Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/spoNsBquI5wjgn7gu8viZ3BO3l4.roa
File: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (raw, json)
Hash identifier: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=
Subject key identifier: B2:9A:0D:B0:1A:AE:23:9C:23:82:7E:E0:BB:CB:E2:67:70:4E:DE:5E
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 01941FFA2A667E3C6D3DC626BD791F66A962
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/spoNsBquI5wjgn7gu8viZ3BO3l4.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197376
IP address blocks: 2a05:5fc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:66:7e:3c:6d:3d:c6:26:bd:79:1f:66:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29a0db01aae239c23827ee0bbcbe267704ede5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:18:21:4c:5c:75:ac:22:41:33:9d:e7:ed:
f3:d9:ee:39:b1:60:bc:04:a5:85:eb:12:16:6c:0d:
40:0d:f6:0d:2f:a5:dc:bb:85:d5:a7:43:16:5e:a7:
9f:dd:45:a7:d0:5f:84:a5:d3:79:51:f2:3c:2e:8c:
26:5e:a8:7e:ec:f1:25:86:91:36:b6:6e:4e:95:0f:
f5:5b:28:ab:5a:42:7d:6d:1f:69:ee:23:ea:b3:cc:
6f:41:01:19:1e:d6:a7:42:ff:b4:98:74:99:a0:d6:
05:86:d6:f1:18:9f:22:b3:e8:e9:06:bb:e3:8d:23:
9f:ad:b5:0c:cc:68:8a:f8:af:5d:86:00:9c:5e:54:
d1:9d:d6:f3:1f:45:88:f6:08:e1:b9:39:80:f3:f0:
8a:30:39:b7:94:fb:f9:a7:f6:eb:8e:3e:13:7d:50:
14:8f:6b:5e:23:38:08:d6:a6:9b:72:fe:8c:ad:78:
cf:98:5a:e7:3e:5b:c9:95:83:16:8e:03:ed:21:8f:
22:4a:5f:21:66:18:63:5d:34:94:8f:6b:f8:ed:2c:
53:28:5e:74:1f:82:c6:01:db:1a:40:a9:bd:4d:fd:
bf:3e:17:6e:21:e2:20:b6:0e:19:c3:1b:c2:60:64:
93:c9:c5:d3:7f:3a:a7:b4:07:27:a7:7c:70:08:c3:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:0D:B0:1A:AE:23:9C:23:82:7E:E0:BB:CB:E2:67:70:4E:DE:5E
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/spoNsBquI5wjgn7gu8viZ3BO3l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:5fc1::/32
Signature Algorithm: sha256WithRSAEncryption
81:b9:ac:56:c8:2f:8c:ed:d6:ad:c3:54:61:39:b4:90:89:65:
85:3b:6e:b9:e9:87:3f:9b:9d:27:a1:49:1a:58:22:71:2f:0a:
f3:aa:a9:86:db:80:c2:9c:0a:c8:eb:ee:61:7a:7f:3c:6d:36:
be:98:4a:30:41:d8:21:65:41:bc:1e:09:56:1c:52:4e:71:05:
e1:17:ff:e2:96:1f:c5:95:b4:5f:40:05:6a:87:37:00:d6:d9:
32:ea:58:e7:94:9d:46:6d:13:a9:19:27:7d:c1:66:c2:0e:4b:
a7:9e:8d:e5:e1:62:d5:15:6c:90:07:21:7b:a2:0b:e8:fa:f2:
d3:29:9d:7a:03:3d:de:be:6b:a8:77:32:de:23:ce:0c:34:c0:
bd:3b:6f:87:73:6d:3b:79:46:9f:ec:9f:ab:d9:e3:78:1d:2d:
22:cb:68:b7:03:b0:38:5a:57:97:82:6b:a2:b7:01:f2:d7:d5:
da:b8:36:a4:b1:4e:8c:e8:0d:b1:8d:78:6f:34:37:0a:ce:bf:
4d:5b:9a:7c:f3:1f:8a:05:23:3d:f8:c3:e7:df:7e:ff:58:b4:
96:af:c8:fb:45:48:d8:ea:db:90:88:62:8b:36:9f:9e:4a:b6:
72:0b:e8:d1:7b:25:a1:33:79:2e:d5:9e:ee:5d:6e:6a:f6:65:
de:be:df:de
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQf+ipmfjxtPcYmvXkfZqliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3
MmFiMDAwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjlhMGRiMDFhYWUyMzljMjM4MjdlZTBiYmNiZTI2NzcwNGVkZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsScYIUxcdawiQTOd5+3z2e45sWC8
BKWF6xIWbA1ADfYNL6Xcu4XVp0MWXqef3UWn0F+EpdN5UfI8LowmXqh+7PElhpE2
tm5OlQ/1WyirWkJ9bR9p7iPqs8xvQQEZHtanQv+0mHSZoNYFhtbxGJ8is+jpBrvj
jSOfrbUMzGiK+K9dhgCcXlTRndbzH0WI9gjhuTmA8/CKMDm3lPv5p/brjj4TfVAU
j2teIzgI1qabcv6MrXjPmFrnPlvJlYMWjgPtIY8iSl8hZhhjXTSUj2v47SxTKF50
H4LGAdsaQKm9Tf2/PhduIeIgtg4ZwxvCYGSTycXTfzqntAcnp3xwCMMQswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLKaDbAariOcI4J+4LvL4mdwTt5eMB8GA1UdIwQY
MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt
MjBkZTY5NzI2MDliLzEvc3BvTnNCcXVJNXdqZ243Z3U4dmlaM0JPM2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli
LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgVfwTAN
BgkqhkiG9w0BAQsFAAOCAQEAgbmsVsgvjO3WrcNUYTm0kIllhTtuuemHP5udJ6FJ
GlgicS8K86qphtuAwpwKyOvuYXp/PG02vphKMEHYIWVBvB4JVhxSTnEF4Rf/4pYf
xZW0X0AFaoc3ANbZMupY55SdRm0TqRknfcFmwg5Lp56N5eFi1RVskAche6IL6Pry
0ymdegM93r5rqHcy3iPODDTAvTtvh3NtO3lGn+yfq9njeB0tIstotwOwOFpXl4Jr
orcB8tfV2rg2pLFOjOgNsY14bzQ3Cs6/TVuafPMfigUjPfjD599+/1i0lq/I+0VI
2OrbkIhiizafnkq2cgvo0XsloTN5LtWe7l1uavZl3r7f3g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:50 2025 by rpki-client