Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oQOweqW8I3ZydmkwBOXozp-t8RY.roa
File: oQOweqW8I3ZydmkwBOXozp-t8RY.roa (raw, json)
Hash identifier: 8WiK0m/ng0GzwIv/1AFH/+nhziF8vG+nTsL3604eRo0=
Subject key identifier: A1:03:B0:7A:A5:BC:23:76:72:76:69:30:04:E5:E8:CE:9F:AD:F1:16
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522425A7B42F7D5AD02EC58F627D4AD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oQOweqW8I3ZydmkwBOXozp-t8RY.roa
Signing time: Thu 02 Jan 2025 03:49:49 +0000
ROA not before: Thu 02 Jan 2025 03:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210659
IP address blocks: 2a10:cc40:130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:42:5a:7b:42:f7:d5:ad:02:ec:58:f6:27:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a103b07aa5bc23767276693004e5e8ce9fadf116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:95:2b:db:35:d7:df:8d:ec:8e:1f:24:55:
e2:0b:8e:82:87:a2:60:37:1f:4c:54:f1:b4:04:75:
18:5c:d2:51:1a:ab:e0:71:ce:41:ae:85:46:be:fb:
6b:8f:72:68:ad:f1:19:ad:47:61:67:e4:46:6b:bb:
9b:52:29:ec:c1:8f:bb:e7:d1:d8:91:4e:8b:9b:77:
9b:33:f7:cf:18:4c:a4:72:6f:9a:c3:07:31:ea:ad:
2c:e7:af:70:67:b1:67:a7:c0:84:75:bb:61:ca:13:
53:99:4b:3a:e2:53:7b:78:50:a8:ca:52:f3:be:6a:
8b:33:55:c0:9f:8a:47:46:f0:0f:94:9d:81:eb:fb:
c8:8b:0b:fc:c9:72:cf:ce:43:3b:65:ba:9a:8a:ba:
dd:8a:74:1b:6f:03:8b:dd:3a:2e:95:5f:e3:9b:21:
44:50:79:30:98:36:53:89:43:a1:e6:d9:3e:aa:12:
41:b0:ee:80:99:19:ea:23:13:c6:dd:7b:45:e4:be:
a2:b6:36:72:bf:83:6b:6a:03:c7:05:95:aa:f8:33:
4c:b7:24:20:0c:a6:22:13:53:3d:58:25:0b:6a:51:
68:fd:8e:62:fb:14:fa:fe:93:43:ea:1b:92:64:07:
f5:69:75:54:b0:56:8f:98:15:6b:a0:8b:ce:5b:87:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:B0:7A:A5:BC:23:76:72:76:69:30:04:E5:E8:CE:9F:AD:F1:16
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oQOweqW8I3ZydmkwBOXozp-t8RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:130::/44
Signature Algorithm: sha256WithRSAEncryption
74:62:f6:df:51:3b:85:56:13:3a:cb:c5:c7:4f:73:5b:63:1d:
50:e8:7c:26:3a:1f:13:af:d6:21:bd:85:b3:3c:b9:92:66:73:
89:28:0b:57:e7:2f:4b:11:7c:73:65:87:ba:a1:20:dc:70:af:
2b:a3:14:10:8a:9b:fe:a7:bc:fc:a8:3d:d1:d0:c9:68:c2:f7:
50:0a:40:66:db:4c:87:cc:20:2f:89:c2:66:51:2a:08:88:82:
7c:70:14:fa:20:d0:57:3a:9b:11:7b:b9:6a:c6:18:95:af:13:
77:b8:1c:14:a2:2e:24:e7:3b:c7:84:b0:02:6e:8f:9d:cf:3e:
c4:dc:0e:18:2a:a9:43:d9:78:ac:3f:7c:d9:53:40:95:63:0b:
ad:19:ab:bf:88:ee:79:f2:20:04:59:e7:fe:a0:bb:d6:84:8f:
e1:c8:6c:e4:ca:35:a9:fe:18:93:39:9c:b3:d4:38:04:e0:91:
e6:db:48:28:64:70:52:f5:95:43:11:b7:3e:72:17:bc:67:2f:
6c:69:95:1f:f7:2e:7a:e0:30:40:51:38:1d:dd:cd:12:6f:17:
cf:1d:3e:1f:9f:d8:f1:28:d0:45:57:5f:a3:37:75:af:26:fe:
ee:e0:ca:e2:f5:80:e6:4d:ba:5e:8a:66:dd:f0:75:60:63:bb:
1f:48:b1:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIkJae0L31a0C7Fj2J9StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTAzYjA3YWE1YmMyMzc2NzI3NjY5MzAwNGU1ZThjZTlmYWRmMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfOVK9s119+N7I4fJFXiC46Ch6Jg
Nx9MVPG0BHUYXNJRGqvgcc5BroVGvvtrj3JorfEZrUdhZ+RGa7ubUinswY+759HY
kU6Lm3ebM/fPGEykcm+awwcx6q0s569wZ7Fnp8CEdbthyhNTmUs64lN7eFCoylLz
vmqLM1XAn4pHRvAPlJ2B6/vIiwv8yXLPzkM7ZbqairrdinQbbwOL3ToulV/jmyFE
UHkwmDZTiUOh5tk+qhJBsO6AmRnqIxPG3XtF5L6itjZyv4NragPHBZWq+DNMtyQg
DKYiE1M9WCULalFo/Y5i+xT6/pND6huSZAf1aXVUsFaPmBVroIvOW4eKgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKEDsHqlvCN2cnZpMATl6M6frfEWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvb1FPd2VxVzhJM1p5ZG1rd0JPWG96cC10OFJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAEw
MA0GCSqGSIb3DQEBCwUAA4IBAQB0YvbfUTuFVhM6y8XHT3NbYx1Q6HwmOh8Tr9Yh
vYWzPLmSZnOJKAtX5y9LEXxzZYe6oSDccK8roxQQipv+p7z8qD3R0MlowvdQCkBm
20yHzCAvicJmUSoIiIJ8cBT6INBXOpsRe7lqxhiVrxN3uBwUoi4k5zvHhLACbo+d
zz7E3A4YKqlD2XisP3zZU0CVYwutGau/iO558iAEWef+oLvWhI/hyGzkyjWp/hiT
OZyz1DgE4JHm20goZHBS9ZVDEbc+che8Zy9saZUf9y564DBAUTgd3c0SbxfPHT4f
n9jxKNBFV1+jN3WvJv7u4Mri9YDmTbpeimbd8HVgY7sfSLEb
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:55 2025 by rpki-client