Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/mXVBaEfwquQfaISogdlOXYd0UuE.roa
File: mXVBaEfwquQfaISogdlOXYd0UuE.roa (raw, json)
Hash identifier: 5msJuc+8XusQW5g2WBKSU64Ld6OTTqZrKLckCYgn+k8=
Subject key identifier: 99:75:41:68:47:F0:AA:E4:1F:68:84:A8:81:D9:4E:5D:87:74:52:E1
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 018736A00DFC9CCDFF1F353B34E9D1163671
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/mXVBaEfwquQfaISogdlOXYd0UuE.roa
Signing time: Fri 31 Mar 2023 07:44:31 +0000
ROA not before: Fri 31 Mar 2023 07:44:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41281
IP address blocks: 2a0e:1c80:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:a0:0d:fc:9c:cd:ff:1f:35:3b:34:e9:d1:16:36:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Mar 31 07:44:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9975416847f0aae41f6884a881d94e5d877452e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:a7:ae:30:b6:24:0f:5c:6a:92:7b:a0:6d:
ef:62:e7:6c:c6:6d:75:c4:14:77:7a:09:f6:c8:ab:
4e:d1:6a:c7:22:aa:91:ca:ef:6c:61:eb:2e:6b:94:
a7:14:d2:67:48:33:f2:bf:e2:0e:da:2c:7e:d7:60:
be:37:31:e9:24:36:ac:38:2b:69:cb:a6:ef:a7:85:
f0:8c:e9:27:cb:60:a9:ca:d1:a1:25:b8:ea:f6:ad:
79:af:de:16:29:7e:0f:c2:2e:38:59:a3:1c:bb:a7:
08:9f:0d:f6:07:86:75:01:ca:10:11:2d:dd:37:d5:
a0:4c:e5:6b:3a:23:b3:fb:6d:ab:47:75:36:be:4c:
3c:8a:ad:19:2c:7b:bf:e1:00:ba:79:b6:50:eb:5b:
2a:20:a0:7e:72:7f:6c:0a:b2:13:eb:3f:74:69:0b:
0e:43:da:ef:8a:cd:6f:a0:98:af:49:7e:e7:7c:f6:
43:c8:c8:77:23:0f:a8:80:a7:37:92:95:48:c8:e7:
e5:20:c6:0f:8f:31:76:a7:b5:a5:81:18:39:22:f1:
d3:65:7c:4b:c1:0d:3f:90:ff:29:f9:0b:a7:5a:0b:
5b:d5:bf:01:90:93:3c:82:97:aa:ad:81:41:6b:b2:
84:cb:f7:c6:32:d8:bf:15:f0:87:d4:9d:49:ab:5b:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:41:68:47:F0:AA:E4:1F:68:84:A8:81:D9:4E:5D:87:74:52:E1
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/mXVBaEfwquQfaISogdlOXYd0UuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:9::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f5:ef:1e:62:b8:f9:cd:0c:89:75:00:54:05:50:a4:a6:61:
e9:c6:08:fc:d4:04:01:7b:c1:fe:32:e1:ee:bd:44:63:e2:f8:
93:3e:30:d8:32:6c:97:8d:a7:84:00:61:6c:e1:b6:9b:1f:2b:
b2:01:3f:83:80:79:e1:e3:e3:4f:90:46:a9:06:ec:5e:e2:a4:
d6:db:34:94:f1:24:16:aa:14:32:2a:1d:81:a8:0c:6a:c3:0f:
73:07:da:98:b1:46:21:12:13:ad:d0:56:30:64:8f:31:c7:2a:
bb:29:2f:e8:8f:b5:f0:ce:df:3a:16:4e:51:15:bd:33:d5:cd:
79:75:0b:7b:dc:dc:14:eb:d1:3e:3e:55:b3:07:67:99:27:36:
22:e5:68:6b:8e:76:a8:2b:c1:1a:dc:14:f8:6f:8c:9d:52:22:
d5:db:48:46:ed:39:2e:a8:d8:6a:f7:ee:bc:11:df:03:ea:a2:
8a:4f:9e:76:e8:63:d4:4e:f1:8a:91:5a:5b:87:50:f3:1a:89:
f7:2f:21:cb:20:6c:be:a4:28:cc:6a:0e:7b:28:3e:95:f8:cd:
86:f5:92:44:1b:d6:72:6f:d7:96:2b:79:65:89:36:17:a6:89:
36:f3:8d:a5:49:91:5f:dc:1a:aa:1b:17:43:b1:8e:08:af:8b:
ac:45:b8:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYc2oA38nM3/HzU7NOnRFjZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDcwM2I2MGFjNjg3MzI1NmU2YjQ4MjZiYTI3YTlkZWVj
YTJmMGEwHhcNMjMwMzMxMDc0NDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTc1NDE2ODQ3ZjBhYWU0MWY2ODg0YTg4MWQ5NGU1ZDg3NzQ1MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWnrjC2JA9capJ7oG3vYudsxm11
xBR3egn2yKtO0WrHIqqRyu9sYesua5SnFNJnSDPyv+IO2ix+12C+NzHpJDasOCtp
y6bvp4XwjOkny2CpytGhJbjq9q15r94WKX4Pwi44WaMcu6cInw32B4Z1AcoQES3d
N9WgTOVrOiOz+22rR3U2vkw8iq0ZLHu/4QC6ebZQ61sqIKB+cn9sCrIT6z90aQsO
Q9rvis1voJivSX7nfPZDyMh3Iw+ogKc3kpVIyOflIMYPjzF2p7WlgRg5IvHTZXxL
wQ0/kP8p+QunWgtb1b8BkJM8gpeqrYFBa7KEy/fGMti/FfCH1J1Jq1vL/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJl1QWhH8KrkH2iEqIHZTl2HdFLhMB8GA1UdIwQY
MBaAFN/XA7YKxocyVua0gmuiep3uyi8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDct
NTNmMDc4OGUxYTFiLzEvbVhWQmFFZndxdVFmYUlTb2dkbE9YWWQwVXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDctNTNmMDc4OGUxYTFi
LzEvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cgAAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCd9e8eYrj5zQyJdQBUBVCkpmHpxgj81AQBe8H+
MuHuvURj4viTPjDYMmyXjaeEAGFs4babHyuyAT+DgHnh4+NPkEapBuxe4qTW2zSU
8SQWqhQyKh2BqAxqww9zB9qYsUYhEhOt0FYwZI8xxyq7KS/oj7Xwzt86Fk5RFb0z
1c15dQt73NwU69E+PlWzB2eZJzYi5WhrjnaoK8Ea3BT4b4ydUiLV20hG7TkuqNhq
9+68Ed8D6qKKT5526GPUTvGKkVpbh1DzGon3LyHLIGy+pCjMag57KD6V+M2G9ZJE
G9Zyb9eWK3lliTYXpok2842lSZFf3BqqGxdDsY4Ir4usRbhS
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:46 2025 by rpki-client