Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Wo69R9wkZdSu2YDZamu1cwfnvYY.roa
File: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (raw, json)
Hash identifier: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=
Subject key identifier: 5A:8E:BD:47:DC:24:65:D4:AE:D9:80:D9:6A:6B:B5:73:07:E7:BD:86
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 0194221FF3909C11BC1717A357E4C45469E0
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Wo69R9wkZdSu2YDZamu1cwfnvYY.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12608
IP address blocks: 2a13:3304::/32 maxlen: 32
2a13:3305::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:90:9c:11:bc:17:17:a3:57:e4:c4:54:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a8ebd47dc2465d4aed980d96a6bb57307e7bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:6f:ea:c8:f1:6d:5b:da:1b:56:c5:fc:6e:
91:8e:8f:19:31:ab:fb:e3:01:c4:b8:f8:4d:62:a3:
16:e0:3b:0d:8d:39:67:99:4f:28:72:74:db:74:56:
43:77:f8:39:7d:47:a4:f7:f6:81:1f:dd:7c:51:e5:
a6:3d:d9:63:55:b3:45:59:7a:b6:63:2c:36:1a:1f:
e5:69:75:f7:de:a8:12:72:89:67:e2:32:d5:b3:f7:
ba:3d:07:6f:2a:ae:42:00:97:96:00:d1:ce:ab:53:
b6:fc:7e:7e:bd:4e:77:dc:02:45:6a:27:ba:8f:fc:
02:01:4a:c2:00:a3:c1:e9:67:d9:5f:14:15:92:71:
0e:24:c1:60:8f:f1:4e:4b:dc:11:d4:c5:b4:2e:09:
30:55:e2:51:2e:8d:7c:21:d3:04:1a:25:08:20:a1:
4e:3f:98:c0:bf:6d:13:af:06:1a:93:88:1d:21:bf:
b3:a8:ef:74:df:59:9a:1e:91:de:12:61:66:b6:59:
dc:be:69:56:14:16:c2:c9:62:58:2e:11:b5:ab:53:
5d:eb:df:f5:de:66:3d:5c:e0:08:1b:13:80:aa:36:
70:fb:53:61:6f:01:14:12:0d:84:34:6d:c0:e1:b0:
84:dc:86:e2:77:23:e5:56:a9:d9:08:ee:af:70:ad:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:BD:47:DC:24:65:D4:AE:D9:80:D9:6A:6B:B5:73:07:E7:BD:86
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Wo69R9wkZdSu2YDZamu1cwfnvYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3304::/31
Signature Algorithm: sha256WithRSAEncryption
2e:11:73:d0:70:74:32:67:38:29:26:b4:96:c4:8a:68:ad:05:
0a:de:93:d4:c2:8b:8d:f4:b9:51:72:a8:f4:54:73:ce:16:1a:
0e:f6:34:49:8e:ec:f3:b7:d2:2d:9d:78:63:24:b4:32:9d:64:
67:36:be:fc:d0:44:9c:c2:b5:fc:f2:ef:b1:52:6e:a4:e2:31:
12:cc:fb:d5:7e:50:5c:7f:6f:76:60:d0:1f:1b:e8:cc:4e:37:
b7:ee:75:43:f6:33:6a:e2:58:8f:49:27:af:de:7b:b7:30:9c:
49:3f:7a:f3:7e:f7:80:a9:65:54:db:9f:98:56:4e:65:4d:7d:
6b:98:92:bd:b0:b3:2e:f1:3d:ea:13:80:df:09:77:cf:37:dc:
2e:8d:76:e4:86:b5:03:93:92:8a:69:3e:ca:df:2e:b0:f1:bc:
1d:95:45:72:6b:b9:0a:d5:8d:fb:f3:d5:9d:f4:52:59:5d:07:
07:03:75:42:fe:12:a6:fe:5e:07:a3:95:b6:d8:cc:0e:b6:4b:
7e:a3:90:df:1b:ef:1b:ff:5c:78:4c:24:3e:e6:d3:82:5a:de:
9a:f4:da:77:d1:ec:29:49:59:2e:91:8c:c6:c8:93:43:3b:ef:
78:5d:32:aa:cb:d9:11:90:09:9f:2b:b9:05:80:a4:bb:e0:7c:
5c:bf:04:d9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQiH/OQnBG8FxejV+TEVGngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTFiYmJlNTQwMDc5ZDJiN2YyNzBiOTJjZWFmM2IyYTgx
NmU4ZmEwHhcNMjUwMTAxMTM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YThlYmQ0N2RjMjQ2NWQ0YWVkOTgwZDk2YTZiYjU3MzA3ZTdiZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprlv6sjxbVvaG1bF/G6Rjo8ZMav7
4wHEuPhNYqMW4DsNjTlnmU8ocnTbdFZDd/g5fUek9/aBH918UeWmPdljVbNFWXq2
Yyw2Gh/laXX33qgScoln4jLVs/e6PQdvKq5CAJeWANHOq1O2/H5+vU533AJFaie6
j/wCAUrCAKPB6WfZXxQVknEOJMFgj/FOS9wR1MW0LgkwVeJRLo18IdMEGiUIIKFO
P5jAv20TrwYak4gdIb+zqO9031maHpHeEmFmtlncvmlWFBbCyWJYLhG1q1Nd69/1
3mY9XOAIGxOAqjZw+1NhbwEUEg2ENG3A4bCE3IbidyPlVqnZCO6vcK3xfQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFqOvUfcJGXUrtmA2WprtXMH572GMB8GA1UdIwQY
MBaAFEvhu75UAHnSt/JwuSzq87KoFuj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMt
MWVmMWNlZTY2MWNhLzEvV282OVI5d2taZFN1MllEWmFtdTFjd2ZudllZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMtMWVmMWNlZTY2MWNh
LzEvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhMzBDAN
BgkqhkiG9w0BAQsFAAOCAQEALhFz0HB0Mmc4KSa0lsSKaK0FCt6T1MKLjfS5UXKo
9FRzzhYaDvY0SY7s87fSLZ14YyS0Mp1kZza+/NBEnMK1/PLvsVJupOIxEsz71X5Q
XH9vdmDQHxvozE43t+51Q/YzauJYj0knr957tzCcST968373gKllVNufmFZOZU19
a5iSvbCzLvE96hOA3wl3zzfcLo125Ia1A5OSimk+yt8usPG8HZVFcmu5CtWN+/PV
nfRSWV0HBwN1Qv4Spv5eB6OVttjMDrZLfqOQ3xvvG/9ceEwkPubTglremvTad9Hs
KUlZLpGMxsiTQzvveF0yqsvZEZAJnyu5BYCku+B8XL8E2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:31 2025 by rpki-client