:0d:a1:42:ef:53:c2:ba:
bd:64:1c:64:4e:ac:7d:4d:b3:9a:c0:ef:b9:55:98:85:b0:8c:
6d:3c:d3:4d:11:83:c4:b0:64:dd:8f:44:89:de:ca:f1:28:d1:
a6:51:0e:89:73:78:73:f2:05:3c:c2:a0:38:7b:a9:c9:ff:f5:
cc:af:48:a3:a9:57:29:61:5c:93:72:3a:87:2c:2c:cc:c7:76:
18:5d:83:f2:b7:7f:4b:a5:66:39:a9:83:1a:4f:95:60:75:16:
e6:51:05:75:e6:dc:c9:30:49:23:85:f3:cc:5d:17:44:57:03:
f0:9d:7b:88:4f:f4:88:41:b2:e2:e1:ab:6e:0f:d3:91:55:0d:
08:cd:c6:c5:b2:29:d3:4e:54:24:7b:9f:e2:78:d4:dd:c5:8a:
e8:db:f8:dd:96:20:aa:f8:94:8c:4d:15:74:d2:96:9f:b7:4c:
bf:6b:1c:e3:84:2f:96:99:78:fa:e0:5f:e1:d5:85:f8:5e:4e:
47:f5:e4:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2esyRgclsQ8fi+2IlCwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl
NzAyZTcwHhcNMjUwMTAyMTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTYxZjVjODM5NTQ4N2FhNDZmNTE5NWU2NWJkYzQxOTdiYjlmNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnfRBC/7RDDTPuqOQxgnD8F7pNh5
zgZeP9Pve8/itmVZedzGR7Pkc/Cew+WNeS2KbrJCvm69+DLGwuf27POx/MICCcst
DVtptg8WS++uOCj/r3qBiXdutSbwhxfFA+SAxX4El+zZTGooWN3w4Wg4tHVtxYoz
nd6wd8iZVzbzqtcwPjbvjLMFJy5+WSjIdllgY0gDnP8RksvHHTjQT2GbKk4SR/Jg
qbi1IoXpV2nYPMvqLuQIs3uQTUTptnHQvnaHaEElyaV2ryTVzW0vtzQ+gmobZsI4
zlvXi9/45d874v/QBvbtePAJAslROqEjWV1u1YC8O9cC3jyZFPGpKTYc0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOph9cg5VIeqRvUZXmW9xBl7ufWYMB8GA1UdIwQY
MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt
YzJjZjQ1M2MzZTJlLzEvNm1IMXlEbFVoNnBHOVJsZVpiM0VHWHU1OVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl
LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7c
MA0GCSqGSIb3DQEBCwUAA4IBAQBouTmVOyMXBluRl1yNz57tufRv3j11b5F+0jUy
6LX6BCFFTQifCd1Cg2atS4e87mp+q5nqBjvUXvfMQ5kv1xPM/A2hQu9Twrq9ZBxk
Tqx9TbOawO+5VZiFsIxtPNNNEYPEsGTdj0SJ3srxKNGmUQ6Jc3hz8gU8wqA4e6nJ
//XMr0ijqVcpYVyTcjqHLCzMx3YYXYPyt39LpWY5qYMaT5VgdRbmUQV15tzJMEkj
hfPMXRdEVwPwnXuIT/SIQbLi4atuD9ORVQ0IzcbFsinTTlQke5/ieNTdxYro2/jd
liCq+JSMTRV00paft0y/axzjhC+WmXj64F/h1YX4Xk5H9eTq
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:04 2025 by rpki-client