Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/d4JzWchz1_V4zhmJIlnTboC3j8Q.roa
File: d4JzWchz1_V4zhmJIlnTboC3j8Q.roa (raw, json)
Hash identifier: UxVP9yzGaMTjhKkIictOMDWpj864hRS4ZAVuUW4ZZ8Q=
Subject key identifier: 77:82:73:59:C8:73:D7:F5:78:CE:19:89:22:59:D3:6E:80:B7:8F:C4
Certificate issuer: /CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Certificate serial: 01857142F60C9883E5D2F7DEFA72EBC25AC8
Authority key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/d4JzWchz1_V4zhmJIlnTboC3j8Q.roa
Signing time: Mon 02 Jan 2023 06:54:51 +0000
ROA not before: Mon 02 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:fd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f6:0c:98:83:e5:d2:f7:de:fa:72:eb:c2:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Validity
Not Before: Jan 2 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77827359c873d7f578ce19892259d36e80b78fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:ee:12:a7:4d:fe:c0:fd:3e:0b:02:5f:bf:
05:9b:2b:34:eb:e3:0e:f5:96:9b:2e:24:88:00:ff:
12:88:30:9e:23:e5:cb:f4:4b:f3:f1:52:fd:58:ea:
bc:ee:38:77:49:7a:1f:02:3a:81:e8:34:5e:e2:91:
21:5a:1a:cd:41:a6:d4:cb:22:d8:ba:58:89:df:b8:
f7:fb:65:29:04:6e:0f:d2:cf:17:d5:f6:66:fa:70:
08:0a:3c:de:60:7c:d1:50:0a:91:a9:6d:9c:f6:a1:
5e:69:68:aa:bd:65:2c:03:05:ea:1c:89:4b:61:60:
65:e3:6e:be:f5:74:59:7b:b4:5b:4e:47:89:2e:44:
88:6e:02:80:8b:3f:16:78:fa:a2:9f:de:fd:8e:c4:
da:62:da:7c:15:6b:2a:e6:08:17:de:01:1a:d4:98:
64:2f:96:ca:a0:f9:a2:a7:29:71:89:df:1a:f3:6d:
d6:54:88:1e:02:91:42:19:a3:dd:d3:44:61:e4:67:
89:4b:00:97:df:c6:d7:28:3c:9f:54:85:e1:fb:8b:
44:61:64:1a:99:e4:d9:5a:b5:59:22:18:f1:7c:97:
95:93:81:4b:03:1d:88:78:11:f4:3d:2f:70:cd:92:
8b:3b:18:d1:21:ab:ec:27:50:1a:66:35:94:5f:0a:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:73:59:C8:73:D7:F5:78:CE:19:89:22:59:D3:6E:80:B7:8F:C4
X509v3 Authority Key Identifier:
keyid:5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/d4JzWchz1_V4zhmJIlnTboC3j8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
90:cb:6b:7c:f7:d1:62:fb:c7:39:11:52:1f:b0:81:51:1b:1a:
1c:4b:b1:6a:01:f0:47:cc:ad:90:6a:dc:3d:4b:3b:97:22:68:
d4:13:0c:93:41:ad:32:97:0e:40:ea:bc:46:ca:eb:f6:76:b9:
33:9d:35:70:65:d2:d1:78:a5:fd:98:09:00:fb:c6:62:10:76:
00:9d:7a:10:01:f6:a3:c8:64:55:65:e0:9b:f8:95:a3:09:54:
b0:ad:da:e0:0b:eb:f1:82:c7:08:bd:c5:9b:d3:50:61:b1:3a:
0e:d4:d5:a8:2c:27:70:46:9b:eb:75:30:6c:34:7a:17:28:53:
7f:91:c1:c6:4c:43:7c:46:35:2d:a0:ed:b4:82:0a:41:c0:eb:
b9:c8:ab:8c:50:89:73:ca:72:37:bc:d7:f5:bb:72:a2:f1:f4:
23:db:8e:99:0c:f6:90:02:72:85:a2:bc:cf:08:cd:26:dd:b8:
1a:31:93:e3:19:d6:bb:74:87:2b:2c:87:42:03:f8:82:1e:99:
d2:5b:5b:c5:da:99:51:84:6b:52:cf:b3:e2:0e:49:f4:b9:6d:
6a:b8:5d:71:30:94:cf:e3:b6:3b:3e:3b:8e:f6:c4:c8:93:5b:
f0:32:a7:c3:f2:f6:31:6e:bb:fd:48:f2:78:cb:79:d5:aa:3b:
69:fd:4c:c1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxQvYMmIPl0vfe+nLrwlrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZDM1MWU1ZWIyOTYyZmMxNmZjMTRlN2M2ZTUxYjg0YWQx
ZGU4YjUwHhcNMjMwMTAyMDY1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzgyNzM1OWM4NzNkN2Y1NzhjZTE5ODkyMjU5ZDM2ZTgwYjc4ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse/uEqdN/sD9PgsCX78Fmys06+MO
9ZabLiSIAP8SiDCeI+XL9Evz8VL9WOq87jh3SXofAjqB6DRe4pEhWhrNQabUyyLY
uliJ37j3+2UpBG4P0s8X1fZm+nAICjzeYHzRUAqRqW2c9qFeaWiqvWUsAwXqHIlL
YWBl426+9XRZe7RbTkeJLkSIbgKAiz8WePqin979jsTaYtp8FWsq5ggX3gEa1Jhk
L5bKoPmipylxid8a823WVIgeApFCGaPd00Rh5GeJSwCX38bXKDyfVIXh+4tEYWQa
meTZWrVZIhjxfJeVk4FLAx2IeBH0PS9wzZKLOxjRIavsJ1AaZjWUXwrUPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHeCc1nIc9f1eM4ZiSJZ026At4/EMB8GA1UdIwQY
MBaAFF/TUeXrKWL8FvwU58blG4StHei1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDlOUjVlc3BZdndXX0JUbnh1VWJoSzBkNkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85NDU3YzctYmRmZS00YzhhLThmNTQt
NzQ3ZDg4MzY3YWRjLzEvZDRKeldjaHoxX1Y0emhtSklsblRib0MzajhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85NDU3YzctYmRmZS00YzhhLThmNTQtNzQ3ZDg4MzY3YWRj
LzEvWDlOUjVlc3BZdndXX0JUbnh1VWJoSzBkNkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL9gDAN
BgkqhkiG9w0BAQsFAAOCAQEAkMtrfPfRYvvHORFSH7CBURsaHEuxagHwR8ytkGrc
PUs7lyJo1BMMk0GtMpcOQOq8Rsrr9na5M501cGXS0Xil/ZgJAPvGYhB2AJ16EAH2
o8hkVWXgm/iVowlUsK3a4Avr8YLHCL3Fm9NQYbE6DtTVqCwncEab63UwbDR6FyhT
f5HBxkxDfEY1LaDttIIKQcDrucirjFCJc8pyN7zX9btyovH0I9uOmQz2kAJyhaK8
zwjNJt24GjGT4xnWu3SHKyyHQgP4gh6Z0ltbxdqZUYRrUs+z4g5J9LltarhdcTCU
z+O2Oz47jvbEyJNb8DKnw/L2MW67/UjyeMt51ao7af1MwQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:47 2025 by rpki-client