Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa
File: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (raw, json)
Hash identifier: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=
Subject key identifier: BD:80:8B:5F:D9:41:03:B6:6D:CD:2A:C5:0E:9F:78:03:FB:6D:EB:2B
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0194266BACA5A9F2D85CE93BAE531103EFCB
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213341
IP address blocks: 2a0a:4587:2000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ac:a5:a9:f2:d8:5c:e9:3b:ae:53:11:03:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd808b5fd94103b66dcd2ac50e9f7803fb6deb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:20:4b:01:ac:51:bf:1b:a9:57:f7:10:c9:
2f:e6:a9:ca:21:e3:11:8c:22:03:ee:3c:0a:70:14:
7d:28:7e:d0:df:88:70:20:ac:51:59:19:2c:0d:05:
fa:77:43:87:17:a4:72:72:72:97:ae:4e:3d:40:91:
3d:23:87:e7:ee:a4:d6:0b:66:4d:73:b0:54:cb:7e:
be:c3:a9:36:af:ce:35:9b:29:b9:ed:38:eb:40:04:
43:bc:f5:37:c2:eb:55:90:0b:fe:a4:f4:6f:4e:17:
f6:c1:3d:45:32:8d:25:b1:83:9e:6f:63:93:a4:60:
22:50:ab:91:85:73:c3:25:dd:bb:1b:59:b0:76:52:
46:f1:60:85:69:07:42:16:bf:2c:6b:04:68:ba:e0:
33:cd:32:03:72:8c:16:e8:e3:1c:4a:b3:39:2e:45:
ae:5b:96:aa:14:5c:41:b8:b8:21:21:d3:18:11:ad:
d9:4e:c2:e4:fa:83:ee:09:b7:22:51:46:34:49:54:
a3:f4:10:fa:1a:2d:ae:a9:ab:72:95:a3:07:0e:8d:
7f:df:66:a7:fc:66:5b:5e:8f:5a:db:c0:54:a7:2c:
17:4d:8c:a4:85:1b:92:7b:73:cd:81:67:4b:8d:f3:
67:52:3c:e3:ee:62:14:75:de:78:21:9a:2b:e0:1c:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:80:8B:5F:D9:41:03:B6:6D:CD:2A:C5:0E:9F:78:03:FB:6D:EB:2B
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4587:2000::/44
Signature Algorithm: sha256WithRSAEncryption
4a:15:92:80:10:a1:0d:50:a9:89:f9:66:3c:27:43:bd:46:50:
c5:50:1e:7b:eb:4b:52:83:9f:61:9f:a9:42:ea:81:f4:de:4f:
1f:2c:21:6f:52:58:cc:cb:d8:6f:71:98:ff:39:8e:36:fe:4e:
fc:ca:65:52:e1:06:dc:bc:d9:4f:59:ed:6f:26:9d:e8:e3:9e:
94:05:97:66:59:c3:ef:ab:91:4e:74:f5:68:02:62:db:85:0d:
6a:4f:e4:f3:44:8a:8c:f3:f9:ed:20:4f:de:c0:45:d7:63:54:
bd:12:c4:0d:a8:fa:af:11:b4:cd:67:a0:88:50:bd:ad:81:35:
e0:22:0b:e4:d7:10:77:be:1f:af:8d:12:13:1b:06:96:b4:a4:
10:b4:71:06:9c:49:56:b1:fb:cd:fd:14:9a:5a:71:90:b6:71:
42:d1:a7:79:a5:52:b9:3a:ec:61:2c:9f:e5:81:e6:66:ae:a7:
0b:51:4f:ed:e6:b9:9a:86:89:96:69:12:7e:d0:c0:4f:bc:02:
6f:79:d0:ac:21:fb:26:3e:89:2a:47:5a:15:df:01:90:8a:55:
4b:2b:9d:92:6e:1d:d1:41:7b:70:75:6c:4a:f8:9f:f0:6a:f9:
69:f5:ae:74:f4:f0:1a:7c:88:88:eb:52:79:d1:f6:9f:63:87:
60:07:fa:82
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQma6ylqfLYXOk7rlMRA+/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl
YzEwNWUwHhcNMjUwMTAyMDk0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDgwOGI1ZmQ5NDEwM2I2NmRjZDJhYzUwZTlmNzgwM2ZiNmRlYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5UgSwGsUb8bqVf3EMkv5qnKIeMR
jCID7jwKcBR9KH7Q34hwIKxRWRksDQX6d0OHF6RycnKXrk49QJE9I4fn7qTWC2ZN
c7BUy36+w6k2r841mym57TjrQARDvPU3wutVkAv+pPRvThf2wT1FMo0lsYOeb2OT
pGAiUKuRhXPDJd27G1mwdlJG8WCFaQdCFr8sawRouuAzzTIDcowW6OMcSrM5LkWu
W5aqFFxBuLghIdMYEa3ZTsLk+oPuCbciUUY0SVSj9BD6Gi2uqatylaMHDo1/32an
/GZbXo9a28BUpywXTYykhRuSe3PNgWdLjfNnUjzj7mIUdd54IZor4BzZFwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFL2Ai1/ZQQO2bc0qxQ6feAP7besrMB8GA1UdIwQY
MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1
LTM4MjM1NWZjMmZmMS8xL3ZZQ0xYOWxCQTdadHpTckZEcDk0QV90dDZ5cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm
MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqCkWH
IAAwDQYJKoZIhvcNAQELBQADggEBAEoVkoAQoQ1QqYn5ZjwnQ71GUMVQHnvrS1KD
n2GfqULqgfTeTx8sIW9SWMzL2G9xmP85jjb+TvzKZVLhBty82U9Z7W8mnejjnpQF
l2ZZw++rkU509WgCYtuFDWpP5PNEiozz+e0gT97ARddjVL0SxA2o+q8RtM1noIhQ
va2BNeAiC+TXEHe+H6+NEhMbBpa0pBC0cQacSVax+839FJpacZC2cULRp3mlUrk6
7GEsn+WB5maupwtRT+3muZqGiZZpEn7QwE+8Am950Kwh+yY+iSpHWhXfAZCKVUsr
nZJuHdFBe3B1bEr4n/Bq+Wn1rnT08Bp8iIjrUnnR9p9jh2AH+oI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:53 2025 by rpki-client