Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/697cAJc5ww3rq8-l1VuLwBpxIdc.roa
File: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (raw, json)
Hash identifier: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=
Subject key identifier: EB:DE:DC:00:97:39:C3:0D:EB:AB:CF:A5:D5:5B:8B:C0:1A:71:21:D7
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0194258F6DF62BACE54A89859D02D250DA50
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/697cAJc5ww3rq8-l1VuLwBpxIdc.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8481
IP address blocks: 2a02:158:ffff::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6d:f6:2b:ac:e5:4a:89:85:9d:02:d2:50:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebdedc009739c30debabcfa5d55b8bc01a7121d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:65:15:01:14:66:e5:f5:a5:58:79:5e:89:
ea:19:df:b1:75:5b:d7:3e:85:f7:45:9b:0b:61:31:
5d:83:55:3c:86:6d:a1:8f:b1:0a:66:57:13:f1:2e:
8a:50:e3:c6:cd:bb:97:4a:b3:73:4f:b8:15:f3:47:
68:fb:c9:78:64:92:b6:32:62:b2:4a:4f:55:ee:7d:
91:83:7c:15:b3:89:35:12:d7:31:12:63:73:84:eb:
94:72:64:1d:2a:1d:7e:66:53:73:e7:04:e0:ef:8f:
5a:b7:2c:17:28:bc:fe:10:1f:26:41:95:5c:b2:a3:
55:46:50:35:67:fa:e8:83:52:2d:6f:7e:dd:0a:4c:
3e:f8:18:5b:da:07:0b:7b:2b:7c:4c:09:07:f7:00:
a7:93:f1:5a:26:0e:c2:8d:07:28:72:54:df:56:27:
a3:08:57:c2:48:3b:d9:6c:f9:96:68:95:82:22:ec:
74:32:05:5c:12:4f:12:4c:1c:9f:9f:49:9e:cc:93:
ac:dc:d7:21:98:37:b5:e6:e7:d6:2a:74:c6:08:ab:
73:c4:73:d0:f0:95:a2:b1:d8:6d:ab:f1:67:fd:76:
16:85:16:1b:c9:20:00:d5:ee:b9:5d:95:e0:3f:05:
18:c4:97:a3:31:14:0a:c7:99:48:0e:d4:27:4c:8d:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:DC:00:97:39:C3:0D:EB:AB:CF:A5:D5:5B:8B:C0:1A:71:21:D7
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/697cAJc5ww3rq8-l1VuLwBpxIdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:158:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
56:bd:8d:b8:ee:b1:48:98:f1:a7:41:26:a1:ac:cc:ab:30:5f:
6e:11:b3:67:3e:f4:2d:5e:dc:8c:98:5f:c0:61:0e:64:fd:82:
3b:4b:08:10:35:6b:49:2b:14:1e:21:2a:52:30:b0:f5:f9:c9:
38:60:f0:70:92:64:b2:b3:7b:f6:7b:e0:47:45:10:f7:2d:e4:
05:ae:33:f6:93:57:cb:2a:5c:d9:b1:52:62:4e:65:29:f1:a2:
09:60:47:0f:d8:3e:a3:b6:d9:a7:e0:e2:38:06:4b:f9:ab:c7:
36:33:4c:34:e8:f8:a2:4b:b1:44:5e:ec:ed:ae:af:85:6c:6b:
78:76:d0:be:ae:12:54:85:8d:aa:52:ef:7a:ff:48:78:4d:e7:
b9:50:fd:71:01:8c:91:04:80:d4:8a:ac:f5:c9:59:76:6f:a1:
50:2f:a0:1e:42:f1:0b:a5:45:b2:07:fc:e7:09:e2:5e:9e:ed:
16:88:01:e2:70:e6:69:22:0e:a1:e1:2c:a6:03:b1:98:0e:8b:
a9:ad:3c:8a:8d:5c:86:59:6e:7b:81:28:c1:50:a8:d3:ae:08:
8b:91:6a:c8:4d:ff:39:18:e1:2d:59:96:1c:b1:df:3f:49:39:
bb:db:1b:ff:5c:c3:38:cd:5f:a3:5e:70:ff:db:fc:3d:20:7e:
34:e9:7b:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj232K6zlSomFnQLSUNpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi
NjEzZGYwHhcNMjUwMTAyMDU0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRlZGMwMDk3MzljMzBkZWJhYmNmYTVkNTViOGJjMDFhNzEyMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/1lFQEUZuX1pVh5XonqGd+xdVvX
PoX3RZsLYTFdg1U8hm2hj7EKZlcT8S6KUOPGzbuXSrNzT7gV80do+8l4ZJK2MmKy
Sk9V7n2Rg3wVs4k1EtcxEmNzhOuUcmQdKh1+ZlNz5wTg749atywXKLz+EB8mQZVc
sqNVRlA1Z/rog1Itb37dCkw++Bhb2gcLeyt8TAkH9wCnk/FaJg7CjQcoclTfViej
CFfCSDvZbPmWaJWCIux0MgVcEk8STByfn0mezJOs3NchmDe15ufWKnTGCKtzxHPQ
8JWisdhtq/Fn/XYWhRYbySAA1e65XZXgPwUYxJejMRQKx5lIDtQnTI26qwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOve3ACXOcMN66vPpdVbi8AacSHXMB8GA1UdIwQY
MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvNjk3Y0FKYzV3dzNycTgtbDFWdUx3QnB4SWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIBWP//
MA0GCSqGSIb3DQEBCwUAA4IBAQBWvY247rFImPGnQSahrMyrMF9uEbNnPvQtXtyM
mF/AYQ5k/YI7SwgQNWtJKxQeISpSMLD1+ck4YPBwkmSys3v2e+BHRRD3LeQFrjP2
k1fLKlzZsVJiTmUp8aIJYEcP2D6jttmn4OI4Bkv5q8c2M0w06PiiS7FEXuztrq+F
bGt4dtC+rhJUhY2qUu96/0h4Tee5UP1xAYyRBIDUiqz1yVl2b6FQL6AeQvELpUWy
B/znCeJenu0WiAHicOZpIg6h4SymA7GYDouprTyKjVyGWW57gSjBUKjTrgiLkWrI
Tf85GOEtWZYcsd8/STm72xv/XMM4zV+jXnD/2/w9IH406Xu3
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:34 2025 by rpki-client