Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/hQpbshF6XQKXkbhX0yaO8B5mAvI.roa
File: hQpbshF6XQKXkbhX0yaO8B5mAvI.roa (raw, json)
Hash identifier: CuKUP1k46tyLGXGGQpiI0cZLRBNolp7wQANl+B4Bs6g=
Subject key identifier: 85:0A:5B:B2:11:7A:5D:02:97:91:B8:57:D3:26:8E:F0:1E:66:02:F2
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 0185C55C484A3BBD555B6A6F65CE14B480B0
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/hQpbshF6XQKXkbhX0yaO8B5mAvI.roa
Signing time: Wed 18 Jan 2023 14:50:37 +0000
ROA not before: Wed 18 Jan 2023 14:50:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203271
IP address blocks: 2a06:9080::/32 maxlen: 32
2a06:9087:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:5c:48:4a:3b:bd:55:5b:6a:6f:65:ce:14:b4:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 18 14:50:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=850a5bb2117a5d029791b857d3268ef01e6602f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:5f:19:3c:29:ab:06:28:9e:7e:d2:49:62:
4e:b1:d5:f8:46:f8:00:9d:6b:75:84:65:22:3b:ce:
7e:cc:24:36:60:ad:da:c0:fd:1d:2b:d4:00:11:fe:
d4:61:fa:2a:fd:41:9d:f3:88:19:e5:b2:95:b1:9a:
cd:c1:f0:ba:19:6e:0e:2c:aa:30:79:74:36:54:f9:
61:2d:7b:c8:3b:9e:b3:0c:e6:d3:58:a7:55:f8:fc:
94:ac:f7:7e:6d:01:dd:9e:33:9a:93:f0:0b:07:55:
c0:d7:64:aa:ae:cd:97:ee:65:0d:9f:4f:98:80:2c:
34:94:3a:6e:16:fe:86:7b:69:09:cd:cd:54:9d:b7:
6f:2e:a8:60:f3:02:2f:a2:7e:74:fd:20:5e:20:f4:
e8:cf:ab:2c:92:32:48:f8:59:0c:cc:47:02:6e:44:
68:5b:1a:15:2b:dd:36:0c:df:c3:a0:23:38:39:0e:
5f:9a:72:21:6b:0d:48:24:33:f1:b9:a8:1d:5a:96:
ba:81:fd:44:91:75:fe:93:f1:b3:9f:fc:e8:39:b7:
eb:29:29:8d:35:aa:37:54:0a:54:02:7e:a1:73:6c:
99:c3:9d:33:1b:7d:43:73:1e:ec:5f:1c:4f:ee:1e:
4c:fd:0e:73:84:10:f0:5e:0c:e2:66:8c:82:7d:26:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:5B:B2:11:7A:5D:02:97:91:B8:57:D3:26:8E:F0:1E:66:02:F2
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/hQpbshF6XQKXkbhX0yaO8B5mAvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9080::/32
2a06:9087:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
21:d9:2d:17:4d:c4:2b:1d:f6:8b:e3:de:8f:87:01:16:57:f5:
b1:c9:67:d6:8f:73:e0:2c:1d:ef:df:67:67:f6:69:93:6b:ad:
c6:37:ae:bb:95:b1:67:6f:17:0a:87:96:d4:13:1a:78:14:66:
7e:b1:19:c0:30:7e:b2:23:26:ce:51:ba:0c:5f:49:09:bd:d7:
c1:d1:de:60:b7:e1:94:c6:5d:2c:5a:89:b1:7a:7b:71:e4:87:
98:73:53:fd:a3:2a:9b:4f:b3:b5:15:c3:ca:81:38:c5:79:67:
2d:b8:f5:5b:78:e2:0c:c5:a6:06:c8:6c:1a:29:12:2e:76:12:
16:b8:84:d4:dd:45:fb:20:1d:c1:d0:2d:0d:73:82:b3:db:eb:
df:40:81:05:e1:96:0f:55:46:e3:62:36:3a:9d:23:7c:82:4f:
c4:65:4f:14:78:f4:7e:ad:e1:11:11:34:39:76:76:bd:e3:9d:
a6:aa:f8:67:6e:06:b5:b1:29:57:ec:f6:7c:71:b5:4f:98:17:
85:df:47:f6:4b:d7:46:a3:d4:27:7b:57:ff:04:fd:81:54:a9:
15:7a:23:32:7d:81:15:d1:33:92:d9:8a:7c:d7:15:fb:77:aa:
a7:54:12:0a:ea:b2:21:49:b9:ae:fc:2f:a2:0a:f0:ce:80:48:
7f:34:bb:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYXFXEhKO71VW2pvZc4UtICwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzI0ZTdiMGNiMjMzYWU3ZTdmMmViMzc2Njk1OWZjNjgy
N2ZiMWIwHhcNMjMwMTE4MTQ1MDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTBhNWJiMjExN2E1ZDAyOTc5MWI4NTdkMzI2OGVmMDFlNjYwMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNhfGTwpqwYonn7SSWJOsdX4RvgA
nWt1hGUiO85+zCQ2YK3awP0dK9QAEf7UYfoq/UGd84gZ5bKVsZrNwfC6GW4OLKow
eXQ2VPlhLXvIO56zDObTWKdV+PyUrPd+bQHdnjOak/ALB1XA12Sqrs2X7mUNn0+Y
gCw0lDpuFv6Ge2kJzc1UnbdvLqhg8wIvon50/SBeIPToz6sskjJI+FkMzEcCbkRo
WxoVK902DN/DoCM4OQ5fmnIhaw1IJDPxuagdWpa6gf1EkXX+k/Gzn/zoObfrKSmN
Nao3VApUAn6hc2yZw50zG31Dcx7sXxxP7h5M/Q5zhBDwXgziZoyCfSY/nwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFIUKW7IRel0Cl5G4V9MmjvAeZgLyMB8GA1UdIwQY
MBaAFIFyTnsMsjOufn8us3ZpWfxoJ/sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hKT2V3eXlNNjUtZnk2emRtbFpfR2duLXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzE2NTktMzBjYS00YTg4LWEyNmMt
NDQwODQ4YzBjZjcxLzEvaFFwYnNoRjZYUUtYa2JoWDB5YU84QjVtQXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zMzE2NTktMzBjYS00YTg4LWEyNmMtNDQwODQ4YzBjZjcx
LzEvZ1hKT2V3eXlNNjUtZnk2emRtbFpfR2duLXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAKgaQgAMH
ACoGkIf//zANBgkqhkiG9w0BAQsFAAOCAQEAIdktF03EKx32i+Pej4cBFlf1scln
1o9z4Cwd799nZ/Zpk2utxjeuu5WxZ28XCoeW1BMaeBRmfrEZwDB+siMmzlG6DF9J
Cb3XwdHeYLfhlMZdLFqJsXp7ceSHmHNT/aMqm0+ztRXDyoE4xXlnLbj1W3jiDMWm
BshsGikSLnYSFriE1N1F+yAdwdAtDXOCs9vr30CBBeGWD1VG42I2Op0jfIJPxGVP
FHj0fq3hERE0OXZ2veOdpqr4Z24GtbEpV+z2fHG1T5gXhd9H9kvXRqPUJ3tX/wT9
gVSpFXojMn2BFdEzktmKfNcV+3eqp1QSCuqyIUm5rvwvogrwzoBIfzS7pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:48 2024 by rpki-client on console-fra.rpki-client.org