Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/YrePCf_bjh7Fmlxj6WIdj25P9kM.roa
File: YrePCf_bjh7Fmlxj6WIdj25P9kM.roa (raw, json)
Hash identifier: vRUI24nnO1R8NcK9Q0H2Byxc89+5DIZI2H9PDm/2xZU=
Subject key identifier: 62:B7:8F:09:FF:DB:8E:1E:C5:9A:5C:63:E9:62:1D:8F:6E:4F:F6:43
Certificate issuer: /CN=112931ac561893f844ec0af2c5ded9902fbb2793
Certificate serial: 01856F5DB1B888A4C4A05C4528D0B61876C5
Authority key identifier: 11:29:31:AC:56:18:93:F8:44:EC:0A:F2:C5:DE:D9:90:2F:BB:27:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/YrePCf_bjh7Fmlxj6WIdj25P9kM.roa
Signing time: Sun 01 Jan 2023 22:04:49 +0000
ROA not before: Sun 01 Jan 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b1:b8:88:a4:c4:a0:5c:45:28:d0:b6:18:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112931ac561893f844ec0af2c5ded9902fbb2793
Validity
Not Before: Jan 1 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62b78f09ffdb8e1ec59a5c63e9621d8f6e4ff643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:a1:3a:8f:59:8a:e5:9a:eb:b2:f6:4a:37:
12:b7:b3:2e:75:b3:b9:0c:1a:59:79:f2:63:e2:bb:
81:76:8c:a9:3e:6e:d5:38:ff:4f:55:85:af:b0:07:
d4:57:9b:0e:b2:03:7e:72:3d:7d:c8:65:51:d6:63:
96:4d:28:ad:47:73:27:b2:2e:cd:9d:48:4e:b9:ed:
1a:dd:b4:5f:77:be:3a:8d:b4:91:7a:05:2a:cc:cb:
6b:80:2a:80:2e:ef:df:4d:05:61:77:54:6f:2e:b5:
ab:ad:6a:8e:16:f2:71:db:8c:75:a8:68:64:8e:c7:
cd:85:65:49:a8:80:ae:82:63:f8:d3:a2:d7:e9:e2:
8c:11:e8:a2:ca:a3:b6:3e:a9:a3:7c:5f:45:56:0a:
9a:8a:24:5a:21:66:4e:b6:a7:40:4d:18:8d:83:89:
cb:01:3b:ff:72:92:66:fd:6a:05:b8:e0:43:0f:7c:
21:89:ad:f4:83:f5:d4:b2:ab:8c:38:82:d9:90:d0:
db:3e:08:2a:d0:f6:cf:5f:e6:e8:9a:09:83:d1:0b:
bf:b1:36:be:a8:9e:a5:b4:29:6f:f9:54:58:47:91:
83:df:d8:fc:f4:66:22:51:19:23:0d:6a:4c:99:16:
04:a9:b5:ac:dd:bd:82:e2:5f:08:2b:5f:d8:9f:5a:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:8F:09:FF:DB:8E:1E:C5:9A:5C:63:E9:62:1D:8F:6E:4F:F6:43
X509v3 Authority Key Identifier:
keyid:11:29:31:AC:56:18:93:F8:44:EC:0A:F2:C5:DE:D9:90:2F:BB:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/YrePCf_bjh7Fmlxj6WIdj25P9kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:40::/29
Signature Algorithm: sha256WithRSAEncryption
c5:61:e9:9a:3e:6c:94:df:ac:9d:ab:f7:1f:b5:2d:b8:b8:39:
2f:5c:7b:bd:83:a6:e6:7c:6e:a2:aa:1b:18:b3:20:ca:83:2d:
1d:df:3c:82:18:21:4c:4e:03:ed:73:4b:0a:b3:e9:ab:53:06:
