Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-TrGp-z9XirqNAVi00kZmMtegAQ.roa
File: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (raw, json)
Hash identifier: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=
Subject key identifier: F9:3A:C6:A7:EC:FD:5E:2A:EA:34:05:62:D3:49:19:98:CB:5E:80:04
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0194236987F04AAA4AFBD32A55BDB00FA22D
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-TrGp-z9XirqNAVi00kZmMtegAQ.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51454
IP address blocks: 2a01:190:15f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:87:f0:4a:aa:4a:fb:d3:2a:55:bd:b0:0f:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93ac6a7ecfd5e2aea340562d3491998cb5e8004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:e7:f7:d8:e1:34:0c:3e:be:6d:82:74:79:
0a:cd:a3:be:d5:69:82:cf:7d:00:3e:4f:19:fc:30:
15:d9:1f:24:f0:cf:2d:a8:46:ce:ef:9a:84:60:3e:
d3:74:65:a8:10:e9:f0:c5:ca:f1:57:a5:43:fb:3b:
68:fe:5b:68:18:87:a7:ab:b5:ff:05:ef:77:47:b9:
3b:93:19:41:a1:b7:5e:a6:a6:dd:5d:e3:51:45:c6:
c5:6c:66:c2:e6:96:07:92:5c:79:de:e3:67:84:3f:
fd:93:5d:71:3e:d9:75:25:2d:64:35:ca:7a:f6:5b:
30:c3:a6:00:3f:ba:7b:af:56:94:e7:86:c7:e1:e4:
e2:c8:c5:ae:cc:22:60:d7:5e:23:23:97:1e:fc:b6:
8b:a4:a9:32:02:a5:b5:c0:43:b5:7b:ae:32:5c:15:
1f:79:60:ab:e6:7e:2c:1b:4b:c8:e8:47:c7:0c:41:
61:ad:ca:e9:9b:6c:5c:a5:15:d2:32:b5:03:01:c7:
99:53:f2:2b:a5:de:72:e0:88:95:5a:84:2f:cf:2f:
b1:db:cb:3b:27:68:0d:36:68:77:5c:fe:e8:e3:a1:
b4:e1:ea:a0:12:d3:70:70:14:d0:c7:72:52:eb:00:
92:8a:0d:db:80:7e:68:ac:3b:d0:fa:48:0a:0f:88:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:C6:A7:EC:FD:5E:2A:EA:34:05:62:D3:49:19:98:CB:5E:80:04
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-TrGp-z9XirqNAVi00kZmMtegAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15f::/48
Signature Algorithm: sha256WithRSAEncryption
18:a8:b3:f0:b6:a2:e0:8a:a0:28:0b:ca:30:c7:65:cd:93:5e:
38:03:4e:02:9e:7b:71:d1:d6:2c:85:fe:3f:91:92:e7:1d:30:
aa:a8:1a:7c:76:6b:85:f1:50:1d:79:9d:f4:07:f9:81:8d:ed:
49:38:ef:05:5d:ac:71:a3:ac:f3:a1:80:73:28:79:c1:55:38:
60:90:75:40:f3:59:e4:d4:53:3a:41:31:1e:cf:ba:30:41:19:
c0:26:d0:05:2b:71:fe:c7:0e:03:58:e2:ff:88:10:c6:d7:3f:
e7:d2:db:b3:c9:35:10:16:5e:ee:2d:a9:1d:31:5f:55:8c:58:
f5:34:b0:99:98:15:26:06:a2:2d:58:e9:6d:2c:b6:f5:46:34:
48:19:5c:cc:40:e3:6a:99:4a:58:04:68:38:55:58:0c:fe:40:
b4:46:25:3e:79:c6:d4:83:c1:d3:f2:f6:ee:0a:0e:e9:bd:a5:
57:a9:05:02:2b:0d:ea:e4:25:47:f1:5b:54:cb:9e:11:17:93:
c5:9b:d9:61:0d:27:81:ee:18:61:78:e6:fc:19:b0:7a:ae:2c:
21:cb:a8:74:75:ce:f9:28:c4:5b:29:ff:89:67:c9:61:5b:43:
32:b4:60:00:4b:80:e0:d0:7e:7e:b7:dd:a3:ec:67:70:d1:cd:
0e:47:35:70
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQjaYfwSqpK+9MqVb2wD6ItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjUwMTAxMTk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNhYzZhN2VjZmQ1ZTJhZWEzNDA1NjJkMzQ5MTk5OGNiNWU4MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBbn99jhNAw+vm2CdHkKzaO+1WmC
z30APk8Z/DAV2R8k8M8tqEbO75qEYD7TdGWoEOnwxcrxV6VD+zto/ltoGIenq7X/
Be93R7k7kxlBobdepqbdXeNRRcbFbGbC5pYHklx53uNnhD/9k11xPtl1JS1kNcp6
9lsww6YAP7p7r1aU54bH4eTiyMWuzCJg114jI5ce/LaLpKkyAqW1wEO1e64yXBUf
eWCr5n4sG0vI6EfHDEFhrcrpm2xcpRXSMrUDAceZU/Irpd5y4IiVWoQvzy+x28s7
J2gNNmh3XP7o46G04eqgEtNwcBTQx3JS6wCSig3bgH5orDvQ+kgKD4i3MwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPk6xqfs/V4q6jQFYtNJGZjLXoAEMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvMS1UckdwLXo5WGlycU5BVmkwMGtabU10ZWdBUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvMmVjZTYyLTFkOGMtNDUwYy05MWU4LThlZWI3NTdjZjU0
NS8xLzFuUFlTYmZWQkhOMjFYNXZlVzhBR0xjTFJRWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBAZAB
XzANBgkqhkiG9w0BAQsFAAOCAQEAGKiz8Lai4IqgKAvKMMdlzZNeOANOAp57cdHW
LIX+P5GS5x0wqqgafHZrhfFQHXmd9Af5gY3tSTjvBV2scaOs86GAcyh5wVU4YJB1
QPNZ5NRTOkExHs+6MEEZwCbQBStx/scOA1ji/4gQxtc/59Lbs8k1EBZe7i2pHTFf
VYxY9TSwmZgVJgaiLVjpbSy29UY0SBlczEDjaplKWARoOFVYDP5AtEYlPnnG1IPB
0/L27goO6b2lV6kFAisN6uQlR/FbVMueEReTxZvZYQ0nge4YYXjm/Bmweq4sIcuo
dHXO+SjEWyn/iWfJYVtDMrRgAEuA4NB+frfdo+xncNHNDkc1cA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:24 2025 by rpki-client