Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa
File: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (raw, json)
Hash identifier: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=
Subject key identifier: 94:4F:19:CB:C3:7E:C6:96:3D:53:EA:0A:E5:63:77:EF:99:F5:39:FC
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019423D7EEBA727A772EE0B982E632F1BBF1
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214587
IP address blocks: 2a13:7fc0:1010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ee:ba:72:7a:77:2e:e0:b9:82:e6:32:f1:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944f19cbc37ec6963d53ea0ae56377ef99f539fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:50:fa:35:18:59:f9:52:27:bd:2b:40:6c:
34:aa:ef:ae:78:f5:40:df:33:64:65:63:30:64:2d:
60:7d:22:ee:f9:0c:cf:36:13:88:f8:cf:c7:74:c7:
76:81:2b:aa:c8:b3:77:b5:d1:3e:98:55:51:be:ba:
e0:42:19:f7:72:76:95:e7:ec:af:f1:4a:aa:01:fa:
e0:1c:22:73:1f:ca:43:0b:ea:e5:fa:97:62:bd:ca:
51:22:f2:c4:15:4f:5c:8f:61:82:1f:e2:1b:6d:9f:
29:f2:c5:9a:21:b9:3b:13:5c:a2:0c:db:96:6c:7a:
c0:d6:49:30:21:ff:95:67:de:29:21:76:97:1a:94:
3a:b4:b0:fe:f5:af:02:98:19:f5:df:2d:ac:5d:87:
ed:7e:b5:3b:75:ea:d0:58:78:b8:d5:cd:37:d4:00:
2b:db:6a:45:c4:00:7b:d5:2b:5a:79:f6:8f:90:12:
7d:ef:36:42:80:85:76:7b:a8:88:99:c4:59:f9:c7:
39:13:d3:4c:32:af:08:fd:07:d9:9b:ec:8d:5c:ea:
be:6f:27:2b:11:33:5a:dd:fe:2c:86:2a:bc:bf:c0:
55:08:70:e6:c0:f4:b1:00:3c:a7:5a:b5:d7:94:68:
92:a4:da:c7:7a:fa:3e:f9:6b:62:f2:0b:0b:2e:bf:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:19:CB:C3:7E:C6:96:3D:53:EA:0A:E5:63:77:EF:99:F5:39:FC
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7fc0:1010::/44
Signature Algorithm: sha256WithRSAEncryption
aa:1f:f0:68:e4:b4:3c:64:a5:ed:1d:48:35:32:bd:bc:99:e5:
c1:d1:8b:dc:21:0c:0d:61:1a:a4:f2:41:dd:e8:48:44:55:ef:
3c:7e:9a:e1:5d:a2:43:e6:43:e6:16:62:27:47:0c:a4:a7:2d:
2b:3b:63:14:e7:2e:5a:4a:57:db:16:12:13:70:c9:ef:23:44:
78:15:69:35:eb:81:95:80:40:9f:8b:4d:9f:97:8b:02:46:b6:
8b:c0:95:ac:7e:ad:09:b4:b4:e4:db:aa:9a:69:da:74:aa:55:
1e:2d:25:ea:52:33:ac:b5:f8:66:66:02:f9:8d:02:f5:6d:aa:
c4:0a:46:31:ed:c7:3f:5a:4c:68:ef:1f:e9:4b:b4:79:76:3f:
c4:09:d4:fb:e0:89:44:25:1a:29:3e:35:5c:f6:ab:0f:c8:63:
96:9c:70:9d:f7:60:c9:14:9d:c9:1a:cd:ba:d7:85:80:54:f8:
92:df:c7:c2:8e:61:fa:7c:83:91:87:07:e9:0d:a8:40:15:b0:
e1:6f:fb:af:18:11:b4:a2:92:da:37:e7:9c:85:15:6a:fc:b7:
a8:83:7d:a0:99:92:c7:15:c9:7f:37:f6:45:4e:2c:7b:ed:da:
fc:e4:46:32:7d:f3:81:fe:82:c9:c5:bd:37:c1:02:c3:86:22:
2c:3b:ec:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1+66cnp3LuC5guYy8bvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw
NjQ2ODQwHhcNMjUwMTAxMjE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDRmMTljYmMzN2VjNjk2M2Q1M2VhMGFlNTYzNzdlZjk5ZjUzOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIlQ+jUYWflSJ70rQGw0qu+uePVA
3zNkZWMwZC1gfSLu+QzPNhOI+M/HdMd2gSuqyLN3tdE+mFVRvrrgQhn3cnaV5+yv
8UqqAfrgHCJzH8pDC+rl+pdivcpRIvLEFU9cj2GCH+IbbZ8p8sWaIbk7E1yiDNuW
bHrA1kkwIf+VZ94pIXaXGpQ6tLD+9a8CmBn13y2sXYftfrU7derQWHi41c031AAr
22pFxAB71StaefaPkBJ97zZCgIV2e6iImcRZ+cc5E9NMMq8I/QfZm+yNXOq+bycr
ETNa3f4shiq8v8BVCHDmwPSxADynWrXXlGiSpNrHevo++Wti8gsLLr8+1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJRPGcvDfsaWPVPqCuVjd++Z9Tn8MB8GA1UdIwQY
MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt
MmEzNTFhYjNiOGY2LzEvbEU4Wnk4Ti14cFk5VS1vSzVXTjM3NW4xT2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2
LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhN/wBAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCqH/Bo5LQ8ZKXtHUg1Mr28meXB0YvcIQwNYRqk
8kHd6EhEVe88fprhXaJD5kPmFmInRwykpy0rO2MU5y5aSlfbFhITcMnvI0R4FWk1
64GVgECfi02fl4sCRraLwJWsfq0JtLTk26qaadp0qlUeLSXqUjOstfhmZgL5jQL1
barECkYx7cc/Wkxo7x/pS7R5dj/ECdT74IlEJRopPjVc9qsPyGOWnHCd92DJFJ3J
Gs2614WAVPiS38fCjmH6fIORhwfpDahAFbDhb/uvGBG0opLaN+echRVq/Leog32g
mZLHFcl/N/ZFTix77dr85EYyffOB/oLJxb03wQLDhiIsO+z0
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:33 2025 by rpki-client