Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/pP1wDE3IFSucO0sXLo-4gTg15-k.roa
File: pP1wDE3IFSucO0sXLo-4gTg15-k.roa (raw, json)
Hash identifier: X5AzqX8uGb+uC4YVtTjvx/onaUKVOlH+GT38h2nkGso=
Subject key identifier: A4:FD:70:0C:4D:C8:15:2B:9C:3B:4B:17:2E:8F:B8:81:38:35:E7:E9
Certificate issuer: /CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
Certificate serial: 01856F79A5EEC6F8FFBE898BD530CDE0961D
Authority key identifier: 56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/pP1wDE3IFSucO0sXLo-4gTg15-k.roa
Signing time: Sun 01 Jan 2023 22:35:21 +0000
ROA not before: Sun 01 Jan 2023 22:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:56c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a5:ee:c6:f8:ff:be:89:8b:d5:30:cd:e0:96:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
Validity
Not Before: Jan 1 22:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4fd700c4dc8152b9c3b4b172e8fb8813835e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:b5:09:db:da:94:03:ce:19:2d:a9:89:f3:
09:f1:db:3f:a9:db:7f:59:92:68:cc:43:39:7b:98:
2a:7a:f5:1f:70:75:4a:e8:38:f4:fb:f8:f2:13:be:
55:85:a4:08:c1:5c:74:83:74:77:c6:02:c1:3d:5b:
13:4f:86:17:94:22:08:df:a3:bf:81:5b:7f:09:5c:
42:e8:f1:c9:0b:0e:90:9c:aa:fd:02:7d:3d:3c:d8:
2f:d9:c7:05:92:51:15:ca:1d:ea:98:02:44:a4:af:
8f:9c:a2:1f:23:c8:41:e0:41:04:cc:63:0d:80:9f:
7a:e3:22:9d:99:ea:0a:44:2a:cc:ff:60:f7:ad:57:
44:4d:32:18:b1:b0:15:0b:91:e2:a8:c6:12:81:0e:
57:9c:ee:4f:2c:18:e3:c5:d6:6c:57:fc:df:5a:c1:
65:2a:3f:76:79:66:fa:68:4f:a2:80:41:31:5c:2d:
bd:13:99:2d:c8:db:84:e7:ec:6e:01:9d:79:b3:b9:
0f:b6:85:99:44:cd:f5:bf:b5:5b:ca:ca:17:00:8f:
21:9a:8a:5b:8c:fb:36:11:ce:d9:6d:80:e5:59:58:
31:eb:f9:cd:1a:f8:5d:f8:47:19:5c:84:53:ac:bf:
3a:9c:63:b3:ed:0b:45:50:d3:c2:d7:72:3e:92:33:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:70:0C:4D:C8:15:2B:9C:3B:4B:17:2E:8F:B8:81:38:35:E7:E9
X509v3 Authority Key Identifier:
keyid:56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/pP1wDE3IFSucO0sXLo-4gTg15-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:9f:22:17:0d:b8:02:c9:bc:29:09:34:6c:bd:1a:05:0a:20:
47:ac:da:48:c4:4b:6e:e3:77:21:95:e8:4c:43:54:55:52:03:
4f:27:6a:d7:8f:92:50:2c:a2:fe:c0:a0:32:7d:30:c4:ec:ea:
95:47:26:44:fd:72:a0:19:bd:39:a1:a0:1a:4a:97:bb:33:6a:
c0:08:12:4c:39:3b:42:d0:be:14:3e:d8:5b:ed:83:5a:0f:8a:
fe:eb:55:ad:25:ba:2c:42:db:a9:cd:0e:fe:50:2b:9b:04:2a:
c7:d7:28:82:48:7b:4d:22:dd:75:b6:d1:9d:04:67:5b:e4:10:
e9:27:c2:1f:fb:c2:c8:62:90:2e:13:9e:b4:b6:b0:57:8a:f6:
54:cf:a9:f0:dc:b1:5b:84:01:e9:2e:4b:48:ae:a3:0b:fc:59:
ba:a0:75:0e:a3:56:b6:2b:a7:d8:5b:78:11:9c:64:07:76:46:
21:31:bd:6b:4b:bd:f5:bd:e9:8a:ee:62:d8:ab:d7:ab:d6:19:
91:41:c3:f2:a9:4c:d4:02:4b:0a:4d:9d:a0:9f:a1:89:16:42:
b0:3f:9a:fd:d8:be:68:ba:5f:db:a3:be:e7:b4:22:58:ca:67:
ed:e6:b1:3c:5b:c9:f2:f9:d0:06:7b:e1:75:ec:e0:da:b7:4f:
76:f9:34:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVveaXuxvj/vomL1TDN4JYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDEzNmIxMTk1YmRkNWNiMDA2ZTZjZmE2MDkxYzQ0NDMy
ZTRiZTkwHhcNMjMwMTAxMjIzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGZkNzAwYzRkYzgxNTJiOWMzYjRiMTcyZThmYjg4MTM4MzVlN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPO1CdvalAPOGS2pifMJ8ds/qdt/
WZJozEM5e5gqevUfcHVK6Dj0+/jyE75VhaQIwVx0g3R3xgLBPVsTT4YXlCII36O/
gVt/CVxC6PHJCw6QnKr9An09PNgv2ccFklEVyh3qmAJEpK+PnKIfI8hB4EEEzGMN
gJ964yKdmeoKRCrM/2D3rVdETTIYsbAVC5HiqMYSgQ5XnO5PLBjjxdZsV/zfWsFl
Kj92eWb6aE+igEExXC29E5ktyNuE5+xuAZ15s7kPtoWZRM31v7VbysoXAI8hmopb
jPs2Ec7ZbYDlWVgx6/nNGvhd+EcZXIRTrL86nGOz7QtFUNPC13I+kjPKswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKT9cAxNyBUrnDtLFy6PuIE4NefpMB8GA1UdIwQY
MBaAFFZBNrEZW91csAbmz6YJHERDLkvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtFMnNSbGIzVnl3QnViUHBna2NSRU11Uy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDMyN2EtM2NmNi00NTQ4LWE2ODQt
NmM1YjdjNjA2NmM3LzEvcFAxd0RFM0lGU3VjTzBzWExvLTRnVGcxNS1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNDMyN2EtM2NmNi00NTQ4LWE2ODQtNmM1YjdjNjA2NmM3
LzEvVmtFMnNSbGIzVnl3QnViUHBna2NSRU11Uy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAip8iFw24Asm8KQk0bL0aBQogR6zaSMRLbuN3IZXo
TENUVVIDTydq14+SUCyi/sCgMn0wxOzqlUcmRP1yoBm9OaGgGkqXuzNqwAgSTDk7
QtC+FD7YW+2DWg+K/utVrSW6LELbqc0O/lArmwQqx9cogkh7TSLddbbRnQRnW+QQ
6SfCH/vCyGKQLhOetLawV4r2VM+p8NyxW4QB6S5LSK6jC/xZuqB1DqNWtiun2Ft4
EZxkB3ZGITG9a0u99b3piu5i2KvXq9YZkUHD8qlM1AJLCk2doJ+hiRZCsD+a/di+
aLpf26O+57QiWMpn7eaxPFvJ8vnQBnvhdezg2rdPdvk0Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:00 2024 by rpki-client on console-ams.rpki-client.org