Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/MiWvlT92V497Hft53tnmlOqg8RA.roa
File: MiWvlT92V497Hft53tnmlOqg8RA.roa (raw, json)
Hash identifier: quSu9WRY8g5VZ7DPj5qHzZ8hzEpCcq6jk9rwkHuGbWc=
Subject key identifier: 32:25:AF:95:3F:76:57:8F:7B:1D:FB:79:DE:D9:E6:94:EA:A0:F1:10
Certificate issuer: /CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Certificate serial: 0181DAD07F8A84ADD94DEB5AA47DBF5EB677
Authority key identifier: 3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/MiWvlT92V497Hft53tnmlOqg8RA.roa
Signing time: Thu 07 Jul 2022 22:38:26 +0000
ROA not before: Thu 07 Jul 2022 22:38:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 2a11:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:d0:7f:8a:84:ad:d9:4d:eb:5a:a4:7d:bf:5e:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Validity
Not Before: Jul 7 22:38:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3225af953f76578f7b1dfb79ded9e694eaa0f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:e1:79:50:14:2a:5f:b4:96:5f:0a:04:97:
8b:6b:fd:9e:a7:e0:08:29:0d:1d:4f:a3:40:d8:1e:
55:4b:1c:da:9f:68:7e:ec:90:39:e8:e0:9b:bb:a7:
13:3c:7d:ef:d4:38:2f:7e:44:0e:4b:e1:fd:b5:c1:
72:23:57:88:03:b2:27:25:df:8e:47:f7:87:9d:54:
c5:12:4b:a2:05:eb:01:75:11:7c:17:b2:0b:d5:d5:
9e:b6:91:03:39:1c:35:63:f6:3f:ca:c1:f0:b0:3e:
69:77:03:61:3e:5b:5f:94:45:71:44:43:f2:30:82:
9c:40:fe:ae:04:15:72:11:a0:a7:b6:72:4b:9f:7a:
a9:b6:fb:6b:e9:40:4e:e4:f3:9d:7f:fa:10:c8:3b:
ff:28:2f:2b:e3:ac:79:5f:2e:29:27:67:75:20:4e:
fc:2f:6d:ad:2f:38:4c:4f:d9:c7:da:33:90:ab:cf:
e9:26:b6:06:4e:8c:06:ca:47:47:dd:42:08:d9:47:
2f:f0:60:22:36:1f:7d:f2:ea:91:88:43:2c:c0:39:
7d:90:4e:d7:b2:b4:8c:6e:5e:df:0a:d9:ea:28:2d:
cb:ff:ec:f6:ee:28:4e:51:eb:af:cd:5b:75:1f:e2:
b1:96:b0:c5:f0:e2:59:3f:ac:cb:45:ea:57:71:1c:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:AF:95:3F:76:57:8F:7B:1D:FB:79:DE:D9:E6:94:EA:A0:F1:10
X509v3 Authority Key Identifier:
keyid:3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/MiWvlT92V497Hft53tnmlOqg8RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/O_aj23oVq1f6uqb-yiiedVdxW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f540::/29
Signature Algorithm: sha256WithRSAEncryption
93:d3:ff:31:ec:db:76:5c:c5:f9:f6:dc:96:e6:8f:dc:f7:b0:
a4:2d:44:dc:2f:c9:2f:2d:ee:e1:34:cf:6d:22:90:d8:8d:22:
65:8e:af:af:44:ee:70:fd:3e:08:8a:1c:8e:93:d6:df:b9:c8:
25:08:95:22:4d:c3:9b:58:e5:f6:a1:f0:5f:4e:96:49:9e:d3:
ec:c3:48:28:a6:45:53:27:e0:d3:c7:10:7a:7f:e2:25:a4:81:
bf:8b:15:c6:f9:64:32:75:99:21:a8:24:51:d5:f1:9f:aa:52:
7c:0f:ff:48:62:90:e0:ed:8d:af:a7:5c:8a:72:54:10:e2:b0:
85:41:01:ac:40:9d:1b:28:da:a2:f8:ac:56:4c:ca:20:22:ae:
b8:d6:bc:1e:48:a6:09:86:de:30:61:44:90:d9:b2:1a:c8:6f:
d5:87:cf:75:f7:38:16:f7:97:91:85:86:7f:4e:9b:6f:4d:e7:
6e:03:90:7b:bb:86:58:17:bf:72:38:f9:00:26:df:b0:f1:ba:
32:df:73:35:16:ee:79:01:1f:89:c0:47:df:f5:05:e4:69:ae:
51:82:57:65:25:6f:57:c4:e0:64:bd:05:09:c6:9b:95:9b:49:
2d:70:7b:66:43:cd:26:e1:11:53:cb:18:77:7f:91:51:7e:59:
77:ea:bc:69
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYHa0H+KhK3ZTetapH2/XrZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZjZhM2RiN2ExNWFiNTdmYWJhYTZmZWNhMjg5ZTc1NTc3
MTViYWMwHhcNMjIwNzA3MjIzODI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjI1YWY5NTNmNzY1NzhmN2IxZGZiNzlkZWQ5ZTY5NGVhYTBmMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno/heVAUKl+0ll8KBJeLa/2ep+AI
KQ0dT6NA2B5VSxzan2h+7JA56OCbu6cTPH3v1DgvfkQOS+H9tcFyI1eIA7InJd+O
R/eHnVTFEkuiBesBdRF8F7IL1dWetpEDORw1Y/Y/ysHwsD5pdwNhPltflEVxREPy
MIKcQP6uBBVyEaCntnJLn3qptvtr6UBO5POdf/oQyDv/KC8r46x5Xy4pJ2d1IE78
L22tLzhMT9nH2jOQq8/pJrYGTowGykdH3UII2Ucv8GAiNh998uqRiEMswDl9kE7X
srSMbl7fCtnqKC3L/+z27ihOUeuvzVt1H+KxlrDF8OJZP6zLRepXcRwb+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDIlr5U/dlePex37ed7Z5pTqoPEQMB8GA1UdIwQY
MBaAFDv2o9t6FatX+rqm/soonnVXcVusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19hajIzb1ZxMWY2dXFiLXlpaWVkVmR4VzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNjdmZTktZTE4Yy00MzUxLWEwYTAt
MWUzNThhZGUyNGZlLzEvTWlXdmxUOTJWNDk3SGZ0NTN0bm1sT3FnOFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNjdmZTktZTE4Yy00MzUxLWEwYTAtMWUzNThhZGUyNGZl
LzEvT19hajIzb1ZxMWY2dXFiLXlpaWVkVmR4VzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhH1QDAN
BgkqhkiG9w0BAQsFAAOCAQEAk9P/MezbdlzF+fbcluaP3PewpC1E3C/JLy3u4TTP
bSKQ2I0iZY6vr0TucP0+CIocjpPW37nIJQiVIk3Dm1jl9qHwX06WSZ7T7MNIKKZF
Uyfg08cQen/iJaSBv4sVxvlkMnWZIagkUdXxn6pSfA//SGKQ4O2Nr6dcinJUEOKw
hUEBrECdGyjaovisVkzKICKuuNa8HkimCYbeMGFEkNmyGshv1YfPdfc4FveXkYWG
f06bb03nbgOQe7uGWBe/cjj5ACbfsPG6Mt9zNRbueQEficBH3/UF5GmuUYJXZSVv
V8TgZL0FCcablZtJLXB7ZkPNJuERU8sYd3+RUX5Zd+q8aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org