Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/jekCeMTSis2kdtPn3gOGAtmVk6k.roa
File: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (raw, json)
Hash identifier: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=
Subject key identifier: 8D:E9:02:78:C4:D2:8A:CD:A4:76:D3:E7:DE:03:86:02:D9:95:93:A9
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0194266BDC47EFAF13EC47C56AD81B19CBB6
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/jekCeMTSis2kdtPn3gOGAtmVk6k.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210070
IP address blocks: 2a0f:f7c0::/32 maxlen: 32
2a0f:f7c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dc:47:ef:af:13:ec:47:c5:6a:d8:1b:19:cb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de90278c4d28acda476d3e7de038602d99593a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:ae:20:26:a3:14:1a:b9:cc:07:e4:fa:ed:
ee:c3:74:6c:52:e9:70:99:b3:f8:ff:06:41:91:7f:
f1:7a:8f:f0:85:5c:f1:a2:0e:d2:82:8d:bd:1d:88:
a5:05:f0:f0:43:54:18:a3:f1:27:7d:bb:53:9d:8e:
f5:bd:36:22:83:d2:98:b0:c2:56:84:ee:e6:5c:d1:
c6:fc:e5:3d:69:21:d6:94:c3:eb:b9:9e:7d:ca:b4:
dc:35:c7:fd:23:ad:12:b3:d7:de:b5:ee:48:59:86:
19:c8:f6:10:58:78:5d:ff:0b:c3:51:6c:76:fb:bc:
a2:8c:c5:f3:60:80:a8:8a:24:79:ac:e3:66:73:e4:
e2:55:f9:f1:d7:fa:a6:d7:ad:89:a7:a0:61:78:90:
2e:57:77:63:03:7e:06:8a:0e:2b:25:e0:ce:da:79:
8d:5d:15:57:19:84:90:61:f7:9f:ad:63:b0:30:6d:
6b:17:bf:e1:28:3b:47:19:a9:27:5b:d0:47:e6:4e:
ae:a0:93:d7:8e:b0:bc:b7:3d:fc:35:1d:bd:a6:1f:
8d:0a:a1:11:8a:ab:58:f0:34:28:8c:56:d2:b2:ad:
11:91:c8:f9:ff:77:b7:80:d1:4a:5c:7d:34:8e:97:
25:ea:e7:82:3b:66:86:f6:97:8b:99:0e:e9:98:cd:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:02:78:C4:D2:8A:CD:A4:76:D3:E7:DE:03:86:02:D9:95:93:A9
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/jekCeMTSis2kdtPn3gOGAtmVk6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f7c0::/31
Signature Algorithm: sha256WithRSAEncryption
6b:fd:8f:9a:3e:72:08:50:25:d3:c0:4c:e0:85:0f:ca:bb:d8:
b8:fa:a2:74:7d:e7:5a:e5:3b:93:62:2c:12:3c:71:27:e5:26:
5d:30:0c:b0:11:c5:8f:62:7c:25:a1:34:b8:de:2a:04:85:eb:
f5:8f:e1:8b:40:e9:84:3e:7a:b0:c3:7f:9a:81:0e:81:31:2f:
19:d5:39:1b:d6:e4:9a:7f:03:ae:aa:5d:b9:ae:4f:b3:49:7b:
a0:98:a7:2e:b5:9c:20:c6:0a:2f:75:2b:cf:b2:12:fa:b6:eb:
c2:40:64:89:12:cc:fd:3a:f0:4c:c7:ee:7a:e3:05:83:d9:4d:
29:71:1c:61:73:60:46:4e:ae:25:01:a3:15:33:24:09:7c:5c:
80:dd:60:12:68:be:e7:7c:03:8d:08:a8:18:63:1a:0a:6c:0a:
be:5f:d5:55:df:b2:af:9a:7e:59:f8:c1:8f:66:8c:46:51:a8:
d2:83:b0:84:96:9f:51:c2:ff:21:d3:5a:32:4a:57:72:88:57:
e8:35:7b:f8:5c:90:34:b5:7f:b2:cc:32:22:a4:41:4e:4e:a1:
67:00:49:e3:3c:50:f3:b8:cf:22:47:77:52:5f:fa:2c:c9:b5:
ed:7f:57:eb:f2:f3:9b:e2:cb:6f:e1:31:95:d2:75:6a:b5:59:
f1:2c:d7:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma9xH768T7EfFatgbGcu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGU5MDI3OGM0ZDI4YWNkYTQ3NmQzZTdkZTAzODYwMmQ5OTU5M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzOuICajFBq5zAfk+u3uw3RsUulw
mbP4/wZBkX/xeo/whVzxog7Sgo29HYilBfDwQ1QYo/EnfbtTnY71vTYig9KYsMJW
hO7mXNHG/OU9aSHWlMPruZ59yrTcNcf9I60Ss9fete5IWYYZyPYQWHhd/wvDUWx2
+7yijMXzYICoiiR5rONmc+TiVfnx1/qm162Jp6BheJAuV3djA34Gig4rJeDO2nmN
XRVXGYSQYfefrWOwMG1rF7/hKDtHGaknW9BH5k6uoJPXjrC8tz38NR29ph+NCqER
iqtY8DQojFbSsq0Rkcj5/3e3gNFKXH00jpcl6ueCO2aG9peLmQ7pmM1WPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFI3pAnjE0orNpHbT594DhgLZlZOpMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvamVrQ2VNVFNpczJrZHRQbjNnT0dBdG1WazZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg/3wDAN
BgkqhkiG9w0BAQsFAAOCAQEAa/2Pmj5yCFAl08BM4IUPyrvYuPqidH3nWuU7k2Is
EjxxJ+UmXTAMsBHFj2J8JaE0uN4qBIXr9Y/hi0DphD56sMN/moEOgTEvGdU5G9bk
mn8Drqpdua5Ps0l7oJinLrWcIMYKL3Urz7IS+rbrwkBkiRLM/TrwTMfueuMFg9lN
KXEcYXNgRk6uJQGjFTMkCXxcgN1gEmi+53wDjQioGGMaCmwKvl/VVd+yr5p+WfjB
j2aMRlGo0oOwhJafUcL/IdNaMkpXcohX6DV7+FyQNLV/sswyIqRBTk6hZwBJ4zxQ
87jPIkd3Ul/6LMm17X9X6/Lzm+LLb+ExldJ1arVZ8SzXJw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:22 2025 by rpki-client