Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/t8HA_uc7gb7j7V6zDu16rLSfmbY.roa
File: t8HA_uc7gb7j7V6zDu16rLSfmbY.roa (raw, json)
Hash identifier: 65eTp9NXdbJh5u5INSJT1dWSnT06TM3hY9aEgJ3l7Ew=
Subject key identifier: B7:C1:C0:FE:E7:3B:81:BE:E3:ED:5E:B3:0E:ED:7A:AC:B4:9F:99:B6
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019424459775AD1076CDCD7C3031604CC9CE
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/t8HA_uc7gb7j7V6zDu16rLSfmbY.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214512
IP address blocks: 2a05:4140:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:97:75:ad:10:76:cd:cd:7c:30:31:60:4c:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c1c0fee73b81bee3ed5eb30eed7aacb49f99b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:9e:3a:21:f3:55:2a:64:b4:d6:54:e7:25:
0e:02:ab:4b:56:65:4b:c1:2e:b3:25:37:88:e7:aa:
fe:aa:17:ca:81:ba:49:0b:8c:03:05:fa:72:fc:eb:
b5:bf:c1:ac:42:02:6b:57:f2:f3:72:dc:b6:bf:40:
29:dc:e6:bb:8b:0f:71:5b:3b:ef:b6:1a:21:8e:0a:
c5:fb:b7:98:6f:69:98:9b:ac:c4:ad:f8:48:c0:77:
12:a7:3c:02:75:eb:de:a2:8c:35:85:e3:75:56:45:
8c:13:e5:c4:98:28:7d:a1:1b:81:20:a0:96:30:bf:
ab:f2:69:b4:fa:d4:56:eb:77:6f:96:15:e1:f3:04:
a0:32:72:0a:b2:8f:a2:6d:6f:63:d4:83:3c:d5:2d:
f6:b3:ca:e1:40:d5:ec:ed:f5:93:0d:91:f5:c6:37:
15:7e:15:0a:3b:a0:81:ab:54:97:ef:e7:61:60:d1:
27:6c:1a:d5:df:06:56:c7:3d:1c:d9:82:93:b4:f8:
00:56:94:14:97:e7:03:58:50:fc:0d:2f:b0:9d:7f:
9a:d5:3a:6f:11:1a:bd:01:11:91:47:30:b5:14:b4:
a7:67:81:db:df:58:26:61:ef:2d:77:27:47:61:71:
2e:f3:06:58:49:04:80:1d:ee:4a:f9:8a:08:0e:1c:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:C0:FE:E7:3B:81:BE:E3:ED:5E:B3:0E:ED:7A:AC:B4:9F:99:B6
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/t8HA_uc7gb7j7V6zDu16rLSfmbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:200::/40
Signature Algorithm: sha256WithRSAEncryption
60:14:73:29:0c:10:b2:65:7e:a1:d7:5e:21:a3:09:e6:57:b3:
91:bc:42:ea:09:ca:06:65:d7:61:16:b1:69:5e:34:34:53:46:
7a:70:4d:bd:67:3f:7e:25:9b:bd:c5:51:ef:58:ee:15:73:85:
10:fd:16:2d:31:80:19:6c:4f:d3:d3:25:33:77:01:91:48:b1:
29:27:0a:59:54:70:2a:6a:c7:c8:32:53:09:01:f0:ee:86:b7:
45:8b:55:ca:bd:15:7c:6f:f9:58:5d:7c:55:72:51:3d:10:98:
1a:a3:cb:2d:30:eb:2c:4f:12:20:e6:9b:f3:64:64:3b:68:16:
87:00:96:f3:5a:d2:2a:c9:c2:da:98:06:67:f5:6e:03:50:38:
6f:40:a6:2e:7a:98:33:cb:2d:4d:a0:d3:9f:4c:a6:4f:78:49:
05:37:26:88:3f:94:8d:53:08:78:7c:23:a6:01:d2:42:a6:c7:
67:d5:41:99:90:a7:43:4b:27:49:ec:5c:ba:ad:2f:c5:f9:11:
f7:2e:80:b8:4f:92:6a:1e:ed:3f:9a:d1:a0:3a:d3:16:a3:35:
48:6e:3f:51:f4:3c:8d:ef:31:d8:e8:66:7e:3d:37:32:a9:40:
39:9d:c5:61:eb:c3:34:12:e1:de:57:cc:a9:6c:69:98:0c:9f:
49:4d:62:7d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQkRZd1rRB2zc18MDFgTMnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjUwMTAxMjM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2MxYzBmZWU3M2I4MWJlZTNlZDVlYjMwZWVkN2FhY2I0OWY5OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEKeOiHzVSpktNZU5yUOAqtLVmVL
wS6zJTeI56r+qhfKgbpJC4wDBfpy/Ou1v8GsQgJrV/Lzcty2v0Ap3Oa7iw9xWzvv
thohjgrF+7eYb2mYm6zErfhIwHcSpzwCdeveoow1heN1VkWME+XEmCh9oRuBIKCW
ML+r8mm0+tRW63dvlhXh8wSgMnIKso+ibW9j1IM81S32s8rhQNXs7fWTDZH1xjcV
fhUKO6CBq1SX7+dhYNEnbBrV3wZWxz0c2YKTtPgAVpQUl+cDWFD8DS+wnX+a1Tpv
ERq9ARGRRzC1FLSnZ4Hb31gmYe8tdydHYXEu8wZYSQSAHe5K+YoIDhyATwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLfBwP7nO4G+4+1esw7teqy0n5m2MB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvdDhIQV91YzdnYjdqN1Y2ekR1MTZyTFNmbWJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgVBQAIw
DQYJKoZIhvcNAQELBQADggEBAGAUcykMELJlfqHXXiGjCeZXs5G8QuoJygZl12EW
sWleNDRTRnpwTb1nP34lm73FUe9Y7hVzhRD9Fi0xgBlsT9PTJTN3AZFIsSknCllU
cCpqx8gyUwkB8O6Gt0WLVcq9FXxv+VhdfFVyUT0QmBqjyy0w6yxPEiDmm/NkZDto
FocAlvNa0irJwtqYBmf1bgNQOG9Api56mDPLLU2g059Mpk94SQU3Jog/lI1TCHh8
I6YB0kKmx2fVQZmQp0NLJ0nsXLqtL8X5EfcugLhPkmoe7T+a0aA60xajNUhuP1H0
PI3vMdjoZn49NzKpQDmdxWHrwzQS4d5XzKlsaZgMn0lNYn0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:03 2025 by rpki-client