Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa
File: yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa (raw, json)
Hash identifier: CnKaKNvztmDh57Zj1u0js4NgnNuohnRhZUKPjWBfHP8=
Subject key identifier: CA:3C:9C:8C:11:0C:B4:63:E2:56:9C:C2:EA:79:7F:AE:5D:D9:C0:61
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 01857B6CBCD756EBD89F61737C9D34F910CA
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa
Signing time: Wed 04 Jan 2023 06:16:41 +0000
ROA not before: Wed 04 Jan 2023 06:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50058
IP address blocks: 2a06:a346::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:6c:bc:d7:56:eb:d8:9f:61:73:7c:9d:34:f9:10:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jan 4 06:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca3c9c8c110cb463e2569cc2ea797fae5dd9c061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:d4:d9:c6:d5:3b:d0:99:af:86:07:e4:11:
2c:a5:e0:ad:96:ed:c3:85:ef:38:e9:73:b7:ff:37:
bd:28:ec:a1:88:e8:c8:80:bc:c1:8f:c7:82:ac:ef:
aa:32:b8:a3:cc:5d:a1:51:c1:01:45:ec:ad:77:b3:
e0:ac:4f:64:7f:15:26:69:3e:06:70:84:d6:22:40:
3e:54:22:b5:73:2f:6c:f2:62:ee:67:d4:d6:ae:d6:
55:38:fc:6d:8b:56:c4:55:7b:79:e2:67:73:8c:fc:
76:1f:a3:ac:3e:77:d6:36:74:eb:87:68:6d:db:0a:
bb:0c:e5:3d:83:96:40:23:a8:30:97:71:01:3b:23:
9d:bb:96:6f:16:63:46:09:ed:ec:e9:0b:e4:84:10:
53:dd:cf:a7:c6:94:69:8d:f1:bc:68:82:ba:3e:4b:
23:a7:d0:ce:e8:8c:ed:40:21:17:c2:09:a5:67:72:
86:91:87:08:c5:95:5c:d4:c4:9e:c6:07:18:5f:6e:
f3:5f:51:49:81:b7:c8:8c:8d:16:48:e0:de:43:9c:
09:f9:d8:c8:1e:05:10:16:c6:5f:6c:f4:cc:88:10:
b8:d8:19:e1:58:b8:15:5f:db:96:8a:2a:4a:be:13:
e1:2a:f5:ec:de:13:90:e9:b0:1c:67:ac:9d:f2:80:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:9C:8C:11:0C:B4:63:E2:56:9C:C2:EA:79:7F:AE:5D:D9:C0:61
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/yjycjBEMtGPiVpzC6nl_rl3ZwGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a346::/31
Signature Algorithm: sha256WithRSAEncryption
75:40:d7:e6:af:8f:9d:da:15:98:84:2f:e6:09:1f:3c:5d:2f:
42:6b:dc:29:14:ca:8d:aa:5d:c5:bd:16:6e:5e:6e:10:89:e6:
7f:7c:ef:e0:de:6e:4e:62:4b:3d:97:10:de:7f:19:04:38:16:
27:3f:b2:b4:43:b1:85:b1:a2:6b:4f:1c:46:b7:3f:09:65:d3:
a7:af:8c:72:43:0f:14:ae:a8:43:3e:55:ab:4c:6d:5b:0d:67:
eb:5d:14:97:45:ea:e2:36:5c:0d:4a:05:b9:6b:64:9c:d6:4e:
e1:fe:0e:99:94:9c:78:d0:99:34:9d:0a:be:ef:58:e7:35:06:
cb:d0:38:e6:a8:34:71:b2:f4:ef:d9:09:82:52:5f:ee:57:58:
84:56:29:29:0f:17:ba:3a:02:e4:c8:f6:7d:62:8c:c6:50:c1:
38:5b:87:09:b8:a9:7b:1d:9f:5d:64:bb:28:05:b9:97:f7:c6:
83:e0:e3:40:87:26:a4:5b:29:56:b0:a2:6b:29:a7:04:19:ff:
95:ba:20:6b:0b:1e:e7:0a:30:fa:8a:29:69:80:16:25:75:dd:
6c:8c:5c:5c:22:f8:72:8f:55:04:3d:ef:d5:6e:c9:b4:a7:23:
63:b0:27:7d:65:c2:e5:cd:65:a3:36:1b:3d:1d:94:96:2a:0f:
fa:7a:79:a8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYV7bLzXVuvYn2FzfJ00+RDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWIzNWIwODQ2MDhjZDFjMjU5NGJiYWE1ZTQ2OTM3NjAw
NTAwMzcwHhcNMjMwMTA0MDYxNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNjOWM4YzExMGNiNDYzZTI1NjljYzJlYTc5N2ZhZTVkZDljMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/bU2cbVO9CZr4YH5BEspeCtlu3D
he846XO3/ze9KOyhiOjIgLzBj8eCrO+qMrijzF2hUcEBReytd7PgrE9kfxUmaT4G
cITWIkA+VCK1cy9s8mLuZ9TWrtZVOPxti1bEVXt54mdzjPx2H6OsPnfWNnTrh2ht
2wq7DOU9g5ZAI6gwl3EBOyOdu5ZvFmNGCe3s6QvkhBBT3c+nxpRpjfG8aIK6Pksj
p9DO6IztQCEXwgmlZ3KGkYcIxZVc1MSexgcYX27zX1FJgbfIjI0WSODeQ5wJ+djI
HgUQFsZfbPTMiBC42BnhWLgVX9uWiipKvhPhKvXs3hOQ6bAcZ6yd8oAshwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMo8nIwRDLRj4lacwup5f65d2cBhMB8GA1UdIwQY
MBaAFPabNbCEYIzRwllLuqXkaTdgBQA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODct
NjQ1MDk4NTEyOWFhLzEveWp5Y2pCRU10R1BpVnB6QzZubF9ybDNad0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODctNjQ1MDk4NTEyOWFh
LzEvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgajRjAN
BgkqhkiG9w0BAQsFAAOCAQEAdUDX5q+PndoVmIQv5gkfPF0vQmvcKRTKjapdxb0W
bl5uEInmf3zv4N5uTmJLPZcQ3n8ZBDgWJz+ytEOxhbGia08cRrc/CWXTp6+MckMP
FK6oQz5Vq0xtWw1n610Ul0Xq4jZcDUoFuWtknNZO4f4OmZSceNCZNJ0Kvu9Y5zUG
y9A45qg0cbL079kJglJf7ldYhFYpKQ8XujoC5Mj2fWKMxlDBOFuHCbipex2fXWS7
KAW5l/fGg+DjQIcmpFspVrCiaymnBBn/lbogawse5wow+oopaYAWJXXdbIxcXCL4
co9VBD3v1W7JtKcjY7AnfWXC5c1lozYbPR2UlioP+np5qA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:02 2025 by rpki-client