Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/RwWHoWi8bvEcrn91U7_cQg2FozE.roa
File: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (raw, json)
Hash identifier: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=
Subject key identifier: 47:05:87:A1:68:BC:6E:F1:1C:AE:7F:75:53:BF:DC:42:0D:85:A3:31
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 0194252185C26C26430AF53FE0F3BE9BD46E
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/RwWHoWi8bvEcrn91U7_cQg2FozE.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211922
IP address blocks: 2a10:5fc7::/48 maxlen: 48
2a10:5fc7:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:85:c2:6c:26:43:0a:f5:3f:e0:f3:be:9b:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=470587a168bc6ef11cae7f7553bfdc420d85a331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:95:53:16:7e:c7:1a:00:eb:43:f1:47:ee:
8d:28:2e:e2:03:43:4a:99:9e:39:f3:ca:52:66:b2:
51:6e:c2:76:24:82:3a:8e:6d:71:92:93:40:85:48:
3e:ab:49:15:34:d9:a2:0d:f3:d5:f8:3a:f2:d3:98:
08:4f:1e:0b:21:c8:69:ec:33:a7:0d:94:04:3d:bd:
ab:6a:5e:8a:e8:af:2b:4a:5a:e5:0d:c6:8d:55:41:
b0:fb:a2:ca:77:91:00:b7:04:09:ff:58:1a:6b:75:
aa:64:3a:68:13:7c:81:9a:ea:a5:6e:28:98:26:10:
6e:61:83:38:c9:e7:57:55:b5:98:8e:ab:0d:01:bf:
f6:90:1b:cc:e5:c9:7f:fc:0e:90:41:bc:6d:b0:eb:
03:fa:9c:0d:66:1f:8e:10:07:08:63:25:a0:8b:4d:
11:4b:8a:11:9d:0c:5e:bd:4b:8d:df:a4:a6:ac:5d:
02:37:f2:e5:c9:10:35:22:83:74:26:40:fd:f7:e7:
de:b2:dd:90:b6:3d:9f:aa:82:43:d7:67:e3:b6:e1:
5a:e4:c1:34:24:42:f6:64:ad:52:b9:75:b8:0a:b0:
88:6d:7b:51:f5:6f:ce:00:7e:20:2d:30:fb:5b:02:
23:32:a0:c6:a8:6f:d5:d9:53:69:17:36:74:4b:cd:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:87:A1:68:BC:6E:F1:1C:AE:7F:75:53:BF:DC:42:0D:85:A3:31
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/RwWHoWi8bvEcrn91U7_cQg2FozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:5fc7::/47
Signature Algorithm: sha256WithRSAEncryption
db:c6:b4:28:7a:ab:1a:58:70:1a:80:0c:90:54:64:23:e8:36:
60:f9:9f:1a:c7:f7:23:0a:2c:3d:20:d4:bf:71:99:f2:e1:92:
52:d1:64:35:91:d5:39:a8:0c:62:bb:0d:73:76:e7:c8:1a:8a:
87:35:ea:e0:1b:f4:a0:e9:cd:88:23:1a:64:ac:f5:21:5f:06:
f4:87:65:d4:f1:93:e8:f9:34:23:02:be:54:f6:3a:63:0f:2d:
53:06:3c:d8:3a:4d:f7:17:e7:ab:2c:b2:c6:ca:fe:2f:5b:42:
8a:b9:12:9f:a8:32:bd:c2:d9:d5:ac:4f:5d:01:c8:2f:50:cd:
a8:8e:eb:25:7d:e1:a0:e4:bd:21:ec:98:e7:c8:4e:e9:de:e0:
fc:99:62:da:1c:55:4c:63:13:60:03:cc:e7:41:c6:d5:f3:9e:
6c:e7:98:a2:cc:4b:e0:22:c6:92:98:1c:31:d5:bf:cb:7b:33:
10:c6:4e:c0:f6:e8:36:de:ee:44:ae:f1:ae:d8:48:44:92:d8:
5a:06:9a:b1:f7:d7:d1:95:b3:8c:23:81:ab:97:d2:5d:64:91:
0e:4c:d5:d0:8c:ff:0f:0b:5b:0f:dd:42:a7:a7:fa:13:6e:93:
00:25:bf:82:e5:7a:9b:e2:b7:2b:5f:94:f5:07:4f:df:60:66:
b6:6b:e8:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIYXCbCZDCvU/4PO+m9RuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTM5M2JkZmY2MDE0NjJhNTU1OTFkMjZhY2IzZDhjOTIz
ZmYyNmQwHhcNMjUwMTAyMDM0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzA1ODdhMTY4YmM2ZWYxMWNhZTdmNzU1M2JmZGM0MjBkODVhMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla2VUxZ+xxoA60PxR+6NKC7iA0NK
mZ4588pSZrJRbsJ2JII6jm1xkpNAhUg+q0kVNNmiDfPV+Dry05gITx4LIchp7DOn
DZQEPb2ral6K6K8rSlrlDcaNVUGw+6LKd5EAtwQJ/1gaa3WqZDpoE3yBmuqlbiiY
JhBuYYM4yedXVbWYjqsNAb/2kBvM5cl//A6QQbxtsOsD+pwNZh+OEAcIYyWgi00R
S4oRnQxevUuN36SmrF0CN/LlyRA1IoN0JkD99+fest2Qtj2fqoJD12fjtuFa5ME0
JEL2ZK1SuXW4CrCIbXtR9W/OAH4gLTD7WwIjMqDGqG/V2VNpFzZ0S81cqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEcFh6FovG7xHK5/dVO/3EINhaMxMB8GA1UdIwQY
MBaAFOgTk73/YBRipVWR0mrLPYySP/JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDkt
M2MxNDYyMWVjZmM1LzEvUndXSG9XaThidkVjcm45MVU3X2NRZzJGb3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDktM2MxNDYyMWVjZmM1
LzEvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhBfxwAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDbxrQoeqsaWHAagAyQVGQj6DZg+Z8ax/cjCiw9
INS/cZny4ZJS0WQ1kdU5qAxiuw1zdufIGoqHNergG/Sg6c2IIxpkrPUhXwb0h2XU
8ZPo+TQjAr5U9jpjDy1TBjzYOk33F+erLLLGyv4vW0KKuRKfqDK9wtnVrE9dAcgv
UM2ojuslfeGg5L0h7JjnyE7p3uD8mWLaHFVMYxNgA8znQcbV855s55iizEvgIsaS
mBwx1b/LezMQxk7A9ug23u5ErvGu2EhEkthaBpqx99fRlbOMI4Grl9JdZJEOTNXQ
jP8PC1sP3UKnp/oTbpMAJb+C5Xqb4rcrX5T1B0/fYGa2a+iQ
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:27 2025 by rpki-client