Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vPONFKdoV-h7E6VJMlA0WxnrOEo.roa
File: vPONFKdoV-h7E6VJMlA0WxnrOEo.roa (raw, json)
Hash identifier: PCl60v2KiUkyP0pNDrQ48YT8ZcSE0HgQvHGd9t8g9yI=
Subject key identifier: BC:F3:8D:14:A7:68:57:E8:7B:13:A5:49:32:50:34:5B:19:EB:38:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252238450BC7A71A8A742B2CD16A5C45
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vPONFKdoV-h7E6VJMlA0WxnrOEo.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209556
IP address blocks: 2a0e:b107:30f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:45:0b:c7:a7:1a:8a:74:2b:2c:d1:6a:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf38d14a76857e87b13a5493250345b19eb384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:72:d5:dc:c2:a9:c4:d6:31:6c:f1:d2:53:
d3:2c:ea:53:87:a4:a4:67:04:f0:91:6d:83:42:70:
05:09:61:76:c8:29:a6:dc:4f:bf:7c:30:fa:2e:f0:
7e:da:b8:d8:01:01:16:12:71:90:84:07:31:96:2d:
c1:25:99:10:06:08:2d:5a:24:8f:b9:bb:e2:28:d1:
f3:4c:84:5a:86:26:ee:cb:52:ea:ad:18:75:be:6d:
6c:81:26:92:bb:08:04:25:d0:11:9a:67:c0:39:3c:
d4:67:5e:f8:20:03:84:49:b9:a0:db:d8:90:71:20:
6c:0c:b3:c6:31:70:53:4e:19:cc:68:00:0a:39:4b:
eb:34:ce:5b:03:1f:8e:79:12:e9:f5:06:89:c9:d8:
22:20:52:af:72:71:80:75:6f:a7:a8:3b:08:80:c5:
c6:a6:3e:52:fe:21:31:a4:d1:79:2d:1d:06:8c:2f:
64:03:10:cc:3a:4c:d9:74:1a:c8:5f:3d:98:cf:95:
d8:86:5b:72:2e:01:24:59:e7:18:ef:69:a3:05:1d:
a8:ac:3c:6a:91:c7:e4:e1:41:29:fc:1a:45:73:06:
9a:8b:4f:4e:d8:36:69:5a:8a:1c:3a:d2:d7:8b:fe:
d7:7a:14:f9:aa:ff:4b:2b:b8:e8:d7:61:ce:b5:1f:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:8D:14:A7:68:57:E8:7B:13:A5:49:32:50:34:5B:19:EB:38:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vPONFKdoV-h7E6VJMlA0WxnrOEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:30f::/48
Signature Algorithm: sha256WithRSAEncryption
5d:10:d7:48:d7:3b:95:03:b9:7a:3e:da:b8:a2:21:09:e5:eb:
96:87:8b:99:59:4e:f0:8c:cf:3f:c7:f7:9e:40:4a:d6:98:f6:
10:13:7d:d9:35:96:94:d2:4d:a8:ce:ba:6f:d9:46:c7:e4:e7:
7a:b0:61:e7:c5:97:a6:90:f9:5d:d6:a9:99:46:4e:9e:c8:b2:
91:48:fb:c8:a3:85:4a:5c:89:e5:4a:ca:7a:5e:8a:e0:73:45:
74:ae:86:ba:c1:1f:44:3a:bc:37:45:70:1e:37:5c:54:3c:4b:
04:d4:dc:b4:f6:ed:c0:2d:00:01:c4:8b:74:88:47:d2:4b:ca:
54:a8:6d:98:7f:82:09:d5:ff:59:ba:27:93:c8:54:cd:0c:22:
2c:fd:db:a1:23:ad:80:96:2d:e6:c9:8f:47:19:f1:09:21:84:
a1:46:76:7d:d4:68:84:27:e1:3b:e9:f2:89:3c:9a:36:97:10:
b8:ec:20:37:2c:de:de:3a:32:dc:91:cc:a4:c1:72:ba:a0:c3:
1b:83:ff:33:27:69:3b:68:f6:43:38:9c:7b:7a:2a:bf:da:c9:
87:31:2a:f6:f0:f0:56:b9:1f:08:0a:e4:c7:75:93:2c:29:12:
ab:0e:ad:31:0e:2d:02:26:ae:92:17:d0:9d:f7:65:23:94:ef:
c8:d4:c8:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIjhFC8enGop0KyzRalxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2YzOGQxNGE3Njg1N2U4N2IxM2E1NDkzMjUwMzQ1YjE5ZWIzODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ERy1dzCqcTWMWzx0lPTLOpTh6Sk
ZwTwkW2DQnAFCWF2yCmm3E+/fDD6LvB+2rjYAQEWEnGQhAcxli3BJZkQBggtWiSP
ubviKNHzTIRahibuy1LqrRh1vm1sgSaSuwgEJdARmmfAOTzUZ174IAOESbmg29iQ
cSBsDLPGMXBTThnMaAAKOUvrNM5bAx+OeRLp9QaJydgiIFKvcnGAdW+nqDsIgMXG
pj5S/iExpNF5LR0GjC9kAxDMOkzZdBrIXz2Yz5XYhltyLgEkWecY72mjBR2orDxq
kcfk4UEp/BpFcwaai09O2DZpWoocOtLXi/7XehT5qv9LK7jo12HOtR/RJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLzzjRSnaFfoexOlSTJQNFsZ6zhKMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdlBPTkZLZG9WLWg3RTZWSk1sQTBXeG5yT0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwMP
MA0GCSqGSIb3DQEBCwUAA4IBAQBdENdI1zuVA7l6Ptq4oiEJ5euWh4uZWU7wjM8/
x/eeQErWmPYQE33ZNZaU0k2ozrpv2UbH5Od6sGHnxZemkPld1qmZRk6eyLKRSPvI
o4VKXInlSsp6Xorgc0V0roa6wR9EOrw3RXAeN1xUPEsE1Ny09u3ALQABxIt0iEfS
S8pUqG2Yf4IJ1f9ZuieTyFTNDCIs/duhI62Ali3myY9HGfEJIYShRnZ91GiEJ+E7
6fKJPJo2lxC47CA3LN7eOjLckcykwXK6oMMbg/8zJ2k7aPZDOJx7eiq/2smHMSr2
8PBWuR8ICuTHdZMsKRKrDq0xDi0CJq6SF9Cd92UjlO/I1Mhy
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:17 2025 by rpki-client