99:af:83:bb:a5:e7:3f:78:43:72:5d:d5:c0:e8:a2:54:2d:b2:
26:ef:89:3a:ff:38:5d:3b:21:23:e5:b7:44:40:bc:1d:68:0f:
03:ee:51:92:5b:45:cd:ff:91:9d:05:45:32:a3:89:22:dd:83:
41:5a:63:6f:e3:6e:db:25:fa:78:62:93:3d:e3:95:60:9f:71:
81:f1:b2:58:fe:ba:8a:16:79:01:63:de:3e:47:35:d0:f9:da:
35:38:81:26:88:4a:9b:87:44:f9:9b:bf:88:a1:78:09:7c:27:
84:75:1b:c1:56:92:b6:b6:a3:a6:1c:3d:3a:72:17:2b:d4:80:
b4:b7:38:fa:13:16:e6:b7:e6:26:1b:90:ee:b2:00:74:4c:f7:
e7:0d:82:b1:98:be:47:ed:e1:c9:1a:ef:a0:16:b4:5e:41:7f:
87:0d:98:c4:a2:9c:ff:22:b4:0c:5f:ee:18:ac:9f:2b:a8:ab:
b0:04:bd:f7:91:09:e1:0f:93:d8:d4:a5:0f:78:0a:c8:44:7f:
52:fe:64:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvXbG4iKTEoFxFKNC2GHbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjkzMWFjNTYxODkzZjg0NGVjMGFmMmM1ZGVkOTkwMmZi
YjI3OTMwHhcNMjMwMTAxMjIwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmI3OGYwOWZmZGI4ZTFlYzU5YTVjNjNlOTYyMWQ4ZjZlNGZmNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PahOo9ZiuWa67L2SjcSt7MudbO5
DBpZefJj4ruBdoypPm7VOP9PVYWvsAfUV5sOsgN+cj19yGVR1mOWTSitR3Mnsi7N
nUhOue0a3bRfd746jbSRegUqzMtrgCqALu/fTQVhd1RvLrWrrWqOFvJx24x1qGhk
jsfNhWVJqICugmP406LX6eKMEeiiyqO2PqmjfF9FVgqaiiRaIWZOtqdATRiNg4nL
ATv/cpJm/WoFuOBDD3whia30g/XUsquMOILZkNDbPggq0PbPX+bomgmD0Qu/sTa+
qJ6ltClv+VRYR5GD39j89GYiURkjDWpMmRYEqbWs3b2C4l8IK1/Yn1qeaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGK3jwn/244exZpcY+liHY9uT/ZDMB8GA1UdIwQY
MBaAFBEpMaxWGJP4ROwK8sXe2ZAvuyeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNreHJGWVlrX2hFN0FyeXhkN1prQy03SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYzJlYzQtNThiZi00MDljLWJiNzUt
YjIwMDE1OWFjZDIzLzEvWXJlUENmX2JqaDdGbWx4ajZXSWRqMjVQOWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jYzJlYzQtNThiZi00MDljLWJiNzUtYjIwMDE1OWFjZDIz
LzEvRVNreHJGWVlrX2hFN0FyeXhkN1prQy03SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAxWHpmj5slN+snav3H7UtuLg5L1x7vYOm5nxuoqob
GLMgyoMtHd88ghghTE4D7XNLCrPpq1MGma+Du6XnP3hDcl3VwOiiVC2yJu+JOv84
XTshI+W3REC8HWgPA+5RkltFzf+RnQVFMqOJIt2DQVpjb+Nu2yX6eGKTPeOVYJ9x
gfGyWP66ihZ5AWPePkc10PnaNTiBJohKm4dE+Zu/iKF4CXwnhHUbwVaStrajphw9
OnIXK9SAtLc4+hMW5rfmJhuQ7rIAdEz35w2CsZi+R+3hyRrvoBa0XkF/hw2YxKKc
/yK0DF/uGKyfK6irsAS995EJ4Q+T2NSlD3gKyER/Uv5kOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:23 2024 by rpki-client on console-fra.rpki-client.org