Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Bk4jYnMRRb947l8yY9Cz5R5PS3Y.roa
File: Bk4jYnMRRb947l8yY9Cz5R5PS3Y.roa (raw, json)
Hash identifier: T7wfsl0jIlDWPOxkBWYO7ccKqPb3S0Qq20ZzbCtykI8=
Subject key identifier: 06:4E:23:62:73:11:45:BF:78:EE:5F:32:63:D0:B3:E5:1E:4F:4B:76
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 0181DDEECC814312341F890C00831BC124E2
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Bk4jYnMRRb947l8yY9Cz5R5PS3Y.roa
Signing time: Fri 08 Jul 2022 13:10:23 +0000
ROA not before: Fri 08 Jul 2022 13:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44620
IP address blocks: 2a0f:6580:107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:ee:cc:81:43:12:34:1f:89:0c:00:83:1b:c1:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jul 8 13:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=064e2362731145bf78ee5f3263d0b3e51e4f4b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:08:cf:63:f8:cc:f0:b5:6f:e3:da:ea:2d:
f7:be:07:e4:53:cb:61:f0:b5:e3:f0:c8:88:71:44:
63:94:62:c1:d3:f0:71:3f:a4:9c:86:80:be:a6:98:
6d:68:e4:b0:ad:5f:23:61:9c:44:3e:93:aa:86:82:
63:7f:22:5a:04:80:88:9f:fe:72:42:b3:63:d2:b0:
7c:c9:dc:7d:0b:8a:2a:65:b4:44:70:ac:d6:1d:38:
c3:e4:9c:c5:c4:a8:42:ec:74:ed:71:5d:bb:e8:39:
2e:05:7b:d9:53:2c:eb:22:bb:e7:e8:47:99:f7:16:
76:6c:63:83:44:6e:94:cb:3b:51:35:ec:80:99:55:
3f:a1:51:b0:7e:81:de:df:b9:e6:ec:f8:96:d5:46:
67:b9:ed:a8:9e:6b:42:46:a1:91:78:53:fe:dd:bd:
6e:13:1d:cf:9b:66:3d:6e:d6:22:ea:57:d5:8f:41:
d0:8c:9f:60:48:54:cc:55:2f:1f:f1:ab:31:04:3d:
0b:fd:8f:e2:bf:75:62:a9:be:de:7e:0a:59:aa:68:
b8:59:ca:c6:71:97:48:67:16:4c:84:79:9c:27:ac:
d5:22:e4:75:77:80:29:19:38:18:12:cb:d4:48:f3:
49:a9:c9:a9:6c:a5:eb:6e:5a:cd:6c:20:85:19:a5:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:23:62:73:11:45:BF:78:EE:5F:32:63:D0:B3:E5:1E:4F:4B:76
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Bk4jYnMRRb947l8yY9Cz5R5PS3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:107::/48
Signature Algorithm: sha256WithRSAEncryption
97:a9:ff:66:a3:05:6f:43:3f:43:81:e2:e8:29:6c:00:cf:3e:
35:9f:29:30:f6:68:93:a9:8c:38:d1:4c:87:90:c3:03:69:9a:
cd:2e:44:a9:f3:d3:54:f3:e1:b0:76:1c:1f:99:08:dc:ec:4d:
0f:cb:62:4e:da:d0:88:47:5a:f5:96:d1:81:f1:28:77:7f:a7:
8c:65:48:a4:59:7d:31:58:87:43:9c:d8:8b:14:91:97:9e:1d:
be:14:33:09:81:40:2c:82:68:8a:e7:c0:d4:ff:dc:e3:54:65:
04:e2:cf:72:c2:8f:07:f3:24:2b:38:08:65:34:0e:9c:9e:a5:
a1:96:5e:7a:bb:ea:c0:3d:23:58:9d:23:f1:f5:67:a9:50:93:
2b:ae:bf:ba:15:18:0f:71:6c:44:ba:52:9c:55:91:e6:8d:73:
87:3c:04:2b:19:b0:e8:8a:c5:6a:90:c8:60:1b:3f:32:d9:2c:
b1:d2:fe:db:6d:42:88:62:4d:d0:44:85:3c:0c:6a:60:fc:2e:
24:77:b1:99:f9:c8:d0:c1:d6:3f:68:d8:12:fd:d6:34:66:ca:
1e:37:28:05:93:6b:68:16:ac:b1:38:bf:13:10:61:9a:cb:f0:
da:42:9c:8a:8f:97:12:b5:d5:42:0d:c7:6c:e2:0d:55:88:0a:
f4:a5:8e:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHd7syBQxI0H4kMAIMbwSTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjIwNzA4MTMxMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjRlMjM2MjczMTE0NWJmNzhlZTVmMzI2M2QwYjNlNTFlNGY0Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxgIz2P4zPC1b+Pa6i33vgfkU8th
8LXj8MiIcURjlGLB0/BxP6SchoC+pphtaOSwrV8jYZxEPpOqhoJjfyJaBICIn/5y
QrNj0rB8ydx9C4oqZbREcKzWHTjD5JzFxKhC7HTtcV276DkuBXvZUyzrIrvn6EeZ
9xZ2bGODRG6UyztRNeyAmVU/oVGwfoHe37nm7PiW1UZnue2onmtCRqGReFP+3b1u
Ex3Pm2Y9btYi6lfVj0HQjJ9gSFTMVS8f8asxBD0L/Y/iv3Viqb7efgpZqmi4WcrG
cZdIZxZMhHmcJ6zVIuR1d4ApGTgYEsvUSPNJqcmpbKXrblrNbCCFGaU06wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAZOI2JzEUW/eO5fMmPQs+UeT0t2MB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvQms0alluTVJSYjk0N2w4eVk5Q3o1UjVQUzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEH
MA0GCSqGSIb3DQEBCwUAA4IBAQCXqf9mowVvQz9DgeLoKWwAzz41nykw9miTqYw4
0UyHkMMDaZrNLkSp89NU8+GwdhwfmQjc7E0Py2JO2tCIR1r1ltGB8Sh3f6eMZUik
WX0xWIdDnNiLFJGXnh2+FDMJgUAsgmiK58DU/9zjVGUE4s9ywo8H8yQrOAhlNA6c
nqWhll56u+rAPSNYnSPx9WepUJMrrr+6FRgPcWxEulKcVZHmjXOHPAQrGbDoisVq
kMhgGz8y2Syx0v7bbUKIYk3QRIU8DGpg/C4kd7GZ+cjQwdY/aNgS/dY0ZsoeNygF
k2toFqyxOL8TEGGay/DaQpyKj5cStdVCDcds4g1ViAr0pY7C
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:45 2025 by rpki-client