Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/KvErQkIa-7bptS15YPSXyRA9CSc.roa
File: KvErQkIa-7bptS15YPSXyRA9CSc.roa (raw, json)
Hash identifier: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=
Subject key identifier: 2A:F1:2B:42:42:1A:FB:B6:E9:B5:2D:79:60:F4:97:C9:10:3D:09:27
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 019422FB56358DB391EFF78952C924FCF9D2
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/KvErQkIa-7bptS15YPSXyRA9CSc.roa
Signing time: Wed 01 Jan 2025 17:48:04 +0000
ROA not before: Wed 01 Jan 2025 17:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199268
IP address blocks: 2001:67c:1328::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:56:35:8d:b3:91:ef:f7:89:52:c9:24:fc:f9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2af12b42421afbb6e9b52d7960f497c9103d0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:d1:95:47:58:1b:da:27:d3:1d:4a:9b:61:
e3:33:75:8f:8c:62:c6:55:7d:55:b5:9a:2c:d5:74:
c9:2b:6a:d3:51:7f:5b:0a:0d:a5:16:b5:65:65:56:
1e:99:39:22:f8:c8:b1:b4:47:14:ee:45:12:a0:db:
f8:90:e4:fa:93:2c:b0:93:b5:81:4a:22:fd:a1:e3:
e6:b5:1d:93:5d:ac:34:1b:c1:69:de:4c:02:e5:62:
c6:76:4c:22:76:83:e7:2c:22:71:8d:97:89:a1:3f:
b4:a0:12:b5:b4:4a:48:a6:5f:61:36:16:f3:1e:18:
c9:0a:f1:ca:dd:d1:b4:37:87:15:81:af:e8:26:60:
58:65:3d:82:d7:7b:42:b6:d5:dc:a8:92:ed:25:c3:
b0:2c:ee:68:a5:5a:f0:ce:79:76:3d:70:ed:92:64:
d5:e9:5d:c4:fe:c6:4a:b2:24:62:58:ce:c5:02:54:
39:0d:27:5d:41:18:8e:56:2a:45:60:1c:e5:f7:4a:
39:87:50:3a:82:8d:69:26:fb:24:43:cd:8c:6b:ee:
2e:06:fc:14:01:3e:bd:ca:d5:d4:ae:a8:5e:c5:42:
81:be:ad:cb:c6:4f:1e:35:d9:15:96:1b:d7:3a:57:
06:f2:b3:b3:10:52:77:d2:a1:f4:be:b8:6e:ba:9e:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:2B:42:42:1A:FB:B6:E9:B5:2D:79:60:F4:97:C9:10:3D:09:27
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/KvErQkIa-7bptS15YPSXyRA9CSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1328::/48
Signature Algorithm: sha256WithRSAEncryption
6a:8d:41:ae:6a:20:a0:d5:ec:31:2b:cb:c4:36:15:b3:cf:52:
92:8d:ab:03:b0:8a:53:db:e7:47:4a:2e:4f:61:45:c0:d3:87:
c6:2a:35:39:76:dc:1f:42:0b:cb:7e:b7:84:57:68:e0:46:a1:
4f:8b:06:ad:5d:dd:58:7b:be:ee:22:08:13:08:4c:ac:79:f3:
04:cc:4d:20:c0:e5:4b:60:7e:42:8b:11:15:ec:42:2a:23:01:
7e:bf:39:57:21:19:6f:d5:97:3c:00:9e:95:f9:74:66:07:bf:
b5:48:f7:83:94:75:b7:d2:f6:9d:de:bc:e2:9f:44:f8:dc:83:
51:d6:9e:71:2a:4a:e9:4b:cf:a6:4a:28:03:b0:ba:eb:d5:d7:
8f:ec:b8:a9:59:d1:de:c1:6f:f7:f7:42:83:49:4f:98:e3:af:
c8:e1:ec:d8:0c:96:fe:1f:fa:e6:6e:42:af:c5:ab:47:b7:53:
e9:b9:b5:6d:74:20:29:3a:98:92:66:44:4b:a3:82:22:ba:9c:
f5:c8:b4:01:3f:85:df:2d:62:66:4a:bf:e5:e1:49:4d:c6:08:
91:9e:d4:5f:c8:00:38:02:0c:ea:07:d3:4d:bf:70:9a:16:8e:
8d:79:4d:25:6c:5c:82:b1:54:dd:f5:da:06:f6:61:b3:82:6d:
86:70:8e:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+1Y1jbOR7/eJUskk/PnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGQ4ZDBjZWViY2NkNzViNjA2YmE0OTY4ZjVjNzk0NmU4
ZDQ3YzAwHhcNMjUwMTAxMTc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWYxMmI0MjQyMWFmYmI2ZTliNTJkNzk2MGY0OTdjOTEwM2QwOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BvRlUdYG9on0x1Km2HjM3WPjGLG
VX1VtZos1XTJK2rTUX9bCg2lFrVlZVYemTki+MixtEcU7kUSoNv4kOT6kyywk7WB
SiL9oePmtR2TXaw0G8Fp3kwC5WLGdkwidoPnLCJxjZeJoT+0oBK1tEpIpl9hNhbz
HhjJCvHK3dG0N4cVga/oJmBYZT2C13tCttXcqJLtJcOwLO5opVrwznl2PXDtkmTV
6V3E/sZKsiRiWM7FAlQ5DSddQRiOVipFYBzl90o5h1A6go1pJvskQ82Ma+4uBvwU
AT69ytXUrqhexUKBvq3Lxk8eNdkVlhvXOlcG8rOzEFJ30qH0vrhuup4QKwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCrxK0JCGvu26bUteWD0l8kQPQknMB8GA1UdIwQY
MBaAFC+NjQzuvM11tga6SWj1x5RujUfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjNiYmQtNGE2MS00MmM1LThiMDct
M2NiZDUyNTdiMDNlLzEvS3ZFclFrSWEtN2JwdFMxNVlQU1h5UkE5Q1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjNiYmQtNGE2MS00MmM1LThiMDctM2NiZDUyNTdiMDNl
LzEvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBMo
MA0GCSqGSIb3DQEBCwUAA4IBAQBqjUGuaiCg1ewxK8vENhWzz1KSjasDsIpT2+dH
Si5PYUXA04fGKjU5dtwfQgvLfreEV2jgRqFPiwatXd1Ye77uIggTCEysefMEzE0g
wOVLYH5CixEV7EIqIwF+vzlXIRlv1Zc8AJ6V+XRmB7+1SPeDlHW30vad3rzin0T4
3INR1p5xKkrpS8+mSigDsLrr1deP7LipWdHewW/390KDSU+Y46/I4ezYDJb+H/rm
bkKvxatHt1PpubVtdCApOpiSZkRLo4Iiupz1yLQBP4XfLWJmSr/l4UlNxgiRntRf
yAA4AgzqB9NNv3CaFo6NeU0lbFyCsVTd9doG9mGzgm2GcI7C
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:00 2025 by rpki-client