Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/3VLZ851VUhXxIG7ryQ-8eGekA3s.roa
File: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (raw, json)
Hash identifier: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=
Subject key identifier: DD:52:D9:F3:9D:55:52:15:F1:20:6E:EB:C9:0F:BC:78:67:A4:03:7B
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 0194258EFD4FA51A697C4AD6B093180047FE
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/3VLZ851VUhXxIG7ryQ-8eGekA3s.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210775
IP address blocks: 2001:67c:848::/48 maxlen: 48
2001:67c:84c::/48 maxlen: 48
2001:67c:850::/48 maxlen: 48
2001:67c:854::/48 maxlen: 48
2001:67c:858::/48 maxlen: 48
2001:67c:85c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:4f:a5:1a:69:7c:4a:d6:b0:93:18:00:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd52d9f39d555215f1206eebc90fbc7867a4037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:da:f8:80:9e:47:63:39:2f:6f:16:35:ed:
a1:17:80:75:b5:2e:5e:65:43:da:c0:74:53:6e:f2:
25:c2:1a:89:e8:f1:74:2c:47:92:22:81:97:ea:df:
05:24:a8:36:7e:7d:8e:46:d5:fd:45:60:68:29:3c:
f4:2e:80:59:08:54:e2:69:2e:3a:69:f4:57:fa:dc:
d1:03:b8:55:95:c5:8f:03:6d:56:3c:72:02:f6:e6:
01:de:40:fd:9f:e6:df:bc:3c:ed:f0:52:02:76:3b:
58:44:1a:89:5a:bb:df:ab:79:bc:92:26:23:02:1e:
40:77:f8:57:48:03:9c:82:0f:02:f2:10:d1:c8:c1:
5e:cf:76:19:e6:bb:04:0f:f5:62:60:12:da:34:c4:
95:dd:d0:80:0f:b4:90:db:aa:07:32:aa:6e:10:ff:
90:7a:fc:65:d7:0a:d7:8e:8e:0f:13:37:b8:b1:01:
9c:42:8f:af:2f:68:bd:2c:d1:c1:53:29:df:16:52:
04:e5:fc:29:c3:c7:df:df:33:84:be:8d:2c:b1:99:
9e:3b:0d:99:c5:92:6c:3b:7d:3d:4f:b3:65:d8:f2:
9d:04:9c:eb:97:fc:8c:c4:76:63:0e:4e:95:fc:f6:
9b:42:f7:57:3e:33:f5:d4:81:6a:5f:20:b1:62:91:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:D9:F3:9D:55:52:15:F1:20:6E:EB:C9:0F:BC:78:67:A4:03:7B
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/3VLZ851VUhXxIG7ryQ-8eGekA3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:848::/48
2001:67c:84c::/48
2001:67c:850::/48
2001:67c:854::/48
2001:67c:858::/48
2001:67c:85c::/48
Signature Algorithm: sha256WithRSAEncryption
77:8d:ff:03:4e:c3:34:90:2f:3c:7f:30:78:e6:af:f7:10:30:
52:39:f9:3e:87:b6:7c:07:52:9a:6f:2a:a5:e9:f0:e8:23:6f:
c7:32:1b:59:78:f1:3a:b9:1f:64:0d:b7:23:5e:6d:7b:46:41:
02:1d:f4:c0:7b:7f:3f:65:a7:41:d2:b1:ec:26:b7:69:75:6b:
ce:5e:92:b8:1c:79:9d:01:b7:b8:56:7c:d0:25:da:0a:75:ef:
85:ee:c4:8a:60:8f:1a:71:05:1f:08:e9:98:59:28:d7:2f:01:
bd:60:75:a9:14:62:c9:ca:16:cd:9d:4a:69:f4:91:47:44:ab:
49:84:5b:81:11:e3:15:0e:26:69:d6:a2:22:f1:c5:91:04:01:
00:61:b4:c4:2a:c7:88:15:22:2b:50:dc:a8:0c:a3:16:b9:15:
82:e0:8a:26:78:b3:57:ab:2e:13:06:0e:b1:31:45:e0:ae:be:
bd:17:f4:ae:13:f1:9e:7d:95:7a:7c:95:2c:7d:b4:45:f3:bc:
a2:aa:cc:7c:41:2f:1c:87:2f:94:3a:0f:c2:2c:37:16:35:ac:
e8:b3:0f:f9:7b:16:85:f9:ca:36:50:60:70:36:79:55:15:a7:
3b:a0:91:3b:1b:b0:08:54:9d:ef:94:cc:5e:41:55:90:69:a5:
28:1a:15:68
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQljv1PpRppfErWsJMYAEf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMThhZTI0Yzk0Y2Q0MDI3NGIzODA3YmFiZmM4YjliY2Nl
YThiMzYwHhcNMjUwMTAyMDU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDUyZDlmMzlkNTU1MjE1ZjEyMDZlZWJjOTBmYmM3ODY3YTQwMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7a+ICeR2M5L28WNe2hF4B1tS5e
ZUPawHRTbvIlwhqJ6PF0LEeSIoGX6t8FJKg2fn2ORtX9RWBoKTz0LoBZCFTiaS46
afRX+tzRA7hVlcWPA21WPHIC9uYB3kD9n+bfvDzt8FICdjtYRBqJWrvfq3m8kiYj
Ah5Ad/hXSAOcgg8C8hDRyMFez3YZ5rsED/ViYBLaNMSV3dCAD7SQ26oHMqpuEP+Q
evxl1wrXjo4PEze4sQGcQo+vL2i9LNHBUynfFlIE5fwpw8ff3zOEvo0ssZmeOw2Z
xZJsO309T7Nl2PKdBJzrl/yMxHZjDk6V/PabQvdXPjP11IFqXyCxYpFpAQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFN1S2fOdVVIV8SBu68kPvHhnpAN7MB8GA1UdIwQY
MBaAFLEYriTJTNQCdLOAe6v8i5vM6os2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUt
ZTgzNjg5NDMzZGMwLzEvM1ZMWjg1MVZVaFh4SUc3cnlRLThlR2VrQTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUtZTgzNjg5NDMzZGMw
LzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGfAhI
AwcAIAEGfAhMAwcAIAEGfAhQAwcAIAEGfAhUAwcAIAEGfAhYAwcAIAEGfAhcMA0G
CSqGSIb3DQEBCwUAA4IBAQB3jf8DTsM0kC88fzB45q/3EDBSOfk+h7Z8B1Kabyql
6fDoI2/HMhtZePE6uR9kDbcjXm17RkECHfTAe38/ZadB0rHsJrdpdWvOXpK4HHmd
Abe4VnzQJdoKde+F7sSKYI8acQUfCOmYWSjXLwG9YHWpFGLJyhbNnUpp9JFHRKtJ
hFuBEeMVDiZp1qIi8cWRBAEAYbTEKseIFSIrUNyoDKMWuRWC4IomeLNXqy4TBg6x
MUXgrr69F/SuE/GefZV6fJUsfbRF87yiqsx8QS8chy+UOg/CLDcWNazosw/5exaF
+co2UGBwNnlVFac7oJE7G7AIVJ3vlMxeQVWQaaUoGhVo
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:42 2025 by rpki-client