Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa
File: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (raw, json)
Hash identifier: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=
Subject key identifier: 3A:EF:43:11:85:A8:DE:CB:B8:1E:9C:FB:99:64:40:51:8D:3F:C4:72
Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial: 019420686AD4998383D4423CF107F10A1F2E
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 2001:678:69c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6a:d4:99:83:83:d4:42:3c:f1:07:f1:0a:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aef431185a8decbb81e9cfb996440518d3fc472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:f0:62:f5:e4:24:6d:2d:71:f2:22:0e:41:
40:af:71:7d:ab:01:1b:fa:32:0c:12:9e:a1:68:41:
d7:ac:ad:be:82:d6:2e:61:16:bd:0c:1e:97:c4:29:
7f:eb:54:b1:6b:5a:22:09:bd:54:ba:8f:76:88:88:
df:09:7e:15:00:6e:46:f1:e9:39:fe:dd:9c:44:24:
5c:9d:f3:4f:25:18:a8:88:21:66:b4:e4:b9:0f:ab:
04:7b:31:8c:88:c2:ec:e8:1a:3c:de:ae:cf:ec:cb:
e4:e4:01:c3:96:91:d3:db:d9:8c:78:84:5a:88:00:
31:72:44:3b:db:da:00:22:42:89:4e:0d:1e:f6:80:
f8:cc:cf:13:08:e0:73:ea:dd:60:62:4f:ef:1a:72:
e2:a1:16:e4:54:af:de:5c:7e:07:e2:a0:ad:46:12:
db:34:a2:8f:f7:7a:0d:27:b1:96:86:7f:5a:f9:26:
62:b0:84:f4:d1:e7:4b:48:2b:cd:86:4d:bd:8b:d8:
bf:f2:b0:6c:4f:d7:06:d2:cf:5d:e2:00:7e:02:5b:
90:66:85:76:27:b3:60:67:12:df:6e:a7:8f:1a:d8:
3e:1a:f7:da:3a:10:e7:26:ef:f0:01:c5:3f:36:42:
f0:b4:63:4a:5b:e0:c9:d1:2f:c1:ab:80:64:9b:98:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:43:11:85:A8:DE:CB:B8:1E:9C:FB:99:64:40:51:8D:3F:C4:72
X509v3 Authority Key Identifier:
keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:69c::/48
Signature Algorithm: sha256WithRSAEncryption
74:a0:f0:a4:b4:0d:ff:fa:1f:7d:a9:d7:7a:45:a7:c5:56:12:
c7:05:0e:bc:ea:87:23:2d:e4:7c:da:8e:ca:a6:01:03:cf:85:
f4:16:4e:05:0a:70:9e:f5:5e:aa:34:4c:2f:d3:18:7a:ab:82:
d9:46:96:3d:1d:a9:f0:07:84:36:12:52:55:af:4e:57:82:d5:
e7:ef:b8:83:c7:bc:46:16:b9:5a:6b:ba:74:10:a1:4e:31:2d:
c6:77:69:19:d5:87:6c:55:9b:90:41:ac:90:34:8f:a2:71:cb:
a5:a3:c9:70:57:1f:a5:5f:ed:86:f8:35:0e:55:86:05:28:6e:
1f:d3:a4:23:16:b4:11:20:79:bb:b2:e1:53:a1:41:e2:59:0e:
ed:f1:c0:1c:ea:0d:6a:56:83:00:6f:ee:e0:9a:61:78:a8:7d:
94:ed:c2:cb:83:29:ad:04:79:a1:fa:69:a4:48:b2:5f:37:06:
d2:fb:c0:80:d7:06:58:ce:dc:52:97:a8:2f:16:bd:04:24:49:
b4:30:8c:dc:40:aa:dc:ae:fd:ff:c2:7e:02:8f:4f:5a:cb:e3:
d3:8b:f9:02:81:7d:01:56:7c:72:f8:5e:7e:76:e5:ba:8f:cd:
09:54:fb:ff:52:92:62:f4:19:b8:d4:45:f8:d0:3f:c1:9c:e3:
47:d0:8d:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgaGrUmYOD1EI88QfxCh8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl
MmQxZWYwHhcNMjUwMTAxMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWVmNDMxMTg1YThkZWNiYjgxZTljZmI5OTY0NDA1MThkM2ZjNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24LwYvXkJG0tcfIiDkFAr3F9qwEb
+jIMEp6haEHXrK2+gtYuYRa9DB6XxCl/61Sxa1oiCb1Uuo92iIjfCX4VAG5G8ek5
/t2cRCRcnfNPJRioiCFmtOS5D6sEezGMiMLs6Bo83q7P7Mvk5AHDlpHT29mMeIRa
iAAxckQ729oAIkKJTg0e9oD4zM8TCOBz6t1gYk/vGnLioRbkVK/eXH4H4qCtRhLb
NKKP93oNJ7GWhn9a+SZisIT00edLSCvNhk29i9i/8rBsT9cG0s9d4gB+AluQZoV2
J7NgZxLfbqePGtg+GvfaOhDnJu/wAcU/NkLwtGNKW+DJ0S/Bq4Bkm5iP0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDrvQxGFqN7LuB6c+5lkQFGNP8RyMB8GA1UdIwQY
MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt
NTc2MzM3ZTUwZGM0LzEvT3U5REVZV28zc3U0SHB6N21XUkFVWTBfeEhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0
LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAac
MA0GCSqGSIb3DQEBCwUAA4IBAQB0oPCktA3/+h99qdd6RafFVhLHBQ686ocjLeR8
2o7KpgEDz4X0Fk4FCnCe9V6qNEwv0xh6q4LZRpY9HanwB4Q2ElJVr05XgtXn77iD
x7xGFrlaa7p0EKFOMS3Gd2kZ1YdsVZuQQayQNI+icculo8lwVx+lX+2G+DUOVYYF
KG4f06QjFrQRIHm7suFToUHiWQ7t8cAc6g1qVoMAb+7gmmF4qH2U7cLLgymtBHmh
+mmkSLJfNwbS+8CA1wZYztxSl6gvFr0EJEm0MIzcQKrcrv3/wn4Cj09ay+PTi/kC
gX0BVnxy+F5+duW6j80JVPv/UpJi9Bm41EX40D/BnONH0I2B
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:13:58 2025 by rpki-client