Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/ENddU71AWsbfb-qIFVaxmAFw8qU.roa
File: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (raw, json)
Hash identifier: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=
Subject key identifier: 10:D7:5D:53:BD:40:5A:C6:DF:6F:EA:88:15:56:B1:98:01:70:F2:A5
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 0194266BDE5B312DB4CDAF32A7330CB5FD36
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/ENddU71AWsbfb-qIFVaxmAFw8qU.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394996
IP address blocks: 2a03:b0c0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:de:5b:31:2d:b4:cd:af:32:a7:33:0c:b5:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d75d53bd405ac6df6fea881556b1980170f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:ed:53:fd:9b:c2:87:e3:3f:ad:34:d7:12:
5c:4b:e0:a2:ce:2e:b5:e2:fb:43:00:78:f5:35:14:
f4:d9:c5:37:ad:60:43:2e:dc:76:9a:4f:d0:07:c8:
98:b9:1c:93:60:53:ec:5b:35:f8:9b:8a:75:51:17:
b5:49:98:1d:78:fe:9d:f3:19:71:6e:07:59:5e:93:
9f:01:11:70:41:8b:10:2d:3f:a3:d5:dd:bf:f6:ab:
58:45:d1:d6:ab:7b:e6:b9:71:7e:c9:f3:0e:99:7a:
f5:52:8d:84:96:50:9a:c4:51:54:2c:d3:d9:bd:ce:
c6:21:4d:26:8d:1b:7d:07:a0:c2:1c:74:f5:0e:ce:
e7:32:b9:c4:95:41:20:92:95:88:6a:90:c0:cc:32:
dc:68:23:ea:0b:1e:c4:17:13:ca:0a:9e:8b:d5:c2:
9c:c4:3c:a4:4a:8c:14:71:cf:33:4b:e8:78:e5:18:
8b:9f:8d:3d:95:0c:8c:89:ec:77:a0:e1:c0:b7:1b:
c8:cd:94:08:50:f0:42:8b:33:2f:c3:12:0d:d9:3d:
72:0a:a3:8b:68:fb:3c:c8:f4:48:8f:b9:73:3b:a7:
46:71:0e:92:56:b7:b4:6b:1f:a9:25:65:5c:91:99:
4d:08:7f:8c:83:47:2b:ad:9d:16:a5:ea:01:93:ec:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:5D:53:BD:40:5A:C6:DF:6F:EA:88:15:56:B1:98:01:70:F2:A5
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/ENddU71AWsbfb-qIFVaxmAFw8qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b0c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
46:57:0a:22:2a:b1:30:ed:f5:03:6d:99:29:46:c1:16:f6:6f:
54:a1:5d:de:f9:b2:de:18:fa:82:b8:46:d0:5d:dd:95:8f:5c:
aa:b8:1b:05:07:c1:87:be:d3:83:de:e8:3d:be:7e:94:11:72:
7e:b2:32:d8:a8:59:95:3c:7c:57:00:ae:74:c9:e7:26:95:8f:
e3:02:8d:00:f4:10:6a:a2:73:79:3d:ab:f5:95:74:4e:df:d9:
1f:77:25:72:31:0c:be:af:25:89:ba:be:ae:03:d2:c5:91:7f:
aa:18:60:be:c8:c7:17:ff:ec:29:d7:8b:b9:ad:57:c0:68:6b:
6f:d9:54:7e:07:a6:de:9f:01:e6:4d:4a:ed:8b:a7:72:ff:aa:
e4:ee:17:1b:10:99:99:96:89:b1:0e:f7:9b:fe:fb:4b:1d:31:
0f:41:4d:71:7c:dd:dc:d2:be:ad:c4:59:b4:70:64:47:b5:04:
42:a7:cb:f4:05:09:66:da:4a:40:b8:41:85:8e:1c:15:b1:cb:
2d:06:e5:13:39:48:43:a6:2d:a3:7e:7c:58:4c:16:61:09:d7:
3d:0a:8e:38:f3:2d:08:d6:95:c0:09:88:22:10:1b:14:38:34:
a2:54:6b:b9:cd:d8:c6:5f:0b:7d:19:da:a9:47:63:e2:c3:ce:
50:cc:d8:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma95bMS20za8ypzMMtf02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGQ3NWQ1M2JkNDA1YWM2ZGY2ZmVhODgxNTU2YjE5ODAxNzBmMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzrtU/2bwofjP6001xJcS+Cizi61
4vtDAHj1NRT02cU3rWBDLtx2mk/QB8iYuRyTYFPsWzX4m4p1URe1SZgdeP6d8xlx
bgdZXpOfARFwQYsQLT+j1d2/9qtYRdHWq3vmuXF+yfMOmXr1Uo2EllCaxFFULNPZ
vc7GIU0mjRt9B6DCHHT1Ds7nMrnElUEgkpWIapDAzDLcaCPqCx7EFxPKCp6L1cKc
xDykSowUcc8zS+h45RiLn409lQyMiex3oOHAtxvIzZQIUPBCizMvwxIN2T1yCqOL
aPs8yPRIj7lzO6dGcQ6SVre0ax+pJWVckZlNCH+Mg0crrZ0WpeoBk+wjRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBDXXVO9QFrG32/qiBVWsZgBcPKlMB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvRU5kZFU3MUFXc2JmYi1xSUZWYXhtQUZ3OHFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOwwAAE
MA0GCSqGSIb3DQEBCwUAA4IBAQBGVwoiKrEw7fUDbZkpRsEW9m9UoV3e+bLeGPqC
uEbQXd2Vj1yquBsFB8GHvtOD3ug9vn6UEXJ+sjLYqFmVPHxXAK50yecmlY/jAo0A
9BBqonN5Pav1lXRO39kfdyVyMQy+ryWJur6uA9LFkX+qGGC+yMcX/+wp14u5rVfA
aGtv2VR+B6benwHmTUrti6dy/6rk7hcbEJmZlomxDveb/vtLHTEPQU1xfN3c0r6t
xFm0cGRHtQRCp8v0BQlm2kpAuEGFjhwVscstBuUTOUhDpi2jfnxYTBZhCdc9Co44
8y0I1pXACYgiEBsUODSiVGu5zdjGXwt9GdqpR2Piw85QzNio
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:26 2025 by rpki-client