Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa
File: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (raw, json)
Hash identifier: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=
Subject key identifier: D2:7D:E2:41:8A:45:E8:BB:37:F9:DB:EA:D3:29:3E:7F:AC:36:92:D1
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 01942067C57148471C36331B14C8345B0C3F
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203367
IP address blocks: 185.137.84.0/22 maxlen: 22
2a07:2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c5:71:48:47:1c:36:33:1b:14:c8:34:5b:0c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27de2418a45e8bb37f9dbead3293e7fac3692d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:6e:3e:1f:73:a1:0f:83:b8:f2:01:b9:e4:
63:22:46:d9:c4:57:a5:98:df:54:3c:3e:1e:4c:5d:
22:fc:81:12:70:7e:82:06:30:cb:a6:a4:92:68:88:
2e:58:79:08:d1:b9:21:2d:f1:0c:2f:f7:fa:75:06:
67:c4:ef:40:17:44:41:da:8b:ae:ad:46:97:c0:39:
6f:43:71:59:ae:42:b1:31:d8:34:bf:9e:9a:53:1b:
bc:00:3f:20:fb:9f:9a:f0:1f:a9:d2:58:2c:be:cb:
dc:0d:94:20:c0:21:cf:34:5d:1e:01:60:0b:1d:7e:
63:eb:cf:99:ac:05:60:44:76:9b:7c:13:d3:b3:12:
68:fb:8d:d0:64:4c:35:0c:e8:bf:29:39:3f:01:0f:
f1:c8:13:50:51:87:7b:92:eb:b7:ac:cb:0a:cf:f9:
70:73:08:9c:24:c8:4a:58:39:c4:26:b4:1c:18:a2:
69:4d:71:62:fc:12:34:c5:5b:7f:57:41:51:c4:88:
53:f3:df:16:01:69:55:5f:c5:47:8a:9e:fb:b5:c2:
50:68:87:a3:11:9a:ba:85:40:f9:0d:04:49:ba:be:
b8:79:75:b5:65:91:2b:29:c3:96:94:2f:21:c8:c5:
7e:cb:5f:c6:13:e9:96:6b:88:d6:78:f3:79:29:f1:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:E2:41:8A:45:E8:BB:37:F9:DB:EA:D3:29:3E:7F:AC:36:92:D1
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.84.0/22
IPv6:
2a07:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:a7:a1:80:ca:f0:fa:51:44:ed:27:d9:81:35:51:3e:c6:d6:
53:7a:61:66:8b:52:6e:8f:c1:13:cf:ba:d3:93:c4:30:29:5f:
00:3c:58:44:54:4f:ce:d9:29:cc:c9:92:78:c4:17:da:6a:a5:
da:06:17:f7:e9:e5:3f:3d:8d:1f:d2:6c:9d:7c:52:7d:cf:bd:
29:14:9c:a7:1d:3e:35:bc:b9:01:97:38:ac:d1:25:5d:14:a5:
e8:44:70:0d:4c:af:bd:05:8a:d7:4b:f2:24:95:af:1a:be:43:
59:84:a1:1c:ae:b2:a1:ff:2f:7e:e1:be:53:f4:a4:5c:34:76:
8c:e6:d0:a1:59:7a:12:03:32:7c:e2:ed:0b:c5:bf:f7:c1:19:
1a:19:d6:f2:66:d3:77:36:1c:22:1b:a0:89:df:b5:1a:94:97:
e1:be:51:06:f9:7d:11:6f:93:87:24:46:9c:68:ec:12:6e:da:
7b:8b:f7:85:db:fa:d1:19:b5:fe:bf:88:f9:5c:b9:70:94:41:
b0:0b:7b:f3:36:c8:63:9b:e3:10:17:bf:f6:21:c5:37:0a:dd:
b1:d0:2c:b7:c0:9c:0e:6d:fc:a5:cd:a8:1c:68:ab:68:59:2f:
86:96:e1:ee:ad:57:e2:20:11:80:b7:70:02:f3:d4:36:3b:ab:
b3:f0:f0:d5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgZ8VxSEccNjMbFMg0Www/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNGFiZThhOGZhMzc4OTUxYWZhNjg1OTczNWJiZTZiMTgx
NDhiNTcwHhcNMjUwMTAxMDU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjdkZTI0MThhNDVlOGJiMzdmOWRiZWFkMzI5M2U3ZmFjMzY5MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dluPh9zoQ+DuPIBueRjIkbZxFel
mN9UPD4eTF0i/IEScH6CBjDLpqSSaIguWHkI0bkhLfEML/f6dQZnxO9AF0RB2ouu
rUaXwDlvQ3FZrkKxMdg0v56aUxu8AD8g+5+a8B+p0lgsvsvcDZQgwCHPNF0eAWAL
HX5j68+ZrAVgRHabfBPTsxJo+43QZEw1DOi/KTk/AQ/xyBNQUYd7kuu3rMsKz/lw
cwicJMhKWDnEJrQcGKJpTXFi/BI0xVt/V0FRxIhT898WAWlVX8VHip77tcJQaIej
EZq6hUD5DQRJur64eXW1ZZErKcOWlC8hyMV+y1/GE+mWa4jWePN5KfH6BQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNJ94kGKRei7N/nb6tMpPn+sNpLRMB8GA1UdIwQY
MBaAFGpKvoqPo3iVGvpoWXNbvmsYFItXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTIt
ODdlYjQ0OGU5MmVkLzEvMG4zaVFZcEY2THMzLWR2cTB5ay1mNncya3RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTItODdlYjQ0OGU5MmVk
LzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYlUMA0E
AgACMAcDBQMqBwLAMA0GCSqGSIb3DQEBCwUAA4IBAQAUp6GAyvD6UUTtJ9mBNVE+
xtZTemFmi1Juj8ETz7rTk8QwKV8APFhEVE/O2SnMyZJ4xBfaaqXaBhf36eU/PY0f
0mydfFJ9z70pFJynHT41vLkBlzis0SVdFKXoRHANTK+9BYrXS/Ikla8avkNZhKEc
rrKh/y9+4b5T9KRcNHaM5tChWXoSAzJ84u0Lxb/3wRkaGdbyZtN3NhwiG6CJ37Ua
lJfhvlEG+X0Rb5OHJEacaOwSbtp7i/eF2/rRGbX+v4j5XLlwlEGwC3vzNshjm+MQ
F7/2IcU3Ct2x0Cy3wJwObfylzagcaKtoWS+GluHurVfiIBGAt3AC89Q2O6uz8PDV
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:21 2025 by rpki-client