Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SNnV2kTdPgW-c0UjGwo1WqMCvEk.roa
File: SNnV2kTdPgW-c0UjGwo1WqMCvEk.roa (raw, json)
Hash identifier: 1vHl6EbDtyIJ+qxQlOPD5/jlsZgO4kGCG7b+kMVU4fM=
Subject key identifier: 48:D9:D5:DA:44:DD:3E:05:BE:73:45:23:1B:0A:35:5A:A3:02:BC:49
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019537CAF5A7E45B7CF40E191B424916B5C2
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SNnV2kTdPgW-c0UjGwo1WqMCvEk.roa
Signing time: Mon 24 Feb 2025 11:50:02 +0000
ROA not before: Mon 24 Feb 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0e:3f46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:ca:f5:a7:e4:5b:7c:f4:0e:19:1b:42:49:16:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Feb 24 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48d9d5da44dd3e05be7345231b0a355aa302bc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:6f:20:52:5f:08:a9:1b:56:8c:08:e3:7e:
22:09:b6:29:cc:d0:b3:cf:48:ec:b1:4d:68:47:01:
e4:e7:b0:c4:36:4e:d1:bf:46:0d:db:6d:4f:ab:51:
f1:22:2b:8c:47:ad:52:9f:30:8f:77:66:d1:fe:55:
67:b9:ad:9b:4c:52:6c:ff:e5:db:af:db:87:d2:19:
34:c3:76:b5:ac:6d:fd:4e:39:74:cd:c2:a5:87:ab:
99:e5:68:50:ff:b6:f2:87:36:8a:fd:e8:1a:29:6c:
bd:21:9c:c1:ee:70:39:f9:89:fa:a5:25:96:74:84:
20:9c:af:07:32:52:72:34:7b:24:8f:e8:81:a5:97:
87:b1:87:cd:c6:66:96:05:78:89:c2:5a:6f:40:7d:
da:96:06:94:22:0d:2e:61:28:c4:11:70:50:77:1f:
80:a5:c7:dc:09:65:56:d2:79:bb:bb:64:4c:f2:50:
27:90:57:43:02:18:d3:dd:86:1c:0b:27:61:d1:ab:
e7:06:3c:95:c3:b4:b8:08:25:9d:42:85:80:c9:8d:
92:a2:a9:18:86:30:7e:48:6f:a6:1c:98:72:fd:c9:
bb:1d:55:81:87:69:42:62:07:13:3a:96:a7:5f:75:
d5:04:2c:6b:33:c6:70:0d:0d:78:1c:c5:eb:91:19:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:D5:DA:44:DD:3E:05:BE:73:45:23:1B:0A:35:5A:A3:02:BC:49
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SNnV2kTdPgW-c0UjGwo1WqMCvEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3f46::/32
Signature Algorithm: sha256WithRSAEncryption
80:37:19:b9:ec:d3:6e:f6:fd:bf:4f:3a:80:72:6e:92:3f:68:
b0:42:e6:cb:8e:1b:ac:d5:74:0b:58:bc:f4:be:05:8f:fb:c0:
1d:80:21:ba:eb:ae:d1:86:c7:04:ad:1b:ac:0d:ed:c9:6c:23:
83:a8:c9:42:b9:f8:cf:55:a9:71:d7:12:3d:68:a2:79:13:b3:
1d:1d:6d:8a:4e:ee:92:f5:62:e2:60:9a:f0:3e:b9:25:29:b9:
57:6a:28:e9:f7:92:19:9c:86:69:72:38:7e:ea:3c:26:85:54:
b8:a5:87:d4:bd:86:4b:17:bb:6f:de:fb:e2:90:8b:ad:f7:9a:
8f:1b:3a:15:08:8f:13:1c:f7:a5:e9:d7:cc:a0:fe:14:6c:f6:
3a:4a:1d:6a:42:7d:32:5e:9b:13:f9:24:ba:16:ac:b7:77:02:
60:5b:60:bf:20:5e:76:53:20:41:d9:01:dc:87:4c:22:0f:66:
3d:52:71:4b:00:2a:06:ba:3b:e8:ce:ac:59:60:8a:60:e5:4c:
33:07:3d:a2:6e:bb:51:2b:39:76:7d:da:21:9a:a1:4e:85:e2:
f2:d3:fa:f9:e7:79:71:9f:c3:b1:12:3c:4c:38:af:04:1b:67:
b5:6e:6f:b4:e3:59:55:fe:ed:ae:4b:4c:7d:96:08:a4:e7:35:
5c:ea:77:04
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZU3yvWn5Ft89A4ZG0JJFrXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMjI0MTE1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGQ5ZDVkYTQ0ZGQzZTA1YmU3MzQ1MjMxYjBhMzU1YWEzMDJiYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FlvIFJfCKkbVowI434iCbYpzNCz
z0jssU1oRwHk57DENk7Rv0YN221Pq1HxIiuMR61SnzCPd2bR/lVnua2bTFJs/+Xb
r9uH0hk0w3a1rG39Tjl0zcKlh6uZ5WhQ/7byhzaK/egaKWy9IZzB7nA5+Yn6pSWW
dIQgnK8HMlJyNHskj+iBpZeHsYfNxmaWBXiJwlpvQH3algaUIg0uYSjEEXBQdx+A
pcfcCWVW0nm7u2RM8lAnkFdDAhjT3YYcCydh0avnBjyVw7S4CCWdQoWAyY2SoqkY
hjB+SG+mHJhy/cm7HVWBh2lCYgcTOpanX3XVBCxrM8ZwDQ14HMXrkRlXYwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEjZ1dpE3T4FvnNFIxsKNVqjArxJMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvU05uVjJrVGRQZ1ctYzBVakd3bzFXcU1DdkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4/RjAN
BgkqhkiG9w0BAQsFAAOCAQEAgDcZuezTbvb9v086gHJukj9osELmy44brNV0C1i8
9L4Fj/vAHYAhuuuu0YbHBK0brA3tyWwjg6jJQrn4z1WpcdcSPWiieROzHR1tik7u
kvVi4mCa8D65JSm5V2oo6feSGZyGaXI4fuo8JoVUuKWH1L2GSxe7b9774pCLrfea
jxs6FQiPExz3penXzKD+FGz2OkodakJ9Ml6bE/kkuhast3cCYFtgvyBedlMgQdkB
3IdMIg9mPVJxSwAqBro76M6sWWCKYOVMMwc9om67USs5dn3aIZqhToXi8tP6+ed5
cZ/DsRI8TDivBBtntW5vtONZVf7trktMfZYIpOc1XOp3BA==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:13 2025 by rpki-client on console.sobornost.net