Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/xIANyQPi33BAodXEWFRPg2qyZsE.roa
File: xIANyQPi33BAodXEWFRPg2qyZsE.roa (raw, json)
Hash identifier: G+3tQ/ynT8COt72V0CvjewH71/BU3O37RjGFegeovuc=
Subject key identifier: C4:80:0D:C9:03:E2:DF:70:40:A1:D5:C4:58:54:4F:83:6A:B2:66:C1
Certificate issuer: /CN=5588153f3ec6b36a3fc6850d05337236f3ced112
Certificate serial: 01863B0B18128E530698CBF9E703A5DBA41A
Authority key identifier: 55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/xIANyQPi33BAodXEWFRPg2qyZsE.roa
Signing time: Fri 10 Feb 2023 11:17:08 +0000
ROA not before: Fri 10 Feb 2023 11:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a13:b500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:0b:18:12:8e:53:06:98:cb:f9:e7:03:a5:db:a4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588153f3ec6b36a3fc6850d05337236f3ced112
Validity
Not Before: Feb 10 11:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4800dc903e2df7040a1d5c458544f836ab266c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:5e:97:5f:c4:ca:63:1b:f6:18:00:c3:fd:
1c:a7:58:33:ec:d3:ea:4d:62:6b:a1:65:18:30:ad:
88:4c:17:f3:70:78:1d:4b:6d:ae:71:a5:86:91:5c:
21:9e:34:7a:c4:38:8e:02:7a:80:7d:e2:1a:23:b1:
3b:9b:e4:29:2e:ef:57:22:28:f0:17:6e:fc:ca:0f:
47:e5:77:d8:fe:01:fe:8e:39:92:4a:c6:90:d4:5d:
b3:df:bf:42:65:30:9f:15:14:04:a0:45:b4:02:50:
76:52:51:3b:e1:83:fc:ee:28:34:68:29:4d:42:d0:
7c:c1:be:09:88:11:99:1b:6a:93:09:4d:57:1d:08:
59:56:b3:c6:1a:27:d2:de:7d:2c:46:83:b0:c0:59:
27:bd:74:60:b9:03:24:84:96:3b:95:4b:bb:fa:9f:
27:1f:0a:0c:6d:0b:d3:5c:c3:f3:e6:d0:56:48:38:
fa:e0:19:50:50:a9:a4:a3:1e:92:33:81:61:23:c9:
ed:95:f8:04:76:55:6d:15:d1:37:00:77:67:85:32:
56:93:5d:f5:64:69:8a:6e:0f:e4:8f:57:9f:f7:ec:
f9:7f:cf:3f:a4:d9:f9:3b:84:3e:f5:e7:b6:6b:f9:
36:82:24:b6:8e:3f:f2:f1:29:08:19:a2:3c:5b:24:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:0D:C9:03:E2:DF:70:40:A1:D5:C4:58:54:4F:83:6A:B2:66:C1
X509v3 Authority Key Identifier:
keyid:55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/xIANyQPi33BAodXEWFRPg2qyZsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b500::/29
Signature Algorithm: sha256WithRSAEncryption
8d:76:2f:5c:b6:4f:ea:00:e6:0e:1b:af:b4:19:5e:92:cd:bd:
5a:21:4e:fc:b8:c6:48:6a:d4:1a:97:00:38:16:6b:96:2e:ce:
10:1b:bc:35:99:fd:12:ac:79:0c:ad:98:87:ef:74:11:b1:4a:
75:99:01:42:52:e9:80:6b:64:a6:94:4d:ce:f1:86:c7:36:81:
b1:48:56:21:d4:c4:cb:09:56:4c:34:97:11:0e:b3:93:85:7b:
49:bd:5d:e4:d6:99:b1:f1:77:61:b9:98:74:a4:6f:09:58:28:
d0:cd:1d:11:2a:4c:2f:23:13:88:cb:ca:59:0a:ff:11:0a:cf:
27:89:77:70:eb:ce:be:37:65:e4:58:ca:67:56:f8:48:04:9a:
b6:36:d2:5d:a2:3f:16:9d:88:6c:97:97:37:09:b3:90:1d:af:
a6:c0:92:c1:dd:b0:10:bd:23:be:d4:1b:9e:c9:fc:90:55:d5:
c7:55:08:84:cc:24:c0:c5:0f:84:30:d9:b9:67:c9:e4:b6:d0:
80:1e:88:be:12:16:98:59:fc:b1:6f:b4:6d:9d:b6:3b:c3:7f:
41:f9:70:c0:09:72:47:fb:a3:94:7c:eb:4f:85:a2:1e:5e:96:
9d:a2:66:4c:b8:5b:e4:87:13:27:7c:7b:2e:27:fd:3a:1c:ea:
49:a9:be:d4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYY7CxgSjlMGmMv55wOl26QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODgxNTNmM2VjNmIzNmEzZmM2ODUwZDA1MzM3MjM2ZjNj
ZWQxMTIwHhcNMjMwMjEwMTExNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDgwMGRjOTAzZTJkZjcwNDBhMWQ1YzQ1ODU0NGY4MzZhYjI2NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXlel1/EymMb9hgAw/0cp1gz7NPq
TWJroWUYMK2ITBfzcHgdS22ucaWGkVwhnjR6xDiOAnqAfeIaI7E7m+QpLu9XIijw
F278yg9H5XfY/gH+jjmSSsaQ1F2z379CZTCfFRQEoEW0AlB2UlE74YP87ig0aClN
QtB8wb4JiBGZG2qTCU1XHQhZVrPGGifS3n0sRoOwwFknvXRguQMkhJY7lUu7+p8n
HwoMbQvTXMPz5tBWSDj64BlQUKmkox6SM4FhI8ntlfgEdlVtFdE3AHdnhTJWk131
ZGmKbg/kj1ef9+z5f88/pNn5O4Q+9ee2a/k2giS2jj/y8SkIGaI8WyTzzQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMSADckD4t9wQKHVxFhUT4NqsmbBMB8GA1UdIwQY
MBaAFFWIFT8+xrNqP8aFDQUzcjbzztESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllnVlB6N0dzMm9feG9VTkJUTnlOdlBPMFJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YmE2M2MtODNkMi00MTU3LWI0ZmYt
MDAxMDRlNzRlY2NkLzEveElBTnlRUGkzM0JBb2RYRVdGUlBnMnF5WnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82YmE2M2MtODNkMi00MTU3LWI0ZmYtMDAxMDRlNzRlY2Nk
LzEvVllnVlB6N0dzMm9feG9VTkJUTnlOdlBPMFJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO1ADAN
BgkqhkiG9w0BAQsFAAOCAQEAjXYvXLZP6gDmDhuvtBleks29WiFO/LjGSGrUGpcA
OBZrli7OEBu8NZn9Eqx5DK2Yh+90EbFKdZkBQlLpgGtkppRNzvGGxzaBsUhWIdTE
ywlWTDSXEQ6zk4V7Sb1d5NaZsfF3YbmYdKRvCVgo0M0dESpMLyMTiMvKWQr/EQrP
J4l3cOvOvjdl5FjKZ1b4SASatjbSXaI/Fp2IbJeXNwmzkB2vpsCSwd2wEL0jvtQb
nsn8kFXVx1UIhMwkwMUPhDDZuWfJ5LbQgB6IvhIWmFn8sW+0bZ22O8N/QflwwAly
R/ujlHzrT4WiHl6WnaJmTLhb5IcTJ3x7Lif9OhzqSam+1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org