Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/dVG1wIeBibZfq683K13cy658-jU.roa
File: dVG1wIeBibZfq683K13cy658-jU.roa (raw, json)
Hash identifier: myP9CvAYSqJ3iZd2lY90F17ZQXWgFA7cC6yA4+BATkE=
Subject key identifier: 75:51:B5:C0:87:81:89:B6:5F:AB:AF:37:2B:5D:DC:CB:AE:7C:FA:35
Certificate issuer: /CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Certificate serial: 018AE285E33BC8B13696C44B2540A239A9BE
Authority key identifier: F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/dVG1wIeBibZfq683K13cy658-jU.roa
Signing time: Fri 29 Sep 2023 19:58:59 +0000
ROA not before: Fri 29 Sep 2023 19:58:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21155
IP address blocks: 2001:67c:2390::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:85:e3:3b:c8:b1:36:96:c4:4b:25:40:a2:39:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Validity
Not Before: Sep 29 19:58:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7551b5c0878189b65fabaf372b5ddccbae7cfa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:4f:27:f0:c3:7d:c3:4a:01:df:0d:c1:fd:
e0:bc:b7:94:53:52:45:90:c1:2b:cd:03:bb:62:52:
a6:1b:d7:70:77:5e:cc:07:0b:fc:0e:69:d8:ca:2e:
60:14:f8:35:89:68:41:4c:dc:53:d2:7a:82:88:91:
41:9e:1c:9f:28:8b:fc:ba:3b:bd:8c:8f:60:4f:85:
ed:87:ae:4c:a7:1f:47:d3:17:97:cf:d5:7f:fd:43:
c9:6d:f2:9b:12:02:e5:af:af:aa:4c:04:29:9e:d6:
5d:41:ef:e9:83:d5:1e:4a:53:36:5c:c6:fc:34:42:
f9:2c:6c:1c:ea:02:f4:9e:56:be:a2:14:18:90:a8:
4e:f9:16:c1:0f:03:a9:3e:cb:29:e9:8e:5e:07:c2:
76:2b:bd:43:23:84:09:25:ce:6a:b2:72:ec:a3:31:
e3:19:b7:74:f4:1a:af:a9:f6:a5:4c:ed:60:23:ca:
c1:f6:91:0e:49:c3:b5:e6:92:8c:8a:fe:6f:e4:21:
08:e5:fe:60:4a:dc:cc:1d:5f:59:4a:55:f0:e2:05:
7c:e7:20:9d:e1:5a:bd:9b:0c:cc:53:73:08:9e:3c:
bf:d4:df:6b:28:85:59:d8:68:fc:06:ea:d8:7d:fa:
8b:cf:34:09:6b:0f:75:a8:18:49:ab:1b:35:4c:d3:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:51:B5:C0:87:81:89:B6:5F:AB:AF:37:2B:5D:DC:CB:AE:7C:FA:35
X509v3 Authority Key Identifier:
keyid:F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/dVG1wIeBibZfq683K13cy658-jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2390::/48
Signature Algorithm: sha256WithRSAEncryption
98:d6:f5:56:9b:9e:1e:5c:58:9e:56:ce:ab:42:52:22:0b:5b:
cd:34:76:2b:71:05:3e:5e:f7:9b:20:12:4f:72:53:9f:f1:3c:
72:b6:ee:33:d5:dc:04:37:72:76:ce:50:85:a2:08:ef:a8:39:
27:36:e5:c7:e0:d7:b2:a4:6f:d6:47:72:a8:59:62:6a:4b:d4:
d5:72:17:cb:be:0e:96:92:98:e3:09:7d:a5:0c:4e:09:70:cc:
e1:b5:1f:67:05:5e:5c:e6:d0:49:b4:70:63:c3:a6:28:34:6a:
90:3a:ca:a3:4a:c7:4f:36:31:41:e1:29:2c:f4:45:47:6e:0a:
3c:3e:0c:b0:59:3f:8a:7b:70:08:c5:89:43:36:03:1c:9a:8c:
d1:64:39:f8:72:e2:ab:d6:1b:8f:dc:35:51:ea:48:00:8f:88:
d0:3a:3c:15:f4:af:9b:22:86:37:77:33:79:c1:84:4a:f0:26:
36:1b:a6:ef:8d:db:ba:d0:75:bd:6e:75:58:89:2a:bf:b0:08:
76:72:0b:78:e2:26:6b:3c:8f:b2:39:8b:17:4b:65:97:3c:b0:
cb:4b:8f:79:f2:a6:65:9d:55:b9:7d:8d:c0:2f:76:28:48:01:
0e:4e:e1:96:6a:9a:da:5f:21:3d:d2:f0:1a:39:b6:ed:85:57:
4a:9d:57:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYriheM7yLE2lsRLJUCiOam+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZThmMWM2NjJjYzhiNGQ4ZjdhNjA2NTEyMDk5ZWFiN2Ux
ZDM4NzkwHhcNMjMwOTI5MTk1ODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTUxYjVjMDg3ODE4OWI2NWZhYmFmMzcyYjVkZGNjYmFlN2NmYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzidPJ/DDfcNKAd8Nwf3gvLeUU1JF
kMErzQO7YlKmG9dwd17MBwv8DmnYyi5gFPg1iWhBTNxT0nqCiJFBnhyfKIv8uju9
jI9gT4Xth65Mpx9H0xeXz9V//UPJbfKbEgLlr6+qTAQpntZdQe/pg9UeSlM2XMb8
NEL5LGwc6gL0nla+ohQYkKhO+RbBDwOpPssp6Y5eB8J2K71DI4QJJc5qsnLsozHj
Gbd09BqvqfalTO1gI8rB9pEOScO15pKMiv5v5CEI5f5gStzMHV9ZSlXw4gV85yCd
4Vq9mwzMU3MInjy/1N9rKIVZ2Gj8BurYffqLzzQJaw91qBhJqxs1TNNi3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHVRtcCHgYm2X6uvNytd3MuufPo1MB8GA1UdIwQY
MBaAFPPo8cZizItNj3pgZRIJnqt+HTh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1qeHhtTE1pMDJQZW1CbEVnbWVxMzRkT0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84NGY3M2EtNDA5ZS00MTI2LWE3NWMt
YzZjODdkZTM3MDRmLzEvZFZHMXdJZUJpYlpmcTY4M0sxM2N5NjU4LWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84NGY3M2EtNDA5ZS00MTI2LWE3NWMtYzZjODdkZTM3MDRm
LzEvOC1qeHhtTE1pMDJQZW1CbEVnbWVxMzRkT0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCY1vVWm54eXFieVs6rQlIiC1vNNHYrcQU+Xveb
IBJPclOf8Txytu4z1dwEN3J2zlCFogjvqDknNuXH4NeypG/WR3KoWWJqS9TVchfL
vg6WkpjjCX2lDE4JcMzhtR9nBV5c5tBJtHBjw6YoNGqQOsqjSsdPNjFB4Sks9EVH
bgo8PgywWT+Ke3AIxYlDNgMcmozRZDn4cuKr1huP3DVR6kgAj4jQOjwV9K+bIoY3
dzN5wYRK8CY2G6bvjdu60HW9bnVYiSq/sAh2cgt44iZrPI+yOYsXS2WXPLDLS495
8qZlnVW5fY3AL3YoSAEOTuGWapraXyE90vAaObbthVdKnVcV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org