Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/DVE67YxXG6i-4oQsF-SnQ15aZAM.roa
File: DVE67YxXG6i-4oQsF-SnQ15aZAM.roa (raw, json)
Hash identifier: U/8CWW3Ks+DFf4VNgIdlCLxUy+bWM8/WW0gqa1VkSa0=
Subject key identifier: 0D:51:3A:ED:8C:57:1B:A8:BE:E2:84:2C:17:E4:A7:43:5E:5A:64:03
Certificate issuer: /CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
Certificate serial: 01856BD38055E05B6B1EA73CDFE64966A57B
Authority key identifier: BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/DVE67YxXG6i-4oQsF-SnQ15aZAM.roa
Signing time: Sun 01 Jan 2023 05:35:01 +0000
ROA not before: Sun 01 Jan 2023 05:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:c900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:80:55:e0:5b:6b:1e:a7:3c:df:e6:49:66:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
Validity
Not Before: Jan 1 05:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d513aed8c571ba8bee2842c17e4a7435e5a6403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:44:4e:4d:80:d1:7b:da:16:1d:dc:f1:1b:
ef:27:24:f4:b0:af:25:ef:cb:d2:ef:94:cc:5a:06:
85:dc:0f:f2:9a:f3:7b:8b:a7:de:54:af:57:a4:89:
7a:48:d2:66:d4:2d:75:4c:99:a1:05:5f:69:e7:3f:
37:ce:7f:0e:44:fd:af:ec:65:35:34:3e:80:27:ae:
ee:3a:0c:ea:3f:c3:17:e3:4e:54:02:54:31:a3:89:
2f:c7:a6:3e:85:38:90:cb:61:7e:36:26:24:37:0d:
aa:64:c3:fd:e1:7d:9c:cb:04:54:01:c7:1f:65:fe:
ed:82:00:b3:d9:3f:b9:be:d8:12:a4:f9:5c:b9:2c:
d0:04:a8:49:f2:3c:59:21:e0:1a:cc:92:56:c9:10:
e6:57:8f:94:45:6f:b4:b4:43:d5:c7:ef:b4:34:3b:
01:4b:e1:4c:c6:a1:07:b0:86:f1:89:e2:a8:a6:41:
9f:01:0a:52:93:e9:6e:14:5c:bf:cb:ef:97:36:e2:
c9:c8:c2:cc:ce:74:4d:73:ef:77:30:ae:f1:c7:48:
9e:e1:cd:17:b1:e8:72:35:6c:be:9c:22:f0:ab:a7:
2c:38:94:8a:79:09:3f:f5:ad:30:cb:e3:02:8a:45:
a9:77:2c:c8:84:b3:69:43:f8:fc:24:3d:69:08:30:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:51:3A:ED:8C:57:1B:A8:BE:E2:84:2C:17:E4:A7:43:5E:5A:64:03
X509v3 Authority Key Identifier:
keyid:BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/DVE67YxXG6i-4oQsF-SnQ15aZAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/upYU0dXxzF1uHsUwqgSKsker_og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c900::/29
Signature Algorithm: sha256WithRSAEncryption
67:c5:00:00:c7:d5:5e:6c:ff:b8:56:0a:2c:02:20:c3:98:aa:
9f:74:33:a0:3a:5c:6b:df:ed:19:a6:38:bb:ef:a2:3b:3c:dc:
e5:30:6d:0b:95:51:32:f3:6d:f8:18:bf:41:f8:5a:a9:3a:da:
02:8c:e4:fa:f0:da:5a:de:ab:90:56:74:48:9a:04:94:45:51:
66:de:c5:4c:2f:32:72:4d:06:a1:60:98:e0:a2:99:54:49:92:
fa:5e:49:66:dd:4f:99:1f:27:8e:a2:87:a3:eb:54:03:09:0c:
0b:ab:ca:80:c2:5b:b8:26:50:87:f5:b0:b0:98:7d:de:cb:7d:
12:09:d3:a6:c2:9f:66:13:4f:ba:66:b7:5e:9a:bd:f3:bf:f3:
5e:f1:78:48:ab:e6:bb:d2:21:92:9e:ff:62:3a:7b:cf:4a:65:
b8:9b:b9:97:d6:3e:87:42:7d:4c:fb:a4:81:73:4c:ef:0a:7f:
30:2b:9b:9f:4a:3f:05:b9:e0:40:95:8f:59:50:e2:1f:1c:34:
c6:c8:21:17:2a:d2:5d:d6:dd:e9:b9:7a:bf:34:b2:ca:73:8a:
ba:94:7c:a2:dc:8f:cd:03:be:6a:ef:0f:06:2e:3b:ad:55:45:
db:76:0d:57:6a:0f:ec:24:26:e5:99:14:80:70:d9:a5:3f:e1:
a8:2c:78:67
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVr04BV4FtrHqc83+ZJZqV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOTYxNGQxZDVmMWNjNWQ2ZTFlYzUzMGFhMDQ4YWIyNDdh
YmZlODgwHhcNMjMwMTAxMDUzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDUxM2FlZDhjNTcxYmE4YmVlMjg0MmMxN2U0YTc0MzVlNWE2NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdETk2A0XvaFh3c8RvvJyT0sK8l
78vS75TMWgaF3A/ymvN7i6feVK9XpIl6SNJm1C11TJmhBV9p5z83zn8ORP2v7GU1
ND6AJ67uOgzqP8MX405UAlQxo4kvx6Y+hTiQy2F+NiYkNw2qZMP94X2cywRUAccf
Zf7tggCz2T+5vtgSpPlcuSzQBKhJ8jxZIeAazJJWyRDmV4+URW+0tEPVx++0NDsB
S+FMxqEHsIbxieKopkGfAQpSk+luFFy/y++XNuLJyMLMznRNc+93MK7xx0ie4c0X
sehyNWy+nCLwq6csOJSKeQk/9a0wy+MCikWpdyzIhLNpQ/j8JD1pCDDh4QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA1ROu2MVxuovuKELBfkp0NeWmQDMB8GA1UdIwQY
MBaAFLqWFNHV8cxdbh7FMKoEirJHq/6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXBZVTBkWHh6RjF1SHNVd3FnU0tza2VyX29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGNlNDQtZTcxYy00MmE0LWI2Y2Ut
ODgzMGJiYjQzMjFiLzEvRFZFNjdZeFhHNmktNG9Rc0YtU25RMTVhWkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGNlNDQtZTcxYy00MmE0LWI2Y2UtODgzMGJiYjQzMjFi
LzEvdXBZVTBkWHh6RjF1SHNVd3FnU0tza2VyX29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLJADAN
BgkqhkiG9w0BAQsFAAOCAQEAZ8UAAMfVXmz/uFYKLAIgw5iqn3QzoDpca9/tGaY4
u++iOzzc5TBtC5VRMvNt+Bi/QfhaqTraAozk+vDaWt6rkFZ0SJoElEVRZt7FTC8y
ck0GoWCY4KKZVEmS+l5JZt1PmR8njqKHo+tUAwkMC6vKgMJbuCZQh/WwsJh93st9
EgnTpsKfZhNPuma3Xpq987/zXvF4SKvmu9Ihkp7/Yjp7z0pluJu5l9Y+h0J9TPuk
gXNM7wp/MCubn0o/BbngQJWPWVDiHxw0xsghFyrSXdbd6bl6vzSyynOKupR8otyP
zQO+au8PBi47rVVF23YNV2oP7CQm5ZkUgHDZpT/hqCx4Zw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client