Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/ui8Tcv18897K9lO3Kh7c9x9FjBo.roa
File: ui8Tcv18897K9lO3Kh7c9x9FjBo.roa (raw, json)
Hash identifier: S6vjK1aJlQAAP//fJuY0xmPMDw1KPc4LozUOvXHubbg=
Subject key identifier: BA:2F:13:72:FD:7C:F3:DE:CA:F6:53:B7:2A:1E:DC:F7:1F:45:8C:1A
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 0194252154FE1E865F6D509F2942DBADE72A
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/ui8Tcv18897K9lO3Kh7c9x9FjBo.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a09:3902::/32 maxlen: 32
2a09:3905::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:54:fe:1e:86:5f:6d:50:9f:29:42:db:ad:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2f1372fd7cf3decaf653b72a1edcf71f458c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:05:9f:78:eb:ba:f0:f1:86:bd:6b:bb:df:
a9:20:3a:da:c4:03:49:9a:bd:86:d0:38:02:14:09:
56:3f:a2:38:a5:a5:8f:68:2d:fa:b8:30:53:6e:df:
a3:42:a4:ce:3f:95:78:b1:98:b8:49:cf:37:91:8e:
73:5f:38:ed:cd:2f:02:77:3f:c2:9e:c6:3c:9b:aa:
5e:03:62:f3:fd:bd:03:3d:ca:87:82:6b:6e:d9:41:
91:51:76:09:2d:c8:d8:1e:b8:ac:a4:9b:01:eb:3d:
61:14:d1:d6:26:06:dc:c7:2e:cc:f7:fc:fa:3a:05:
c5:be:8a:0a:4e:11:fd:42:4e:d7:c5:04:6f:26:56:
c1:d3:a5:4f:8e:13:b8:4b:4e:bb:45:df:65:c8:4b:
23:86:b8:df:48:f2:9f:e5:22:7b:c4:b8:c5:f2:9d:
ad:e6:89:c7:30:5f:4f:f6:9b:1e:cf:42:9a:c5:56:
51:9a:e9:dd:ce:e0:9f:a5:fd:1b:4c:18:55:cb:de:
b5:d4:1b:6e:8f:eb:fe:7c:07:ad:c7:96:93:47:af:
6f:66:48:bc:21:d5:34:d4:b3:80:bd:3f:3e:80:ab:
ec:4c:82:ac:1f:62:bb:2c:8d:77:90:03:d2:f7:dc:
85:1c:c4:cd:1b:2d:95:e1:c6:95:cb:1f:5d:45:d6:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:13:72:FD:7C:F3:DE:CA:F6:53:B7:2A:1E:DC:F7:1F:45:8C:1A
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/ui8Tcv18897K9lO3Kh7c9x9FjBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3902::/32
2a09:3905::/32
Signature Algorithm: sha256WithRSAEncryption
ce:f6:e7:ca:92:09:6e:5b:c7:53:8e:df:2e:e8:e5:76:23:01:
dd:dc:2c:41:9c:1b:98:83:13:7a:7c:b1:46:ef:79:c0:af:af:
46:6b:a0:e5:b4:f0:32:bc:b4:2f:83:4b:15:26:24:55:a4:14:
8b:29:b8:2d:07:13:0a:71:2d:e7:50:bb:82:82:21:90:48:dc:
c8:c0:72:d7:a6:5f:9c:d3:2c:55:75:d5:80:5e:40:d7:cd:98:
01:d8:6b:c1:5b:df:f0:56:b8:aa:54:39:61:84:24:3c:f6:70:
36:a5:13:fc:30:3a:be:bb:8c:84:a1:0e:f4:dd:f9:59:c3:05:
59:af:d8:d9:f2:41:44:c3:48:e6:dd:29:99:d6:ae:a6:19:fa:
0e:e4:b6:8c:ef:13:95:2a:a9:09:e8:62:b4:12:e5:d6:43:b9:
64:c5:b6:f3:6a:cf:90:2b:ad:2a:a9:5e:f9:d9:9d:59:36:de:
92:45:0b:a9:ab:23:1f:bf:50:e8:47:40:b0:e1:3c:56:91:fb:
99:ba:10:0d:a2:2b:09:d3:23:4d:a8:f9:9d:24:fc:06:8e:bb:
f2:e3:95:d2:59:5d:e6:18:75:49:f7:9a:30:96:cb:40:31:dd:
f5:36:d5:f9:49:41:fd:84:c3:0a:19:2a:a5:e5:92:5c:2c:bb:
0a:74:63:13
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlIVT+HoZfbVCfKULbrecqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YmUxODFhYWJkYjE5NTUxM2EyNmM2N2I2MjFlMjk4Njgx
OGQwM2QwHhcNMjUwMTAyMDM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTJmMTM3MmZkN2NmM2RlY2FmNjUzYjcyYTFlZGNmNzFmNDU4YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlAFn3jruvDxhr1ru9+pIDraxANJ
mr2G0DgCFAlWP6I4paWPaC36uDBTbt+jQqTOP5V4sZi4Sc83kY5zXzjtzS8Cdz/C
nsY8m6peA2Lz/b0DPcqHgmtu2UGRUXYJLcjYHrispJsB6z1hFNHWJgbcxy7M9/z6
OgXFvooKThH9Qk7XxQRvJlbB06VPjhO4S067Rd9lyEsjhrjfSPKf5SJ7xLjF8p2t
5onHMF9P9psez0KaxVZRmundzuCfpf0bTBhVy9611Btuj+v+fAetx5aTR69vZki8
IdU01LOAvT8+gKvsTIKsH2K7LI13kAPS99yFHMTNGy2V4caVyx9dRdZ4JQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLovE3L9fPPeyvZTtyoe3PcfRYwaMB8GA1UdIwQY
MBaAFOm+GBqr2xlVE6JsZ7Yh4phoGNA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmI0WUdxdmJHVlVUb214bnRpSGltR2dZMEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iZWNkMTYtYTllOS00Y2Q2LTgwMGUt
ZjAwOGRkODNlMzJhLzEvdWk4VGN2MTg4OTdLOWxPM0toN2M5eDlGakJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iZWNkMTYtYTllOS00Y2Q2LTgwMGUtZjAwOGRkODNlMzJh
LzEvNmI0WUdxdmJHVlVUb214bnRpSGltR2dZMEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgk5AgMF
ACoJOQUwDQYJKoZIhvcNAQELBQADggEBAM7258qSCW5bx1OO3y7o5XYjAd3cLEGc
G5iDE3p8sUbvecCvr0ZroOW08DK8tC+DSxUmJFWkFIspuC0HEwpxLedQu4KCIZBI
3MjActemX5zTLFV11YBeQNfNmAHYa8Fb3/BWuKpUOWGEJDz2cDalE/wwOr67jISh
DvTd+VnDBVmv2NnyQUTDSObdKZnWrqYZ+g7ktozvE5UqqQnoYrQS5dZDuWTFtvNq
z5ArrSqpXvnZnVk23pJFC6mrIx+/UOhHQLDhPFaR+5m6EA2iKwnTI02o+Z0k/AaO
u/LjldJZXeYYdUn3mjCWy0Ax3fU21flJQf2EwwoZKqXlklwsuwp0YxM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:36 2025 by rpki-client