Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/fUD4GXaL8YvrB7a5R_N6dmKZyGk.roa
File: fUD4GXaL8YvrB7a5R_N6dmKZyGk.roa (raw, json)
Hash identifier: F6gP5u9KLzIZGUzJsSIiReDDM++kQjjpwJYUmU7HTvg=
Subject key identifier: 7D:40:F8:19:76:8B:F1:8B:EB:07:B6:B9:47:F3:7A:76:62:99:C8:69
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 019525916DA4496E7C798CEC3300D3758970
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/fUD4GXaL8YvrB7a5R_N6dmKZyGk.roa
Signing time: Thu 20 Feb 2025 22:54:02 +0000
ROA not before: Thu 20 Feb 2025 22:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a09:a380:100::/40 maxlen: 40
2a09:a380:200::/40 maxlen: 40
2a09:a380:300::/40 maxlen: 40
2a09:a380:400::/40 maxlen: 40
2a09:a380:500::/40 maxlen: 40
2a09:a380:600::/40 maxlen: 40
2a09:a380:700::/40 maxlen: 40
2a09:a380:800::/40 maxlen: 40
2a09:a380:900::/40 maxlen: 40
2a09:a380:a00::/40 maxlen: 40
2a09:a380:b00::/40 maxlen: 40
2a09:a380:c00::/40 maxlen: 40
2a09:a380:d00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:25:91:6d:a4:49:6e:7c:79:8c:ec:33:00:d3:75:89:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Feb 20 22:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d40f819768bf18beb07b6b947f37a766299c869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:ef:cb:87:22:42:0c:0c:5d:47:d4:68:a4:
bb:7c:31:58:4e:43:f5:de:71:9c:b6:9b:fc:2a:1e:
cd:27:be:56:65:12:70:14:ef:6a:5b:24:49:49:13:
ed:68:8c:73:da:5b:31:90:c0:17:03:ec:74:be:33:
05:8d:3e:16:1f:7e:0c:3e:88:2e:52:6d:82:c1:fc:
fc:22:bc:65:66:08:bc:66:10:81:0a:3e:eb:df:c0:
a2:18:56:46:0e:ca:ed:71:d1:42:40:3e:f2:af:78:
22:96:5b:65:73:e5:7f:a8:d5:2b:18:2c:b9:5f:43:
21:c6:3f:c9:c5:b3:bd:9e:59:c4:fd:6c:9f:cb:49:
f6:7c:47:2b:a3:23:75:29:05:bc:b2:8f:38:02:1d:
37:a2:a7:85:da:9e:32:b8:89:e0:0d:9c:ec:a5:bc:
9e:4d:cd:b8:0c:e8:cc:e2:59:04:ac:08:26:ac:3c:
e8:15:bd:dc:1c:d0:d7:3b:68:b7:75:25:8f:23:ae:
da:33:07:77:f3:b6:f2:e6:38:06:dd:68:dc:3c:f6:
d3:7b:ce:73:ba:55:85:22:2e:ca:fa:b9:d1:a3:04:
34:23:41:02:25:f6:be:02:b3:68:42:27:44:e0:46:
95:54:65:14:ad:a6:25:9c:8f:26:89:f3:5f:7e:62:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:F8:19:76:8B:F1:8B:EB:07:B6:B9:47:F3:7A:76:62:99:C8:69
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/fUD4GXaL8YvrB7a5R_N6dmKZyGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a380:100::-2a09:a380:dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:06:dc:03:d5:9f:de:9a:14:ca:b3:ef:03:35:b0:93:b6:ef:
31:1c:65:fe:7f:6a:3e:d4:3a:99:03:c0:5b:e5:93:77:46:8f:
dd:a2:3c:d6:42:02:ca:94:cc:01:89:44:ef:91:c9:cf:e6:27:
69:2f:c8:1b:87:54:42:94:24:7e:c7:7b:db:84:49:13:1b:39:
b6:97:27:18:38:86:3d:01:2b:bc:1c:8f:00:59:f0:37:b3:a3:
04:8e:9e:de:0c:c2:61:01:20:ed:e5:2a:7d:1f:be:ef:00:24:
43:3f:8c:d4:d6:40:01:82:ed:1b:82:02:5a:04:c9:87:35:f1:
70:59:4d:d3:72:96:b1:a4:94:c6:e3:85:bf:6f:79:34:65:3c:
8f:b2:66:c5:a7:e7:d9:d8:6c:33:bb:34:a4:e5:79:7c:f4:9b:
88:05:d3:79:64:d0:1f:cb:54:7d:77:d6:71:13:40:62:1b:0c:
f0:1e:3c:f3:f9:ce:e1:41:9e:1e:c1:ac:f9:85:60:3a:b8:6d:
4a:87:27:f5:ed:e3:fe:61:00:97:f5:53:00:b3:e3:ed:89:13:
9a:bb:6f:f6:42:33:02:7c:9e:dd:29:e8:56:db:42:df:73:06:
de:d4:99:39:66:07:a8:2d:f3:33:2f:ba:34:8d:d2:65:f4:81:
ba:cd:aa:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUlkW2kSW58eYzsMwDTdYlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4
ZjFmNzgwHhcNMjUwMjIwMjI1NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQwZjgxOTc2OGJmMThiZWIwN2I2Yjk0N2YzN2E3NjYyOTljODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GPvy4ciQgwMXUfUaKS7fDFYTkP1
3nGctpv8Kh7NJ75WZRJwFO9qWyRJSRPtaIxz2lsxkMAXA+x0vjMFjT4WH34MPogu
Um2Cwfz8IrxlZgi8ZhCBCj7r38CiGFZGDsrtcdFCQD7yr3gilltlc+V/qNUrGCy5
X0Mhxj/JxbO9nlnE/Wyfy0n2fEcroyN1KQW8so84Ah03oqeF2p4yuIngDZzspbye
Tc24DOjM4lkErAgmrDzoFb3cHNDXO2i3dSWPI67aMwd387by5jgG3WjcPPbTe85z
ulWFIi7K+rnRowQ0I0ECJfa+ArNoQidE4EaVVGUUraYlnI8mifNffmIeOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH1A+Bl2i/GL6we2uUfzenZimchpMB8GA1UdIwQY
MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt
MmE3OWU1ZDIyYWUxLzEvZlVENEdYYUw4WXZyQjdhNVJfTjZkbUtaeUdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx
LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAqCaOA
AQMGASoJo4AMMA0GCSqGSIb3DQEBCwUAA4IBAQClBtwD1Z/emhTKs+8DNbCTtu8x
HGX+f2o+1DqZA8Bb5ZN3Ro/dojzWQgLKlMwBiUTvkcnP5idpL8gbh1RClCR+x3vb
hEkTGzm2lycYOIY9ASu8HI8AWfA3s6MEjp7eDMJhASDt5Sp9H77vACRDP4zU1kAB
gu0bggJaBMmHNfFwWU3TcpaxpJTG44W/b3k0ZTyPsmbFp+fZ2GwzuzSk5Xl89JuI
BdN5ZNAfy1R9d9ZxE0BiGwzwHjzz+c7hQZ4ewaz5hWA6uG1Khyf17eP+YQCX9VMA
s+PtiROau2/2QjMCfJ7dKehW20Lfcwbe1Jk5ZgeoLfMzL7o0jdJl9IG6zapA
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:35 2025 by rpki-client on console.sobornost.net