Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/J-BHhIe6E-Kfk5Y9TAGRhqmxW2Y.roa
File: J-BHhIe6E-Kfk5Y9TAGRhqmxW2Y.roa (raw, json)
Hash identifier: FWKY7yH4Bb25bTL1MBPDPUlVoRa8PIBfLIRQ10hcQt4=
Subject key identifier: 27:E0:47:84:87:BA:13:E2:9F:93:96:3D:4C:01:91:86:A9:B1:5B:66
Certificate issuer: /CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Certificate serial: BABB9A
Authority key identifier: 94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/J-BHhIe6E-Kfk5Y9TAGRhqmxW2Y.roa
Signing time: Fri 14 Jan 2022 18:05:27 +0000
ROA not before: Fri 14 Jan 2022 18:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a11:de40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12237722 (0xbabb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Validity
Not Before: Jan 14 18:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27e0478487ba13e29f93963d4c019186a9b15b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:f0:4f:3c:00:a1:3e:94:ec:c8:9d:8c:ac:
d4:16:9b:61:ad:d2:65:f5:bf:37:d0:1b:39:27:3e:
70:b2:37:d6:47:c0:2a:bc:97:08:fa:b6:36:80:9d:
72:d4:d7:1b:22:cc:cc:62:ed:5e:e8:94:11:70:02:
36:a0:cd:df:65:02:5b:46:ad:8a:03:c3:5e:a7:fb:
f9:7b:d0:3f:7e:d4:fb:6b:81:0c:bb:f0:b1:3d:c6:
b1:bb:d3:b8:41:da:0f:44:41:d3:77:3d:b3:87:5b:
ff:e1:14:71:ff:9c:d8:b5:ed:f9:c2:1a:28:3e:63:
7d:f6:06:a5:67:a0:95:cb:29:e6:ac:6a:99:5a:bb:
f4:49:59:e4:8b:fa:55:f1:7d:fe:51:82:d6:18:d1:
cb:94:84:48:43:ab:25:cf:00:eb:3a:f7:a7:5b:89:
78:3e:63:34:a6:0c:7e:26:bd:92:69:cb:f2:3b:6f:
59:42:6d:96:9b:30:5c:87:5b:f8:17:cc:9b:72:17:
04:0f:23:a2:d7:17:f4:cb:f1:58:3f:0d:03:24:99:
24:3b:ed:5c:47:d2:34:87:3a:eb:96:71:2e:79:7d:
47:5c:92:06:b8:4f:0b:f7:fe:52:eb:6c:d9:e8:fc:
47:2e:78:98:f5:f3:d3:8f:81:ee:4e:38:ae:70:13:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:47:84:87:BA:13:E2:9F:93:96:3D:4C:01:91:86:A9:B1:5B:66
X509v3 Authority Key Identifier:
keyid:94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/J-BHhIe6E-Kfk5Y9TAGRhqmxW2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:de40::/29
Signature Algorithm: sha256WithRSAEncryption
91:9a:4e:4e:2c:cb:0a:92:c4:9a:84:36:25:96:69:04:62:35:
99:ac:3e:6b:55:4a:2f:9d:ec:4a:3b:06:16:2a:d5:33:d0:be:
d4:9a:32:8f:a2:5d:f0:b4:20:80:29:17:91:8d:8c:8c:e2:82:
6b:7e:94:02:42:1a:4d:af:92:03:03:86:e0:be:f7:49:e0:3f:
f1:d9:0d:cb:69:22:e9:f2:c5:92:8b:f5:e1:8a:29:4d:48:c9:
da:63:79:73:ef:92:a7:bc:f5:a9:86:9e:4f:fe:da:99:89:6a:
97:f6:02:66:e4:57:ed:e5:9a:69:ad:df:a7:15:02:f6:8f:ae:
4f:bb:b9:02:3c:77:86:cc:6a:b8:ef:fd:f2:26:1c:2e:e5:f4:
f8:0d:94:2a:9b:bc:4a:fb:9c:5c:06:d1:ef:82:7e:7a:8d:fe:
42:2e:a3:6b:d7:60:1d:33:c8:11:54:09:47:fa:8f:94:5c:a1:
5b:70:e0:f3:3c:df:de:43:c4:bf:94:e7:0a:bf:3e:50:51:b7:
32:5f:77:4a:af:80:cc:f3:c1:2f:8f:e6:e9:5d:70:6a:03:6f:
b3:b2:8f:3d:08:58:eb:e7:f5:c5:0f:46:80:df:54:34:ba:d9:
92:32:68:f2:f1:8e:fa:ed:9c:16:3d:e2:d1:09:c9:37:a9:2f:
b4:d9:a3:b8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEALq7mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NGFlN2MzODI3NzdiYzg1ZTcyNmJiNWE5M2M3NjkzOGJmMjhjOTYxMB4XDTIyMDEx
NDE4MDUyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdlMDQ3ODQ4N2Jh
MTNlMjlmOTM5NjNkNGMwMTkxODZhOWIxNWI2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALog8E88AKE+lOzInYys1BabYa3SZfW/N9AbOSc+cLI31kfA
KryXCPq2NoCdctTXGyLMzGLtXuiUEXACNqDN32UCW0atigPDXqf7+XvQP37U+2uB
DLvwsT3GsbvTuEHaD0RB03c9s4db/+EUcf+c2LXt+cIaKD5jffYGpWeglcsp5qxq
mVq79ElZ5Iv6VfF9/lGC1hjRy5SESEOrJc8A6zr3p1uJeD5jNKYMfia9kmnL8jtv
WUJtlpswXIdb+BfMm3IXBA8jotcX9MvxWD8NAySZJDvtXEfSNIc665ZxLnl9R1yS
BrhPC/f+Uuts2ej8Ry54mPXz04+B7k44rnATiOECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQn4EeEh7oT4p+Tlj1MAZGGqbFbZjAfBgNVHSMEGDAWgBSUrnw4J3e8hecm
u1qTx2k4vyjJYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xLNThPQ2QzdklYbkpydGFrOGRwT0w4b3lXRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvMWJkYTE1LWU4ODItNDQ2Ny1iY2Q5LTJkOGViY2FiZWJhOC8x
L0otQkhoSWU2RS1LZms1WTlUQUdSaHFteFcyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
MWJkYTE1LWU4ODItNDQ2Ny1iY2Q5LTJkOGViY2FiZWJhOC8xL2xLNThPQ2QzdklY
bkpydGFrOGRwT0w4b3lXRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoR3kAwDQYJKoZIhvcNAQELBQAD
ggEBAJGaTk4sywqSxJqENiWWaQRiNZmsPmtVSi+d7Eo7BhYq1TPQvtSaMo+iXfC0
IIApF5GNjIzigmt+lAJCGk2vkgMDhuC+90ngP/HZDctpIunyxZKL9eGKKU1Iydpj
eXPvkqe89amGnk/+2pmJapf2AmbkV+3lmmmt36cVAvaPrk+7uQI8d4bMarjv/fIm
HC7l9PgNlCqbvEr7nFwG0e+CfnqN/kIuo2vXYB0zyBFUCUf6j5RcoVtw4PM8395D
xL+U5wq/PlBRtzJfd0qvgMzzwS+P5uldcGoDb7Oyjz0IWOvn9cUPRoDfVDS62ZIy
aPLxjvrtnBY94tEJyTepL7TZo7g=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:36 2025 by rpki-client