Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/Sj80T0ZscSHQioJGKuWyuIDWdMY.roa
File: Sj80T0ZscSHQioJGKuWyuIDWdMY.roa (raw, json)
Hash identifier: WY9jZ6uCG8EibKZZR1R4Ju7ioSD/EDvW46cJnpe1OBA=
Subject key identifier: 4A:3F:34:4F:46:6C:71:21:D0:8A:82:46:2A:E5:B2:B8:80:D6:74:C6
Certificate issuer: /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial: 0194258FC2B05A6F0BB1CB1FD3BE04ABEC80
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/Sj80T0ZscSHQioJGKuWyuIDWdMY.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47610
IP address blocks: 2001:67c:a20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:b0:5a:6f:0b:b1:cb:1f:d3:be:04:ab:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3f344f466c7121d08a82462ae5b2b880d674c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:f0:37:79:34:b0:fc:c7:30:d7:58:cf:23:
d6:59:55:4f:a0:dc:75:86:50:05:13:38:3d:d6:96:
dc:77:1e:b6:49:f4:bf:c6:bc:55:38:1f:1c:cd:aa:
1d:af:38:42:a4:1b:cf:71:2b:a2:d0:f3:73:11:1a:
9f:d0:c0:26:85:97:9d:f4:ec:9a:72:8a:d7:de:b7:
59:36:99:b3:80:9f:3a:8c:3a:c3:1f:6b:97:01:9d:
87:42:aa:5a:68:fa:24:71:18:cf:65:c8:df:58:6f:
61:b0:7c:94:28:34:72:10:f3:cb:d0:13:5c:d2:61:
37:15:dd:80:7f:1a:83:17:3d:2f:d9:15:f0:49:1e:
57:b4:a0:14:57:06:cd:7d:57:19:4c:e9:84:2c:01:
fe:9d:83:93:d6:e5:75:f5:d1:40:ea:44:6b:9f:59:
fa:8e:5a:60:ae:2b:7a:25:72:8e:fb:c7:cd:58:39:
ca:81:b7:d0:f8:c9:c4:e7:a7:06:cf:70:18:1f:06:
82:a4:08:5d:23:71:78:a0:b5:61:2f:69:11:cf:06:
e5:4b:24:f8:a2:d1:16:e3:9f:53:62:cc:d7:d6:6f:
3c:d8:70:cb:41:d8:50:ae:5b:49:c4:5e:33:b9:0f:
03:28:0d:f1:94:82:1c:2a:ee:87:61:a0:b8:8a:ed:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:34:4F:46:6C:71:21:D0:8A:82:46:2A:E5:B2:B8:80:D6:74:C6
X509v3 Authority Key Identifier:
keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/Sj80T0ZscSHQioJGKuWyuIDWdMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a20::/48
Signature Algorithm: sha256WithRSAEncryption
01:72:d9:a3:72:57:52:3f:1b:85:c8:88:33:1a:2f:79:18:75:
b7:ab:0a:c4:48:1f:39:5d:d5:8c:97:00:5f:a5:0f:1c:b3:42:
ef:09:31:2d:1c:6f:d2:f2:87:a4:39:8c:d8:0b:0f:44:1a:d3:
dc:f0:17:05:ae:00:0a:17:81:f0:f9:61:d9:f8:82:31:63:4c:
15:a2:0d:35:c5:6f:68:1f:7c:b7:87:07:ac:73:30:a9:da:09:
91:21:44:16:4a:84:ae:e8:9e:cb:33:4b:5b:ca:d2:80:60:91:
12:f5:1f:ef:92:76:e5:3a:72:3a:12:42:1f:4e:0a:ab:c1:73:
7b:6e:d6:9d:15:ba:27:c3:60:78:28:98:5e:d4:15:f0:7e:23:
8e:95:45:1f:a8:23:c5:25:c2:a1:eb:79:32:5e:97:2f:75:6c:
eb:bc:09:87:9e:eb:1a:5f:d8:16:c0:c3:65:b2:7f:21:0f:0f:
c5:a0:a7:b6:88:d8:28:50:78:9b:c4:ff:af:ca:2d:42:57:96:
86:76:cf:36:21:fe:d6:2e:a2:fc:e7:dd:b5:3a:ee:60:28:93:
35:3f:44:f8:16:3b:78:e6:41:36:b3:d3:8c:bc:26:b7:8d:c8:
1c:e2:9c:35:12:f9:e1:2a:0b:bc:c9:20:16:94:74:87:19:a3:
15:6c:5c:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj8KwWm8Lscsf074Eq+yAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDE4Y2M2NTUwZGZkYjE4OTk5NjlhNjAyN2U0MzVhMWIw
YjEzNDEwHhcNMjUwMTAyMDU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNmMzQ0ZjQ2NmM3MTIxZDA4YTgyNDYyYWU1YjJiODgwZDY3NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+/wN3k0sPzHMNdYzyPWWVVPoNx1
hlAFEzg91pbcdx62SfS/xrxVOB8czaodrzhCpBvPcSui0PNzERqf0MAmhZed9Oya
corX3rdZNpmzgJ86jDrDH2uXAZ2HQqpaaPokcRjPZcjfWG9hsHyUKDRyEPPL0BNc
0mE3Fd2AfxqDFz0v2RXwSR5XtKAUVwbNfVcZTOmELAH+nYOT1uV19dFA6kRrn1n6
jlpgrit6JXKO+8fNWDnKgbfQ+MnE56cGz3AYHwaCpAhdI3F4oLVhL2kRzwblSyT4
otEW459TYszX1m882HDLQdhQrltJxF4zuQ8DKA3xlIIcKu6HYaC4iu15gQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEo/NE9GbHEh0IqCRirlsriA1nTGMB8GA1UdIwQY
MBaAFJhBjMZVDf2xiZlppgJ+Q1obCxNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMt
ZmQ1ZDc5ZWM1YjE3LzEvU2o4MFQwWnNjU0hRaW9KR0t1V3l1SURXZE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMtZmQ1ZDc5ZWM1YjE3
LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAog
MA0GCSqGSIb3DQEBCwUAA4IBAQABctmjcldSPxuFyIgzGi95GHW3qwrESB85XdWM
lwBfpQ8cs0LvCTEtHG/S8oekOYzYCw9EGtPc8BcFrgAKF4Hw+WHZ+IIxY0wVog01
xW9oH3y3hwesczCp2gmRIUQWSoSu6J7LM0tbytKAYJES9R/vknblOnI6EkIfTgqr
wXN7btadFbonw2B4KJhe1BXwfiOOlUUfqCPFJcKh63kyXpcvdWzrvAmHnusaX9gW
wMNlsn8hDw/FoKe2iNgoUHibxP+vyi1CV5aGds82If7WLqL85921Ou5gKJM1P0T4
Fjt45kE2s9OMvCa3jcgc4pw1EvnhKgu8ySAWlHSHGaMVbFx4
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:38 2025 by rpki-client