Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/am_8XjOR9HN-VM4xeoeA3MAtWps.roa
File: am_8XjOR9HN-VM4xeoeA3MAtWps.roa (raw, json)
Hash identifier: bW5+vSYyzS/rGwHOD+NrhgYrlUKqU1/mZkzSWLaLDPs=
Subject key identifier: 6A:6F:FC:5E:33:91:F4:73:7E:54:CE:31:7A:87:80:DC:C0:2D:5A:9B
Certificate issuer: /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial: 01857139D923B310B20530B1A2A1DE23D894
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/am_8XjOR9HN-VM4xeoeA3MAtWps.roa
Signing time: Mon 02 Jan 2023 06:44:54 +0000
ROA not before: Mon 02 Jan 2023 06:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 148996
IP address blocks: 2a12:6f44::/32 maxlen: 32
2a12:6f42::/32 maxlen: 32
2a12:6f40::/32 maxlen: 32
2a12:6f46::/32 maxlen: 32
2a12:6f43::/32 maxlen: 32
2a12:6f47::/32 maxlen: 32
2a12:6f45::/32 maxlen: 32
2a12:6f41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d9:23:b3:10:b2:05:30:b1:a2:a1:de:23:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Validity
Not Before: Jan 2 06:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6ffc5e3391f4737e54ce317a8780dcc02d5a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:4e:ad:df:6a:19:9e:80:42:70:9b:91:69:
ed:bb:e0:ec:e2:bb:63:77:3e:ea:9a:69:a0:94:b9:
96:4c:92:f7:9d:69:d5:17:d6:03:9f:4d:22:d0:94:
16:34:93:d2:00:ba:b5:65:19:db:3a:65:64:c1:d8:
1f:86:b5:6b:eb:6c:10:68:74:ed:ff:b3:ed:34:19:
91:86:d4:60:6e:0e:58:29:58:74:67:9e:d5:32:be:
02:44:35:14:bf:eb:2b:62:23:aa:f0:c8:31:59:1b:
c2:c6:b9:b4:7e:c3:f2:15:c7:f5:dc:de:48:00:72:
78:4e:3c:74:fc:3b:1a:26:88:a8:68:ec:04:8c:20:
d5:6e:ee:74:0f:50:4d:95:07:6f:5b:4f:6a:dd:47:
46:53:f0:80:a8:a1:4c:30:c4:a7:af:e1:f4:1b:41:
7e:7b:ee:18:dc:4c:25:7d:87:f8:7b:cc:e9:cb:5e:
88:a6:a0:b8:28:51:af:f7:81:95:2e:fc:35:15:43:
94:d8:1c:3e:9b:6e:47:fe:ee:c4:46:a1:4a:98:81:
55:53:27:e9:c1:3e:bc:31:30:98:ed:de:16:e1:68:
22:af:57:46:b7:99:11:94:69:f5:46:b9:23:97:50:
df:2b:24:f0:86:60:9c:6f:ba:55:4b:18:1b:89:0c:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:FC:5E:33:91:F4:73:7E:54:CE:31:7A:87:80:DC:C0:2D:5A:9B
X509v3 Authority Key Identifier:
keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/am_8XjOR9HN-VM4xeoeA3MAtWps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
ab:d7:b0:ce:5b:5b:33:2a:d0:81:52:2a:cf:37:57:91:ff:a6:
25:43:88:a7:1f:bb:9c:e6:dd:73:1b:66:a3:68:4b:a4:3d:bc:
54:5b:85:f7:cc:46:f2:57:27:19:2b:3f:ab:4a:6f:89:ea:35:
ec:6f:aa:a9:5e:a7:08:96:aa:29:a7:df:cf:72:83:84:77:dc:
0b:09:53:6b:44:18:63:13:72:5c:f3:88:23:ca:59:c3:32:34:
d6:06:fe:2b:5a:cb:8d:bb:3e:c5:1f:c4:33:7b:1e:16:7b:fc:
b0:59:4a:39:01:a9:cf:1e:48:33:3a:71:c4:4a:a0:16:c7:d4:
db:dd:81:8b:fd:d9:f9:12:1a:ad:28:8c:96:ed:2f:a2:25:d6:
e3:c1:be:5d:a6:2b:2e:dd:ba:8b:eb:45:2a:cf:25:7e:e0:39:
db:b2:18:96:20:75:12:a5:c7:a1:ae:2c:d1:cc:ad:c8:18:e5:
9c:41:9f:1b:53:ad:8b:bb:19:22:3f:34:27:ea:af:20:d3:47:
ac:d5:99:2e:51:5c:02:90:98:3e:85:17:e3:7a:79:9c:75:a0:
cf:39:0e:df:31:9a:79:cd:2e:ea:29:4a:dd:3f:1e:17:0f:73:
eb:25:c3:66:8d:bc:57:1c:49:1a:88:10:7b:1b:bb:3b:09:87:
63:a8:c4:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxOdkjsxCyBTCxoqHeI9iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmI2YTNkOGUyMjY0ZjEwNThiMTJhYmZkZWJiZWExYzI0
OGM2NjcwHhcNMjMwMTAyMDY0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTZmZmM1ZTMzOTFmNDczN2U1NGNlMzE3YTg3ODBkY2MwMmQ1YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyhOrd9qGZ6AQnCbkWntu+Ds4rtj
dz7qmmmglLmWTJL3nWnVF9YDn00i0JQWNJPSALq1ZRnbOmVkwdgfhrVr62wQaHTt
/7PtNBmRhtRgbg5YKVh0Z57VMr4CRDUUv+srYiOq8MgxWRvCxrm0fsPyFcf13N5I
AHJ4Tjx0/DsaJoioaOwEjCDVbu50D1BNlQdvW09q3UdGU/CAqKFMMMSnr+H0G0F+
e+4Y3EwlfYf4e8zpy16IpqC4KFGv94GVLvw1FUOU2Bw+m25H/u7ERqFKmIFVUyfp
wT68MTCY7d4W4Wgir1dGt5kRlGn1Rrkjl1DfKyTwhmCcb7pVSxgbiQzdqwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGpv/F4zkfRzflTOMXqHgNzALVqbMB8GA1UdIwQY
MBaAFL/7aj2OImTxBYsSq/3rvqHCSMZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl90cVBZNGlaUEVGaXhLcl9ldS1vY0pJeG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NTZlZDQtOWI1Zi00MmUzLThkNjEt
ZTRmYmI5MjM4Y2E3LzEvYW1fOFhqT1I5SE4tVk00eGVvZUEzTUF0V3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NTZlZDQtOWI1Zi00MmUzLThkNjEtZTRmYmI5MjM4Y2E3
LzEvdl90cVBZNGlaUEVGaXhLcl9ldS1vY0pJeG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJvQDAN
BgkqhkiG9w0BAQsFAAOCAQEAq9ewzltbMyrQgVIqzzdXkf+mJUOIpx+7nObdcxtm
o2hLpD28VFuF98xG8lcnGSs/q0pvieo17G+qqV6nCJaqKaffz3KDhHfcCwlTa0QY
YxNyXPOII8pZwzI01gb+K1rLjbs+xR/EM3seFnv8sFlKOQGpzx5IMzpxxEqgFsfU
292Bi/3Z+RIarSiMlu0voiXW48G+XaYrLt26i+tFKs8lfuA527IYliB1EqXHoa4s
0cytyBjlnEGfG1Oti7sZIj80J+qvINNHrNWZLlFcApCYPoUX43p5nHWgzzkO3zGa
ec0u6ilK3T8eFw9z6yXDZo28VxxJGogQexu7OwmHY6jEZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org