Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa
File: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (raw, json)
Hash identifier: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=
Subject key identifier: 57:5B:D5:90:20:FF:85:80:31:58:D5:83:82:A1:24:C7:05:E6:07:1B
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 019424B397658A92E4D08E2E8A3684BDA759
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60874
IP address blocks: 2a00:6fe0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:65:8a:92:e4:d0:8e:2e:8a:36:84:bd:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=575bd59020ff85803158d58382a124c705e6071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:64:7b:0a:1c:b6:9b:3b:7f:57:ab:e9:c2:
98:70:1d:3d:79:71:5f:78:5d:f7:30:80:1a:b0:49:
e7:96:c0:3e:2c:4a:19:d7:f3:15:be:2a:c8:36:ce:
af:35:ca:2c:90:78:86:ad:ac:b0:a4:08:a0:6d:3a:
92:2a:05:73:56:98:a0:05:2b:fd:9d:59:26:e9:69:
c7:d1:a5:a1:32:35:ec:2b:45:2f:b8:27:1d:18:b9:
59:48:cd:39:9c:fa:b7:28:74:e2:e7:1f:03:cd:92:
9e:b7:67:ef:5a:64:97:9e:5c:3c:2f:8a:3e:06:39:
7a:b8:da:99:80:c6:c6:36:c1:c6:9a:dd:9d:96:fc:
ea:89:ff:68:dc:39:00:96:72:ad:a1:e9:15:2f:b8:
f7:a9:31:c5:73:29:f2:4f:0e:f4:7f:fe:48:8b:30:
dd:bb:45:03:33:5a:e3:f1:d9:44:9f:4f:c6:78:64:
ec:e1:2d:0c:61:55:e8:ae:98:a7:16:bd:53:7a:35:
1f:2e:fe:c1:65:7a:ec:39:b0:c4:5b:ff:93:c4:6b:
02:2f:50:fe:86:e9:77:e2:11:f0:c8:cd:48:64:92:
b2:9e:a0:95:63:67:59:42:6b:0a:fc:a6:5a:40:1f:
9c:cb:ba:d5:2e:88:9f:c4:97:89:05:fa:9e:91:93:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:D5:90:20:FF:85:80:31:58:D5:83:82:A1:24:C7:05:E6:07:1B
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
68:4b:e7:20:49:b8:6d:2a:9f:52:61:16:aa:fb:b5:f9:8a:81:
e7:fe:f0:60:47:30:51:9e:5c:9e:75:a5:ff:5b:bf:3e:39:28:
db:e7:44:f8:d4:12:e8:5b:e0:0a:21:07:1d:67:f6:26:b4:a2:
16:7b:ab:9c:a8:9c:65:0c:c7:0a:28:9b:72:66:77:6d:fd:cd:
fa:32:f0:a8:17:48:ea:90:2d:05:c0:6d:a7:cd:7a:d2:77:7c:
e2:bc:8c:94:7e:93:c3:c1:e2:81:34:39:65:c1:6e:e0:ba:c0:
58:14:c6:0b:fe:0f:04:57:a1:4f:60:eb:ba:eb:85:34:3d:6f:
1a:fe:b0:f6:66:16:b2:5a:b8:c2:9b:56:bb:7f:88:84:9e:94:
31:43:49:6c:1d:00:8b:4a:f0:c5:15:78:83:15:2b:ef:8a:0d:
36:89:82:0f:97:7a:f4:14:82:06:4d:ee:15:9e:93:3f:60:59:
17:4b:81:c5:20:04:2f:32:30:1a:a7:d3:d6:98:04:73:da:2d:
17:36:1b:87:d8:46:62:55:01:80:1d:b7:72:d6:16:8f:a2:93:
24:2a:73:d7:ff:21:86:be:2d:b5:68:3e:26:86:d6:7d:a2:60:
01:56:29:b8:5f:54:3e:5e:10:13:f3:a2:b8:5a:28:72:dc:18:
02:af:28:31
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQks5dlipLk0I4uijaEvadZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl
MDNmNjIwHhcNMjUwMTAyMDE0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzViZDU5MDIwZmY4NTgwMzE1OGQ1ODM4MmExMjRjNzA1ZTYwNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5pkewoctps7f1er6cKYcB09eXFf
eF33MIAasEnnlsA+LEoZ1/MVvirINs6vNcoskHiGraywpAigbTqSKgVzVpigBSv9
nVkm6WnH0aWhMjXsK0UvuCcdGLlZSM05nPq3KHTi5x8DzZKet2fvWmSXnlw8L4o+
Bjl6uNqZgMbGNsHGmt2dlvzqif9o3DkAlnKtoekVL7j3qTHFcynyTw70f/5IizDd
u0UDM1rj8dlEn0/GeGTs4S0MYVXorpinFr1TejUfLv7BZXrsObDEW/+TxGsCL1D+
hul34hHwyM1IZJKynqCVY2dZQmsK/KZaQB+cy7rVLoifxJeJBfqekZNBcQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFdb1ZAg/4WAMVjVg4KhJMcF5gcbMB8GA1UdIwQY
MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt
NzY0MzYzYjEzY2QyLzEvVjF2VmtDRF9oWUF4V05XRGdxRWt4d1htQnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy
LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgBv4DAN
BgkqhkiG9w0BAQsFAAOCAQEAaEvnIEm4bSqfUmEWqvu1+YqB5/7wYEcwUZ5cnnWl
/1u/Pjko2+dE+NQS6FvgCiEHHWf2JrSiFnurnKicZQzHCiibcmZ3bf3N+jLwqBdI
6pAtBcBtp8160nd84ryMlH6Tw8HigTQ5ZcFu4LrAWBTGC/4PBFehT2DruuuFND1v
Gv6w9mYWslq4wptWu3+IhJ6UMUNJbB0Ai0rwxRV4gxUr74oNNomCD5d69BSCBk3u
FZ6TP2BZF0uBxSAELzIwGqfT1pgEc9otFzYbh9hGYlUBgB23ctYWj6KTJCpz1/8h
hr4ttWg+JobWfaJgAVYpuF9UPl4QE/OiuFooctwYAq8oMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:54 2025 by rpki-client