Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/EvZmdpYLd03WERL_L0i0mrtj944.roa
File: EvZmdpYLd03WERL_L0i0mrtj944.roa (raw, json)
Hash identifier: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=
Subject key identifier: 12:F6:66:76:96:0B:77:4D:D6:11:12:FF:2F:48:B4:9A:BB:63:F7:8E
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0194ACD45E91A842A114A047A1510DB6B7B2
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/EvZmdpYLd03WERL_L0i0mrtj944.roa
Signing time: Tue 28 Jan 2025 12:13:06 +0000
ROA not before: Tue 28 Jan 2025 12:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214079
IP address blocks: 2a0d:d940:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:d4:5e:91:a8:42:a1:14:a0:47:a1:51:0d:b6:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jan 28 12:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f66676960b774dd61112ff2f48b49abb63f78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:0e:ad:12:94:2b:8c:9c:3c:f5:be:cd:bf:
82:a1:0a:6c:0d:1b:ab:0f:f4:b9:28:0a:47:03:28:
0b:c7:87:52:9c:06:84:b3:63:57:60:26:1c:43:12:
f4:58:0e:09:19:3d:06:7d:34:b4:bb:47:ff:d6:60:
9e:e9:e7:8b:52:d2:01:00:15:f9:8a:d9:ef:67:85:
6a:1e:82:1d:8b:b3:6c:a7:a6:ff:93:ad:c0:d2:a4:
9f:c6:93:43:8f:6d:4d:d6:2f:a2:7e:86:e5:17:41:
84:d6:0a:a1:4f:c4:ce:87:18:65:1a:c4:2f:f2:36:
6e:ad:8c:51:cc:a3:65:d3:9b:ad:7a:52:f4:0a:6b:
5f:87:4c:3c:b9:8a:fa:59:52:56:62:ec:21:61:5c:
69:e9:b1:a2:8f:78:d6:e5:a2:94:8c:a2:6d:b1:e9:
3a:74:ec:46:0c:fd:3b:b4:a5:6f:6b:91:39:f4:07:
18:33:34:2a:f3:0e:1a:04:b9:9d:40:49:ab:81:0b:
07:60:bc:0c:2c:a3:0a:74:db:9e:a8:b2:64:f1:c2:
e5:42:5e:ff:b0:b5:2d:cd:82:73:2c:c6:6d:c5:3a:
b4:d9:2b:db:87:ff:a7:75:29:be:e7:e1:70:65:0b:
d5:5f:ba:82:cc:a2:56:36:76:78:6f:02:42:a6:95:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F6:66:76:96:0B:77:4D:D6:11:12:FF:2F:48:B4:9A:BB:63:F7:8E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/EvZmdpYLd03WERL_L0i0mrtj944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:40::/44
Signature Algorithm: sha256WithRSAEncryption
dc:32:7e:f8:bc:59:d8:95:14:8d:49:67:bc:23:e9:ac:2b:d8:
41:fb:81:6a:de:f7:d2:3b:d6:35:4a:04:27:18:8c:d9:f2:6f:
c1:b9:44:9c:a7:8a:a0:50:a7:1e:0b:c8:7c:46:3f:c4:cf:80:
b1:cd:c2:64:5c:36:e2:df:4b:d4:94:b4:f6:32:b2:a7:fb:a0:
a1:a3:5d:a2:2c:32:2b:72:16:8c:6c:b5:35:df:c1:0a:1d:52:
05:67:f4:ab:1a:e8:cc:f7:89:58:15:8a:3a:ee:fa:d7:67:b4:
c4:b4:3a:41:ee:0a:b9:1d:53:a1:85:3b:41:9c:14:54:fe:ce:
e6:69:13:97:79:b1:8a:a9:4e:1e:d6:ed:b7:d6:cb:48:8f:a8:
1e:0c:c3:43:42:ba:04:5b:86:eb:89:68:5b:e6:1a:b5:41:38:
4d:2d:96:59:95:1e:0b:82:48:7e:76:8d:b1:43:18:55:b9:6e:
c5:b5:bb:6d:05:01:78:8a:b3:87:bc:f7:28:d1:17:7f:08:bc:
4d:78:be:73:d9:3a:34:5f:7e:7f:c2:94:45:e7:ba:e3:b6:a7:
19:a8:02:4c:52:88:37:fe:a2:64:7c:c4:9e:08:30:62:ca:bc:
4f:d5:a1:41:94:a2:15:36:92:80:bc:ac:07:4f:3a:17:9e:eb:
08:cf:ef:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZSs1F6RqEKhFKBHoVENtreyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwMTI4MTIxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmY2NjY3Njk2MGI3NzRkZDYxMTEyZmYyZjQ4YjQ5YWJiNjNmNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCMOrRKUK4ycPPW+zb+CoQpsDRur
D/S5KApHAygLx4dSnAaEs2NXYCYcQxL0WA4JGT0GfTS0u0f/1mCe6eeLUtIBABX5
itnvZ4VqHoIdi7Nsp6b/k63A0qSfxpNDj21N1i+ifoblF0GE1gqhT8TOhxhlGsQv
8jZurYxRzKNl05utelL0Cmtfh0w8uYr6WVJWYuwhYVxp6bGij3jW5aKUjKJtsek6
dOxGDP07tKVva5E59AcYMzQq8w4aBLmdQEmrgQsHYLwMLKMKdNueqLJk8cLlQl7/
sLUtzYJzLMZtxTq02Svbh/+ndSm+5+FwZQvVX7qCzKJWNnZ4bwJCppXdbQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBL2ZnaWC3dN1hES/y9ItJq7Y/eOMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvRXZabWRwWUxkMDNXRVJMX0wwaTBtcnRqOTQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQABA
MA0GCSqGSIb3DQEBCwUAA4IBAQDcMn74vFnYlRSNSWe8I+msK9hB+4Fq3vfSO9Y1
SgQnGIzZ8m/BuUScp4qgUKceC8h8Rj/Ez4CxzcJkXDbi30vUlLT2MrKn+6Cho12i
LDIrchaMbLU138EKHVIFZ/SrGujM94lYFYo67vrXZ7TEtDpB7gq5HVOhhTtBnBRU
/s7maROXebGKqU4e1u231stIj6geDMNDQroEW4briWhb5hq1QThNLZZZlR4Lgkh+
do2xQxhVuW7FtbttBQF4irOHvPco0Rd/CLxNeL5z2To0X35/wpRF57rjtqcZqAJM
Uog3/qJkfMSeCDBiyrxP1aFBlKIVNpKAvKwHTzoXnusIz+8e
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net