Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa
File: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (raw, json)
Hash identifier: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=
Subject key identifier: 4C:E1:22:AA:52:E9:DD:88:67:B9:9B:74:D1:5E:06:7B:F8:16:9B:7C
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 0194282401AAB73D38E5C9B05B179DA64F54
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50838
IP address blocks: 2001:67c:2c84::/48 maxlen: 48
2001:67c:2ca0::/48 maxlen: 48
2001:67c:2ca1::/48 maxlen: 48
2001:67c:2ca2::/48 maxlen: 48
2001:67c:2ca3::/48 maxlen: 48
2001:67c:2ca4::/48 maxlen: 48
2001:67c:2ca5::/48 maxlen: 48
2001:67c:2ca6::/48 maxlen: 48
2001:67c:2ca7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:01:aa:b7:3d:38:e5:c9:b0:5b:17:9d:a6:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce122aa52e9dd8867b99b74d15e067bf8169b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:51:85:fd:3e:e8:d8:b1:cd:66:a0:72:88:
dd:7b:7d:3c:0e:cc:8a:27:86:47:ca:f6:0e:f2:a9:
e9:77:38:17:fa:7a:70:70:62:47:d5:45:8d:b3:f7:
05:27:5d:04:48:59:d7:22:cc:73:61:0f:76:cf:40:
fd:b5:26:a1:e0:cc:c4:9a:99:36:2b:9c:06:3b:53:
43:48:71:57:2f:aa:58:14:1c:36:69:7c:44:34:66:
99:93:fe:8a:11:4b:35:82:cf:0f:2f:7c:bc:33:8a:
f1:b0:cc:00:7f:69:5c:46:7f:d0:89:e7:f3:9f:5a:
af:c2:b3:f5:e4:fa:07:e5:68:e4:02:fe:c1:10:64:
50:dc:f7:7f:57:79:f1:92:5d:c9:71:e9:a3:9c:af:
d1:33:08:c6:0c:58:16:81:7e:4f:91:83:2e:de:87:
84:9f:94:d4:41:bd:80:1c:37:aa:95:a9:73:0c:d3:
33:ab:62:bf:2d:61:ae:ab:b9:df:5d:f1:f4:9c:c9:
52:9e:6c:56:60:85:9b:22:3a:98:eb:c5:1d:aa:ff:
ef:ee:67:3c:18:35:99:ab:8f:93:d8:01:5a:51:bd:
fb:4b:da:04:b6:14:b1:48:0f:39:48:33:12:62:d1:
8b:cc:cc:15:39:8a:41:d4:dc:75:c5:06:95:52:20:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:22:AA:52:E9:DD:88:67:B9:9B:74:D1:5E:06:7B:F8:16:9B:7C
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c84::/48
2001:67c:2ca0::/45
Signature Algorithm: sha256WithRSAEncryption
12:d6:34:8e:60:f6:c7:be:85:8d:95:db:72:cf:e0:72:dc:18:
8b:8c:3f:73:24:48:94:86:ef:02:b3:9c:85:03:d1:97:c4:07:
41:5c:cb:9b:5c:0b:d0:ef:17:b5:99:bd:36:11:b0:42:31:52:
7a:b2:6d:d2:7e:ce:a0:61:1f:75:52:df:60:5b:1c:94:38:14:
5d:4f:58:cb:8b:8b:b4:b8:2f:15:97:a8:dd:bb:07:4b:3f:c5:
36:d4:62:6b:53:eb:17:4c:98:a7:c8:ee:e1:70:46:1a:12:e1:
a4:5d:2b:c9:09:bc:9f:96:a2:01:6e:18:a9:e3:66:56:b4:97:
36:28:75:3e:22:d8:81:f6:53:26:6e:b6:c9:9b:b8:5d:9b:a9:
f8:8e:28:73:4e:f2:51:3b:ed:c2:77:7b:b3:99:93:a9:9f:b5:
a8:e3:48:cf:db:c4:64:35:ec:9b:e6:d3:69:92:a2:f0:e8:e0:
e4:f7:4b:f7:58:d9:cf:fa:17:61:74:68:73:6e:fb:14:05:14:
5b:c7:a8:10:22:cc:72:08:00:42:ae:f0:f2:b6:f7:6b:9f:e7:
e1:8b:7c:22:36:7a:db:7c:ee:cc:89:67:86:9d:9e:15:4c:34:
b0:c0:69:b0:e0:5a:a7:6b:57:fb:13:6d:51:ac:ff:6c:02:90:
a0:96:6d:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJAGqtz045cmwWxedpk9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5
MjY4ZTgwHhcNMjUwMTAyMTc1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2UxMjJhYTUyZTlkZDg4NjdiOTliNzRkMTVlMDY3YmY4MTY5YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TxRhf0+6NixzWagcojde308DsyK
J4ZHyvYO8qnpdzgX+npwcGJH1UWNs/cFJ10ESFnXIsxzYQ92z0D9tSah4MzEmpk2
K5wGO1NDSHFXL6pYFBw2aXxENGaZk/6KEUs1gs8PL3y8M4rxsMwAf2lcRn/Qiefz
n1qvwrP15PoH5WjkAv7BEGRQ3Pd/V3nxkl3JcemjnK/RMwjGDFgWgX5PkYMu3oeE
n5TUQb2AHDeqlalzDNMzq2K/LWGuq7nfXfH0nMlSnmxWYIWbIjqY68Udqv/v7mc8
GDWZq4+T2AFaUb37S9oEthSxSA85SDMSYtGLzMwVOYpB1Nx1xQaVUiCuOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEzhIqpS6d2IZ7mbdNFeBnv4Fpt8MB8GA1UdIwQY
MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt
YjJlN2ZlZmY0MDJmLzEvVE9FaXFsTHAzWWhudVp0MDBWNEdlX2dXbTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm
LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCyE
AwcDIAEGfCygMA0GCSqGSIb3DQEBCwUAA4IBAQAS1jSOYPbHvoWNldtyz+By3BiL
jD9zJEiUhu8Cs5yFA9GXxAdBXMubXAvQ7xe1mb02EbBCMVJ6sm3Sfs6gYR91Ut9g
WxyUOBRdT1jLi4u0uC8Vl6jduwdLP8U21GJrU+sXTJinyO7hcEYaEuGkXSvJCbyf
lqIBbhip42ZWtJc2KHU+ItiB9lMmbrbJm7hdm6n4jihzTvJRO+3Cd3uzmZOpn7Wo
40jP28RkNeyb5tNpkqLw6ODk90v3WNnP+hdhdGhzbvsUBRRbx6gQIsxyCABCrvDy
tvdrn+fhi3wiNnrbfO7MiWeGnZ4VTDSwwGmw4Fqna1f7E21RrP9sApCglm2k
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:34 2025 by rpki-client on console.sobornost.net