Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/M67D9dO0P0wA3s4BACrbRiv41PI.roa
File: M67D9dO0P0wA3s4BACrbRiv41PI.roa (raw, json)
Hash identifier: j9YgNTj4x9QKxILCO+KSnW8ITCUhayOx/2SVsfaknKw=
Subject key identifier: 33:AE:C3:F5:D3:B4:3F:4C:00:DE:CE:01:00:2A:DB:46:2B:F8:D4:F2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB72E2057639088C2D6363A5B710E1
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/M67D9dO0P0wA3s4BACrbRiv41PI.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a09:2981::/32 maxlen: 32
2a09:2987::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:e2:05:76:39:08:8c:2d:63:63:a5:b7:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33aec3f5d3b43f4c00dece01002adb462bf8d4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:91:60:0a:48:24:69:40:08:01:6f:14:c4:
ef:1c:67:82:3b:05:21:6e:f3:90:55:0e:99:0e:5e:
ec:cf:57:bf:ec:2e:c7:82:83:6a:56:ed:6c:a9:6e:
da:88:62:35:f2:09:18:10:e5:ef:3e:26:8d:19:a1:
75:a9:07:ec:96:0a:bb:01:d2:c8:81:f7:bb:a3:77:
30:9d:bd:c8:b6:d3:d7:87:84:74:39:89:34:d0:72:
8e:0d:8d:e8:00:4e:3b:9e:36:a0:c2:28:44:04:60:
ed:ec:2f:de:dc:8a:c6:b0:28:a7:a7:96:66:88:19:
81:ed:92:e1:e6:5b:ab:04:78:d6:58:72:37:0a:6f:
ab:56:3e:54:b8:69:48:d6:2e:d0:37:cb:05:21:3c:
da:43:b4:9c:83:75:67:c2:6b:fc:43:5d:c4:c7:2c:
4a:27:81:c3:39:5f:8e:ba:c4:45:4a:5e:fa:b0:b9:
1d:87:9b:b7:6b:a8:60:8e:d1:b6:9d:44:3e:a7:58:
fc:39:6e:04:b8:b8:94:00:c0:81:16:34:72:ec:c8:
a7:a4:43:e8:30:87:79:ab:d4:00:d6:70:b1:1c:02:
51:33:0b:44:e6:ea:4f:b5:8d:fa:f7:09:f3:5e:e1:
20:90:04:e5:7b:03:91:77:5f:f9:a9:ee:a2:bc:07:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:C3:F5:D3:B4:3F:4C:00:DE:CE:01:00:2A:DB:46:2B:F8:D4:F2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/M67D9dO0P0wA3s4BACrbRiv41PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2981::/32
2a09:2987::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7f:7d:86:60:b5:b1:f0:6f:24:68:72:95:10:3a:07:9e:66:
39:36:16:41:b4:8f:9c:03:99:cf:aa:dc:a5:bf:b8:52:28:d6:
8b:fc:bb:45:a3:03:32:a2:2d:3a:4b:1e:57:f7:c6:80:e1:4b:
27:25:88:62:2a:e6:a5:18:1c:d9:ce:b8:f4:92:f3:0c:fd:4c:
ef:21:87:7b:14:c3:40:20:cb:e4:7f:2d:ab:96:82:53:c7:f6:
1a:83:d7:07:bd:dc:48:9a:c5:9f:61:ff:f4:fe:d1:6d:0b:0b:
52:9d:82:34:ee:52:18:ae:10:78:e0:63:62:f9:74:b0:da:2b:
fc:79:30:97:de:67:3d:e7:3a:ca:77:37:cd:73:09:b2:c6:b4:
2b:0e:a5:f8:4a:db:bc:39:29:88:29:94:35:6d:83:e7:43:c0:
19:6c:8c:86:b8:10:36:6d:18:3e:4a:c3:4d:ad:b5:19:96:51:
a8:93:ab:0e:5f:1c:0a:ef:56:7f:b4:50:9a:7f:3c:29:62:ff:
6f:6e:9e:c7:a6:b1:61:16:f3:74:30:d0:0f:27:26:4f:57:b9:
0d:86:3f:1f:40:09:47:cc:d3:94:96:10:a0:6b:1f:c7:57:25:
b1:26:b9:25:39:95:a7:89:e1:a3:37:6f:05:36:43:fc:33:48:
16:82:d8:bf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+3LiBXY5CIwtY2OltxDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMTAxMTc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FlYzNmNWQzYjQzZjRjMDBkZWNlMDEwMDJhZGI0NjJiZjhkNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOCRYApIJGlACAFvFMTvHGeCOwUh
bvOQVQ6ZDl7sz1e/7C7HgoNqVu1sqW7aiGI18gkYEOXvPiaNGaF1qQfslgq7AdLI
gfe7o3cwnb3IttPXh4R0OYk00HKODY3oAE47njagwihEBGDt7C/e3IrGsCinp5Zm
iBmB7ZLh5lurBHjWWHI3Cm+rVj5UuGlI1i7QN8sFITzaQ7Scg3Vnwmv8Q13ExyxK
J4HDOV+OusRFSl76sLkdh5u3a6hgjtG2nUQ+p1j8OW4EuLiUAMCBFjRy7MinpEPo
MId5q9QA1nCxHAJRMwtE5upPtY369wnzXuEgkATlewORd1/5qe6ivAdPgQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDOuw/XTtD9MAN7OAQAq20Yr+NTyMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvTTY3RDlkTzBQMHdBM3M0QkFDcmJSaXY0MVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgkpgQMF
ACoJKYcwDQYJKoZIhvcNAQELBQADggEBAKt/fYZgtbHwbyRocpUQOgeeZjk2FkG0
j5wDmc+q3KW/uFIo1ov8u0WjAzKiLTpLHlf3xoDhSycliGIq5qUYHNnOuPSS8wz9
TO8hh3sUw0Agy+R/LauWglPH9hqD1we93EiaxZ9h//T+0W0LC1KdgjTuUhiuEHjg
Y2L5dLDaK/x5MJfeZz3nOsp3N81zCbLGtCsOpfhK27w5KYgplDVtg+dDwBlsjIa4
EDZtGD5Kw02ttRmWUaiTqw5fHArvVn+0UJp/PCli/29unsemsWEW83Qw0A8nJk9X
uQ2GPx9ACUfM05SWEKBrH8dXJbEmuSU5laeJ4aM3bwU2Q/wzSBaC2L8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:36:18 2025 by rpki-client