Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Rxo9pDtt6zt7rkKAYui8cbObPrY.roa
File: Rxo9pDtt6zt7rkKAYui8cbObPrY.roa (raw, json)
Hash identifier: bzsoD5nC/Bv/TzwFJ8nDFXxOv5XrIKH5PBrfXWzU7qA=
Subject key identifier: 47:1A:3D:A4:3B:6D:EB:3B:7B:AE:42:80:62:E8:BC:71:B3:9B:3E:B6
Certificate issuer: /CN=97206b5201df70eb916669b455849647797ab679
Certificate serial: 019421B257F2BF479557B00070DB1C42C8A7
Authority key identifier: 97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Rxo9pDtt6zt7rkKAYui8cbObPrY.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215492
IP address blocks: 2001:67c:df8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:57:f2:bf:47:95:57:b0:00:70:db:1c:42:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97206b5201df70eb916669b455849647797ab679
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471a3da43b6deb3b7bae428062e8bc71b39b3eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:78:b5:62:74:04:b5:c0:59:2b:57:60:36:
ef:18:76:9c:96:30:5b:24:fb:70:e5:ea:32:84:06:
0f:01:96:91:1d:2d:d2:cb:89:db:33:00:21:b9:d3:
b2:45:4f:91:6d:78:d7:88:57:f1:d0:35:30:f2:1e:
5d:5b:9b:cf:26:6e:3b:15:e5:f0:4f:a3:f9:b0:58:
c7:93:2c:1a:73:d4:7f:67:db:57:d1:bc:4a:16:5c:
d0:be:a4:a9:62:78:38:08:6b:c2:dc:f4:eb:6b:c4:
84:c0:08:c6:c5:ba:e6:39:34:c0:d9:11:f6:78:82:
f6:9f:70:0b:1e:2e:1a:09:0a:bf:c3:a9:c3:6b:aa:
e8:65:a5:56:bf:15:ac:c6:d8:b4:f8:21:24:07:d5:
0f:1c:9e:f3:7c:a8:89:95:f1:ff:73:d6:1d:03:22:
a1:b3:c3:b7:2f:75:8d:44:2c:0b:0d:c4:3b:b9:50:
4b:21:f5:a2:4c:cf:43:19:cb:3c:ff:3f:72:0d:e6:
fc:cb:51:4e:60:97:38:e9:0a:b6:89:f4:d3:13:f3:
db:31:b5:09:2c:8a:c6:97:01:49:9a:1c:09:5e:1c:
51:d2:34:32:7e:0a:f3:60:92:be:bb:7f:59:c6:ee:
a9:68:12:28:e6:13:4d:a4:55:84:ff:52:6f:f9:76:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:3D:A4:3B:6D:EB:3B:7B:AE:42:80:62:E8:BC:71:B3:9B:3E:B6
X509v3 Authority Key Identifier:
keyid:97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Rxo9pDtt6zt7rkKAYui8cbObPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:df8::/48
Signature Algorithm: sha256WithRSAEncryption
83:ea:3c:27:90:02:e0:c0:a2:86:54:9e:06:7f:78:1b:7e:ea:
da:4b:ce:6a:c1:eb:6b:1c:71:9f:4a:fd:fc:c3:69:eb:25:ab:
17:75:cc:20:3a:bd:00:69:d7:8d:4f:bd:49:7c:56:6c:ea:b1:
a7:ed:9d:8d:be:de:a6:f6:6b:58:6b:98:73:15:06:47:16:ed:
a3:42:46:fc:4e:39:7f:42:c1:36:52:bb:77:8e:00:6c:02:a1:
2a:79:b5:25:d4:f2:3f:3c:9e:97:6b:29:a2:ae:2c:74:07:a9:
f3:49:f8:97:a4:74:12:c6:a7:02:47:4c:a1:55:95:af:04:7b:
b1:8e:5b:8a:6a:35:80:4b:1b:42:09:23:79:d4:db:c8:b6:b0:
a9:5d:bb:62:34:15:50:f4:db:70:03:25:11:aa:11:31:39:e2:
17:53:5c:1c:40:55:bd:5e:ba:36:78:60:f8:d2:aa:4f:6f:8c:
c2:b5:f6:9b:2e:23:6c:0f:3c:6d:ed:ba:de:01:eb:da:a7:8b:
71:c2:1b:a6:86:34:c1:15:cb:91:53:35:80:b8:2a:ac:c3:04:
9d:2a:14:a0:22:19:55:02:5b:80:07:29:ca:d4:26:e1:18:cb:
c5:f7:33:18:ab:f2:77:b0:55:9e:40:43:6f:89:5d:96:b0:37:
d6:3a:0e:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhslfyv0eVV7AAcNscQsinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MjA2YjUyMDFkZjcwZWI5MTY2NjliNDU1ODQ5NjQ3Nzk3
YWI2NzkwHhcNMjUwMTAxMTE0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFhM2RhNDNiNmRlYjNiN2JhZTQyODA2MmU4YmM3MWIzOWIzZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh514tWJ0BLXAWStXYDbvGHacljBb
JPtw5eoyhAYPAZaRHS3Sy4nbMwAhudOyRU+RbXjXiFfx0DUw8h5dW5vPJm47FeXw
T6P5sFjHkywac9R/Z9tX0bxKFlzQvqSpYng4CGvC3PTra8SEwAjGxbrmOTTA2RH2
eIL2n3ALHi4aCQq/w6nDa6roZaVWvxWsxti0+CEkB9UPHJ7zfKiJlfH/c9YdAyKh
s8O3L3WNRCwLDcQ7uVBLIfWiTM9DGcs8/z9yDeb8y1FOYJc46Qq2ifTTE/PbMbUJ
LIrGlwFJmhwJXhxR0jQyfgrzYJK+u39Zxu6paBIo5hNNpFWE/1Jv+XYpWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEcaPaQ7bes7e65CgGLovHGzmz62MB8GA1UdIwQY
MBaAFJcga1IB33DrkWZptFWElkd5erZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHlCclVnSGZjT3VSWm1tMFZZU1dSM2w2dG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTEyMjYtYWMyMi00ZWE2LTllMzgt
ZGNjNjJhMjQwNjc2LzEvUnhvOXBEdHQ2enQ3cmtLQVl1aThjYk9iUHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTEyMjYtYWMyMi00ZWE2LTllMzgtZGNjNjJhMjQwNjc2
LzEvbHlCclVnSGZjT3VSWm1tMFZZU1dSM2w2dG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA34
MA0GCSqGSIb3DQEBCwUAA4IBAQCD6jwnkALgwKKGVJ4Gf3gbfuraS85qwetrHHGf
Sv38w2nrJasXdcwgOr0AadeNT71JfFZs6rGn7Z2Nvt6m9mtYa5hzFQZHFu2jQkb8
Tjl/QsE2Urt3jgBsAqEqebUl1PI/PJ6Xaymirix0B6nzSfiXpHQSxqcCR0yhVZWv
BHuxjluKajWASxtCCSN51NvItrCpXbtiNBVQ9NtwAyURqhExOeIXU1wcQFW9Xro2
eGD40qpPb4zCtfabLiNsDzxt7breAevap4txwhumhjTBFcuRUzWAuCqswwSdKhSg
IhlVAluABynK1CbhGMvF9zMYq/J3sFWeQENviV2WsDfWOg6c
-----END CERTIFICATE-----
Generated at Tue May 13 19:33:39 2025 by rpki-client