Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/a9b4jxv5zam5NjlDccuTakMQn6w.roa
File: a9b4jxv5zam5NjlDccuTakMQn6w.roa (raw, json)
Hash identifier: ngfWs2XLD/w+r6D+tHKOZtk9SqZ42aoYisnCAW0QPRQ=
Subject key identifier: 6B:D6:F8:8F:1B:F9:CD:A9:B9:36:39:43:71:CB:93:6A:43:10:9F:AC
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01951FB222608F9E04E5D24F288159DF0F72
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/a9b4jxv5zam5NjlDccuTakMQn6w.roa
Signing time: Wed 19 Feb 2025 19:32:02 +0000
ROA not before: Wed 19 Feb 2025 19:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 2a10:6c40::/29 maxlen: 29
2a14:6bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:b2:22:60:8f:9e:04:e5:d2:4f:28:81:59:df:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Feb 19 19:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd6f88f1bf9cda9b936394371cb936a43109fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:a4:2d:eb:fe:43:fb:82:07:98:a5:af:c6:
cb:7b:6e:0f:9a:95:57:b2:c9:fb:3e:3f:80:97:3b:
ef:8b:29:c6:2f:98:7b:d3:cf:a6:f1:ba:18:e9:35:
76:1d:bc:e9:76:f3:9c:fd:c9:25:e0:a7:c3:16:9a:
aa:49:06:e8:55:83:43:b4:10:55:2e:f3:34:7a:fd:
51:cb:03:df:41:15:ac:95:1a:68:e7:60:5a:c5:a0:
6a:8e:a0:80:cc:42:ba:80:0a:0f:0a:53:a0:8e:b3:
d0:29:0a:14:57:92:14:45:08:f6:4c:e0:7e:de:26:
9c:11:8c:51:75:60:14:f1:9d:d0:91:92:71:f9:51:
02:0d:33:c2:49:0a:cf:c5:62:25:a6:32:9d:04:e3:
2b:7d:18:41:a8:fd:12:06:cf:40:3d:0d:e7:ef:34:
f2:65:c8:52:cd:98:96:ed:89:e2:e3:a1:c3:40:7a:
ce:fc:2a:07:4c:1a:90:9b:00:26:69:f4:88:6a:82:
31:ce:bb:6e:30:05:35:62:6a:4f:da:42:d8:dc:6c:
f2:78:30:74:78:1e:4a:41:5e:d5:32:8b:ad:d7:aa:
9f:d0:22:4e:dc:99:54:8f:55:6e:7c:8d:15:b3:3a:
00:fa:d5:f2:97:aa:68:2a:72:31:b1:a4:fc:4e:3a:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:F8:8F:1B:F9:CD:A9:B9:36:39:43:71:CB:93:6A:43:10:9F:AC
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/a9b4jxv5zam5NjlDccuTakMQn6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6c40::/29
2a14:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
74:79:86:86:de:5d:56:5b:a9:a8:4a:fd:8b:05:a0:c6:c5:f1:
68:cb:38:a1:c0:ed:99:c4:a9:0a:be:a2:7a:dd:41:a6:6b:8b:
bc:0d:1c:77:7c:b8:99:2c:aa:2f:06:18:71:32:56:c3:64:3d:
3e:23:81:a1:93:6e:34:b9:e6:d8:70:5a:be:c7:01:3f:d8:17:
06:3a:3b:06:2e:31:b0:5f:8e:d7:7e:73:74:b8:48:10:68:ba:
4f:98:7c:ad:dd:10:bb:59:38:7f:fa:df:a1:9e:e4:c4:29:19:
c8:69:d7:7e:b6:90:da:5f:82:f0:c3:a5:b0:1e:d3:12:d5:2e:
78:b0:99:d5:ad:f9:bb:cf:d3:9b:8c:15:65:e6:78:c1:6d:0f:
12:0e:9e:c9:c3:b7:06:a1:3f:1b:5e:a7:53:b1:c1:e5:07:cb:
2c:e1:00:ae:7a:9c:05:c2:c0:fe:01:9c:9f:18:3a:81:05:a1:
35:56:60:e3:fc:40:53:dd:db:20:3c:fb:56:95:28:36:91:a5:
f9:20:6c:e7:77:f8:8f:95:62:69:dd:88:9e:c9:9f:80:3e:58:
89:73:69:e1:af:bf:eb:08:ab:ef:c7:bc:c3:3d:1f:11:af:73:
38:29:a8:df:39:3e:a3:bc:22:8d:36:1a:b5:b3:bd:85:c1:66:
20:28:3d:fd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZUfsiJgj54E5dJPKIFZ3w9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwMjE5MTkzMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ2Zjg4ZjFiZjljZGE5YjkzNjM5NDM3MWNiOTM2YTQzMTA5ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28ikLev+Q/uCB5ilr8bLe24PmpVX
ssn7Pj+AlzvviynGL5h708+m8boY6TV2HbzpdvOc/ckl4KfDFpqqSQboVYNDtBBV
LvM0ev1RywPfQRWslRpo52BaxaBqjqCAzEK6gAoPClOgjrPQKQoUV5IURQj2TOB+
3iacEYxRdWAU8Z3QkZJx+VECDTPCSQrPxWIlpjKdBOMrfRhBqP0SBs9APQ3n7zTy
ZchSzZiW7Yni46HDQHrO/CoHTBqQmwAmafSIaoIxzrtuMAU1YmpP2kLY3GzyeDB0
eB5KQV7VMout16qf0CJO3JlUj1VufI0VszoA+tXyl6poKnIxsaT8TjqnYwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGvW+I8b+c2puTY5Q3HLk2pDEJ+sMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvYTliNGp4djV6YW01TmpsRGNjdVRha01RbjZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhBsQAMF
AyoUa8AwDQYJKoZIhvcNAQELBQADggEBAHR5hobeXVZbqahK/YsFoMbF8WjLOKHA
7ZnEqQq+onrdQaZri7wNHHd8uJksqi8GGHEyVsNkPT4jgaGTbjS55thwWr7HAT/Y
FwY6OwYuMbBfjtd+c3S4SBBouk+YfK3dELtZOH/636Ge5MQpGchp1362kNpfgvDD
pbAe0xLVLniwmdWt+bvP05uMFWXmeMFtDxIOnsnDtwahPxtep1OxweUHyyzhAK56
nAXCwP4BnJ8YOoEFoTVWYOP8QFPd2yA8+1aVKDaRpfkgbOd3+I+VYmndiJ7Jn4A+
WIlzaeGvv+sIq+/HvMM9HxGvczgpqN85PqO8Io02GrWzvYXBZiAoPf0=
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:14:02 2025 by rpki-client on console.sobornost.net