Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Tvx5DglEwYzYbDVrD3rCkW7j7RQ.roa
File: Tvx5DglEwYzYbDVrD3rCkW7j7RQ.roa (raw, json)
Hash identifier: PpTaoL+iT+U1ngkFFlafEDkKSSlHhiWDVnnL3+mUgnA=
Subject key identifier: 4E:FC:79:0E:09:44:C1:8C:D8:6C:35:6B:0F:7A:C2:91:6E:E3:ED:14
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09338398
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Tvx5DglEwYzYbDVrD3rCkW7j7RQ.roa
Signing time: Sat 01 Jan 2022 12:58:48 +0000
ROA not before: Sat 01 Jan 2022 12:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41754
IP address blocks: 2a02:2698:5c00::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154370968 (0x9338398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4efc790e0944c18cd86c356b0f7ac2916ee3ed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:1d:9a:e2:58:f6:34:4a:1f:eb:8f:d1:65:
4b:81:a6:c2:6f:d1:5e:08:da:46:8e:f5:54:69:e3:
54:7f:9e:72:92:55:25:d3:66:eb:6d:81:f3:6e:b3:
87:ce:f5:a3:13:df:42:d1:70:5a:cc:42:bf:85:65:
1c:71:93:a1:aa:c3:d0:7f:c5:a6:62:d6:d2:c4:14:
43:a3:20:8b:47:03:12:a1:ff:1c:31:bd:bb:8d:22:
4e:2c:b6:ac:a2:b8:a4:1b:73:8c:17:05:3e:87:24:
a1:2d:d2:b5:0c:6a:06:47:d6:90:f2:5f:5f:e6:d3:
ba:3d:66:24:99:2d:8f:98:ee:82:07:b5:7d:09:09:
fa:75:05:09:76:65:3c:b0:f1:cb:d5:08:33:c1:1c:
b1:f8:7e:66:b5:9f:35:73:db:4d:67:fb:c2:e2:6a:
a1:60:60:8a:d0:af:cc:03:3f:97:2e:38:4b:3d:de:
83:78:5b:fa:da:00:27:8f:69:a6:98:44:77:4e:76:
a9:24:61:fd:d2:2c:b3:35:66:96:9d:f3:cd:c6:69:
d4:67:bc:7d:07:30:22:13:32:17:35:fd:e5:9e:75:
35:78:f2:c5:47:3b:4c:11:06:dc:ef:63:8a:2c:76:
9a:9b:9e:d0:4c:66:19:9e:ec:8a:20:92:63:5c:c7:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:79:0E:09:44:C1:8C:D8:6C:35:6B:0F:7A:C2:91:6E:E3:ED:14
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Tvx5DglEwYzYbDVrD3rCkW7j7RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:5c00::/38
Signature Algorithm: sha256WithRSAEncryption
bd:12:e5:6e:15:60:13:33:e6:59:b0:ae:48:2d:a0:bc:5a:a2:
a8:c1:db:80:c5:04:72:de:ef:7b:7e:c2:e3:33:88:ee:20:3b:
13:64:82:8d:aa:71:08:0b:24:26:f6:bf:c4:a5:bf:af:ad:a7:
ec:8f:90:93:a8:29:8c:ae:47:a3:51:a0:7a:f7:04:1e:75:a3:
1c:78:ab:3b:63:ec:b9:b9:12:dc:94:23:a0:ed:39:29:de:ac:
9a:e1:29:4c:17:35:69:61:27:a8:a2:62:8d:be:f4:06:cc:4f:
79:4c:90:49:60:f2:0e:6d:fd:12:7c:95:d5:00:b8:cb:46:c5:
2f:26:58:0f:5f:6b:29:27:15:5b:44:41:9e:40:fe:96:b2:19:
4e:9d:ae:a9:68:fe:2f:db:a1:f2:19:59:a6:48:ce:2b:e3:a8:
75:32:a1:99:47:a5:64:f2:f9:e9:e9:5a:95:2f:c6:ab:26:93:
ec:f2:e3:a2:8b:76:22:5b:68:3a:b9:20:ce:72:4b:77:94:ad:
63:5e:a2:66:ca:9f:5a:95:07:f1:45:87:9a:73:aa:f7:63:14:
86:37:70:f4:e5:f8:e9:d5:d7:67:8f:48:97:1a:13:8e:6e:50:
b2:72:ab:b6:3d:b6:e1:ad:4a:e8:be:84:d0:f7:d9:25:71:d7:
87:3b:ab:53
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECTODmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODAyYjk1Y2U2MjM5ZDUyNmMzNWFlN2E4ZTJjZWI0OGFlYjgyYjVmMB4XDTIyMDEw
MTEyNTg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGVmYzc5MGUwOTQ0
YzE4Y2Q4NmMzNTZiMGY3YWMyOTE2ZWUzZWQxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZ4HZriWPY0Sh/rj9FlS4Gmwm/RXgjaRo71VGnjVH+ecpJV
JdNm622B826zh871oxPfQtFwWsxCv4VlHHGToarD0H/FpmLW0sQUQ6Mgi0cDEqH/
HDG9u40iTiy2rKK4pBtzjBcFPockoS3StQxqBkfWkPJfX+bTuj1mJJktj5jugge1
fQkJ+nUFCXZlPLDxy9UIM8Ecsfh+ZrWfNXPbTWf7wuJqoWBgitCvzAM/ly44Sz3e
g3hb+toAJ49ppphEd052qSRh/dIsszVmlp3zzcZp1Ge8fQcwIhMyFzX95Z51NXjy
xUc7TBEG3O9jiix2mpue0ExmGZ7siiCSY1zH0H0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBRO/HkOCUTBjNhsNWsPesKRbuPtFDAfBgNVHSMEGDAWgBQIArlc5iOdUmw1
rnqOLOtIrrgrXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8x
L1R2eDVEZ2xFd1l6WWJEVnJEM3JDa1c3ajdSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8xL0NBSzVYT1lqblZK
c05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJphcMA0GCSqGSIb3DQEBCwUA
A4IBAQC9EuVuFWATM+ZZsK5ILaC8WqKowduAxQRy3u97fsLjM4juIDsTZIKNqnEI
CyQm9r/Epb+vrafsj5CTqCmMrkejUaB69wQedaMceKs7Y+y5uRLclCOg7Tkp3qya
4SlMFzVpYSeoomKNvvQGzE95TJBJYPIObf0SfJXVALjLRsUvJlgPX2spJxVbREGe
QP6WshlOna6paP4v26HyGVmmSM4r46h1MqGZR6Vk8vnp6VqVL8arJpPs8uOii3Yi
W2g6uSDOckt3lK1jXqJmyp9alQfxRYeac6r3YxSGN3D05fjp1ddnj0iXGhOOblCy
cqu2PbbhrUrovoTQ99klcdeHO6tT
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:32 2025 by rpki-client