Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/n2ei7lteRT65eg7b0439V9xQ1W4.roa
File: n2ei7lteRT65eg7b0439V9xQ1W4.roa (raw, json)
Hash identifier: lnyVVF/NC8g5yiXdoOAyp30eKagIiSe2ZKe5V+kWrJA=
Subject key identifier: 9F:67:A2:EE:5B:5E:45:3E:B9:7A:0E:DB:D3:8D:FD:57:DC:50:D5:6E
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0194693445554895E3141BA83C6A79C8B555
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/n2ei7lteRT65eg7b0439V9xQ1W4.roa
Signing time: Wed 15 Jan 2025 09:03:40 +0000
ROA not before: Wed 15 Jan 2025 09:03:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64425
IP address blocks: 2a0f:5e00::/32 maxlen: 32
2a0f:5e01::/32 maxlen: 32
2a0f:5e02::/32 maxlen: 32
2a0f:5e03::/32 maxlen: 32
2a0f:5e04::/32 maxlen: 32
2a0f:5e05::/32 maxlen: 32
2a0f:5e06::/32 maxlen: 32
2a0f:5e07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:34:45:55:48:95:e3:14:1b:a8:3c:6a:79:c8:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jan 15 09:03:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f67a2ee5b5e453eb97a0edbd38dfd57dc50d56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:dd:3e:98:40:a7:2d:12:41:86:f1:34:e6:
50:e8:b0:4d:e3:f6:d8:14:e4:9f:bd:4a:e1:02:3c:
05:05:93:ae:f0:5f:74:1c:ff:4a:b4:b2:e8:9d:ec:
e3:1c:ba:db:1d:36:90:3d:4d:b9:17:96:a7:67:72:
fc:cf:ab:31:6d:91:cf:df:3f:3a:32:ec:12:ef:34:
1f:37:80:ef:41:07:fd:73:16:7b:9c:eb:d6:3d:f0:
6f:c7:f8:2f:5a:37:3a:eb:f5:76:9e:47:8e:83:dd:
6d:d1:dd:e7:64:57:f2:4d:56:58:53:3b:ee:1d:80:
ce:66:b7:41:79:30:3c:23:1a:80:22:ac:c3:a4:e6:
8e:59:49:5b:a3:ec:eb:4e:48:af:2a:1d:f2:59:ae:
42:78:62:29:79:dc:db:af:71:34:a8:8d:64:9f:da:
b0:4b:a0:47:d1:24:ef:f1:17:22:f9:1c:f9:bb:4f:
82:fe:a5:a0:4b:b7:d8:0a:c1:56:b3:3a:80:f0:65:
a2:97:09:4e:d2:23:c0:20:d9:fd:6b:13:cc:67:38:
db:7d:f8:8d:1a:37:69:30:2a:85:c6:c6:20:1f:11:
a3:89:aa:1c:dd:c5:16:03:42:9f:59:db:9f:db:d2:
38:b2:18:32:75:87:44:e1:21:f3:84:c2:22:de:fb:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:A2:EE:5B:5E:45:3E:B9:7A:0E:DB:D3:8D:FD:57:DC:50:D5:6E
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/n2ei7lteRT65eg7b0439V9xQ1W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
b8:35:d9:fb:8c:11:8f:4e:a4:d0:8c:91:a7:aa:27:ab:7e:06:
33:33:93:dc:1d:bc:78:88:d7:26:45:5a:91:2b:52:c7:16:c9:
a2:74:f1:1d:cb:3e:e5:cf:68:a2:79:f2:b8:61:e1:64:73:74:
b0:ad:53:71:18:bb:58:00:9c:c2:87:32:2c:38:4d:1d:50:46:
98:38:c9:8b:50:2c:27:42:ba:d4:5c:8c:72:6c:58:d0:e5:71:
8a:30:3e:eb:dd:a4:65:b0:6e:7b:d6:df:53:9f:51:9a:f6:a1:
e8:61:d3:6e:16:96:ee:49:77:f9:35:70:8b:c9:c3:1c:1f:38:
6d:e5:a1:6b:a8:86:01:59:d3:68:c3:bc:f0:46:b3:d2:f1:71:
2d:22:fd:2e:c9:8a:ed:d0:f6:e3:81:60:55:45:57:ac:9b:21:
f6:8a:5a:b8:c0:7b:85:3c:71:12:1d:cf:d0:37:23:a6:01:0c:
12:52:07:86:5d:0d:cf:89:09:29:8c:44:39:e8:77:a3:be:bb:
04:9b:65:e6:f2:3b:25:ae:5c:1a:3a:87:22:c1:aa:3d:2d:f2:
be:36:d6:a0:f3:46:7e:64:39:9b:35:6a:23:3d:36:1d:a4:72:
6a:02:93:33:eb:af:02:1e:53:d9:4e:a7:26:57:52:ad:f3:62:
39:f3:18:e2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZRpNEVVSJXjFBuoPGp5yLVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzU4YjQ1MWVlMGZlODViMDA0YTA1NjRmODMxMGZiMjEx
Yzk1ZmEwHhcNMjUwMTE1MDkwMzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjY3YTJlZTViNWU0NTNlYjk3YTBlZGJkMzhkZmQ1N2RjNTBkNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA217dPphApy0SQYbxNOZQ6LBN4/bY
FOSfvUrhAjwFBZOu8F90HP9KtLLonezjHLrbHTaQPU25F5anZ3L8z6sxbZHP3z86
MuwS7zQfN4DvQQf9cxZ7nOvWPfBvx/gvWjc66/V2nkeOg91t0d3nZFfyTVZYUzvu
HYDOZrdBeTA8IxqAIqzDpOaOWUlbo+zrTkivKh3yWa5CeGIpedzbr3E0qI1kn9qw
S6BH0STv8Rci+Rz5u0+C/qWgS7fYCsFWszqA8GWilwlO0iPAINn9axPMZzjbffiN
GjdpMCqFxsYgHxGjiaoc3cUWA0KfWduf29I4shgydYdE4SHzhMIi3vvnWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ9nou5bXkU+uXoO29ON/VfcUNVuMB8GA1UdIwQY
MBaAFDM1i0Ue4P6FsASgVk+DEPshHJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYt
ZDVmMDQ3YzI5MTkwLzEvbjJlaTdsdGVSVDY1ZWc3YjA0MzlWOXhRMVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYtZDVmMDQ3YzI5MTkw
LzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9eADAN
BgkqhkiG9w0BAQsFAAOCAQEAuDXZ+4wRj06k0IyRp6onq34GMzOT3B28eIjXJkVa
kStSxxbJonTxHcs+5c9oonnyuGHhZHN0sK1TcRi7WACcwocyLDhNHVBGmDjJi1As
J0K61FyMcmxY0OVxijA+692kZbBue9bfU59Rmvah6GHTbhaW7kl3+TVwi8nDHB84
beWha6iGAVnTaMO88Eaz0vFxLSL9LsmK7dD244FgVUVXrJsh9opauMB7hTxxEh3P
0DcjpgEMElIHhl0Nz4kJKYxEOeh3o767BJtl5vI7Ja5cGjqHIsGqPS3yvjbWoPNG
fmQ5mzVqIz02HaRyagKTM+uvAh5T2U6nJldSrfNiOfMY4g==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:43 2025 by rpki-client on console.sobornost.net