Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa
File: wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa (raw, json)
Hash identifier: IcXFbOy2kL3XD2CXj0cfmypyYeMpopQ8OdQl+N2lEgM=
Subject key identifier: C2:24:12:BA:16:76:47:1F:66:61:50:EE:B6:96:3F:E8:96:A2:AB:D8
Certificate issuer: /CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Certificate serial: 019426D9210C92BA49B615709130C9931978
Authority key identifier: 25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa
Signing time: Thu 02 Jan 2025 11:49:11 +0000
ROA not before: Thu 02 Jan 2025 11:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206506
IP address blocks: 2001:678:360::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:21:0c:92:ba:49:b6:15:70:91:30:c9:93:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c22412ba1676471f666150eeb6963fe896a2abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:d9:46:c4:a6:3c:48:3f:9d:6c:8b:4f:63:
df:e2:df:88:85:78:c3:ac:1c:fe:cb:d4:96:e4:06:
3b:10:9c:0d:3e:e2:a5:f3:df:58:2c:3e:a9:b1:a7:
b4:b3:5c:30:2a:04:47:fd:72:42:cb:4d:e6:bc:32:
e5:61:19:95:b1:3b:40:2d:b6:77:7b:73:21:89:76:
0f:f2:05:17:84:3c:1b:17:91:3b:a8:c4:5a:97:27:
4f:ff:48:0b:71:21:89:6e:59:d8:fd:7a:ab:b8:b8:
91:ac:ad:59:15:70:39:4e:16:98:d6:fd:49:fc:dc:
ac:17:a9:bf:6a:92:5b:4a:a5:25:88:c9:01:1d:64:
96:20:df:87:b0:a0:c7:03:95:8a:13:99:88:bf:a3:
2c:eb:02:35:73:25:f7:6e:5f:85:71:15:32:97:86:
1e:be:c1:9a:dc:9f:18:00:19:7f:9a:34:2d:a4:56:
44:a6:09:68:27:3d:27:d4:68:12:18:09:0b:ea:4e:
6d:2a:38:a4:20:ca:70:90:eb:7c:6b:3e:3f:ca:2e:
2a:2c:de:68:8c:76:e7:a6:9e:67:41:a8:f2:1a:db:
3d:74:03:d5:1f:06:6c:4c:a0:65:a8:fa:f8:e0:f0:
3f:3e:ec:53:68:5c:64:3f:8e:83:f0:cc:31:46:91:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:12:BA:16:76:47:1F:66:61:50:EE:B6:96:3F:E8:96:A2:AB:D8
X509v3 Authority Key Identifier:
keyid:25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:360::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d1:3b:30:25:10:35:2a:b6:7c:59:c5:5a:47:75:e1:75:52:
9f:a9:b5:d7:1b:7b:0e:a9:10:9d:8d:20:9f:31:48:c2:b7:40:
cc:ca:60:c0:1b:0a:84:83:82:0d:c0:cd:de:9c:b1:52:65:15:
90:be:2c:cb:c6:9c:02:80:b3:c3:6d:b6:94:78:b3:2f:72:16:
4e:97:bb:32:ba:b2:e9:cf:81:17:e3:73:39:fa:ca:0e:3c:d9:
6f:91:4c:42:d2:4f:a5:d0:c3:bb:35:e5:f6:d3:5c:37:8c:d2:
e5:22:5c:cd:ab:6d:86:50:95:80:94:44:fc:43:50:f3:ba:ab:
43:c2:dd:e0:a7:70:c6:cb:31:57:6e:e8:39:84:a8:1e:c0:53:
37:99:fd:a0:a6:37:2b:c4:77:b0:5e:c5:ff:9d:53:fd:86:71:
16:e6:ee:12:3a:74:af:88:31:44:8f:fa:c1:6b:ab:ad:53:55:
64:76:71:22:e5:95:cd:9c:69:ee:85:25:c9:c6:e1:4c:b3:12:
46:ff:2f:7d:42:fd:95:79:d3:29:1d:46:70:f4:64:ec:6a:e8:
01:a7:77:7a:be:d6:15:9a:4f:aa:10:87:d7:c3:ae:72:d4:72:
09:4b:db:03:3c:a5:79:ca:21:e1:53:2b:39:9d:08:15:2f:5f:
6f:48:74:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2SEMkrpJthVwkTDJkxl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NWZmMjk2MDEyOTc0N2M1MWJkYWI2ZTE4M2M2MGZmNzg3
YWM1ZTYwHhcNMjUwMTAyMTE0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjI0MTJiYTE2NzY0NzFmNjY2MTUwZWViNjk2M2ZlODk2YTJhYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUfZRsSmPEg/nWyLT2Pf4t+IhXjD
rBz+y9SW5AY7EJwNPuKl899YLD6psae0s1wwKgRH/XJCy03mvDLlYRmVsTtALbZ3
e3MhiXYP8gUXhDwbF5E7qMRalydP/0gLcSGJblnY/XqruLiRrK1ZFXA5ThaY1v1J
/NysF6m/apJbSqUliMkBHWSWIN+HsKDHA5WKE5mIv6Ms6wI1cyX3bl+FcRUyl4Ye
vsGa3J8YABl/mjQtpFZEpgloJz0n1GgSGAkL6k5tKjikIMpwkOt8az4/yi4qLN5o
jHbnpp5nQajyGts9dAPVHwZsTKBlqPr44PA/PuxTaFxkP46D8MwxRpFOzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMIkEroWdkcfZmFQ7raWP+iWoqvYMB8GA1UdIwQY
MBaAFCVf8pYBKXR8Ub2rbhg8YP94esXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZfeWxnRXBkSHhSdmF0dUdEeGdfM2g2eGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xMTU5NjEtYjg3Mi00NDRkLWJlYWEt
YmU3OTUyNTBjYjUwLzEvd2lRU3VoWjJSeDltWVZEdXRwWV82SmFpcTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xMTU5NjEtYjg3Mi00NDRkLWJlYWEtYmU3OTUyNTBjYjUw
LzEvSlZfeWxnRXBkSHhSdmF0dUdEeGdfM2g2eGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeANg
MA0GCSqGSIb3DQEBCwUAA4IBAQAM0TswJRA1KrZ8WcVaR3XhdVKfqbXXG3sOqRCd
jSCfMUjCt0DMymDAGwqEg4INwM3enLFSZRWQvizLxpwCgLPDbbaUeLMvchZOl7sy
urLpz4EX43M5+soOPNlvkUxC0k+l0MO7NeX201w3jNLlIlzNq22GUJWAlET8Q1Dz
uqtDwt3gp3DGyzFXbug5hKgewFM3mf2gpjcrxHewXsX/nVP9hnEW5u4SOnSviDFE
j/rBa6utU1VkdnEi5ZXNnGnuhSXJxuFMsxJG/y99Qv2VedMpHUZw9GTsaugBp3d6
vtYVmk+qEIfXw65y1HIJS9sDPKV5yiHhUys5nQgVL19vSHTg
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:54 2025 by rpki-client