Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/c6_xzt9BLk41mFMxdpUEYlDHIjY.roa
File: c6_xzt9BLk41mFMxdpUEYlDHIjY.roa (raw, json)
Hash identifier: q6UOPFnw3H0IbKVjd2ahW72yniR4x7QcvaO5GOePy/E=
Subject key identifier: 73:AF:F1:CE:DF:41:2E:4E:35:98:53:31:76:95:04:62:50:C7:22:36
Certificate issuer: /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial: 018572D5B3C6919CCE8281DA15135C0D758E
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/c6_xzt9BLk41mFMxdpUEYlDHIjY.roa
Signing time: Mon 02 Jan 2023 14:14:45 +0000
ROA not before: Mon 02 Jan 2023 14:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b3:c6:91:9c:ce:82:81:da:15:13:5c:0d:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
Validity
Not Before: Jan 2 14:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73aff1cedf412e4e359853317695046250c72236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:0e:a3:61:31:23:6a:b9:b7:64:b5:44:5c:
e5:c4:02:53:27:52:1a:93:09:0f:ae:01:d2:d0:29:
d4:51:6f:21:23:00:7a:7e:92:48:7f:9c:ae:c9:98:
5b:1c:87:84:8a:cd:a8:45:bb:99:48:12:e6:89:0f:
17:70:ec:82:7d:c4:d1:0b:34:a9:c0:2b:75:ca:56:
a6:1b:2b:02:62:df:6a:b1:33:93:e1:53:74:f5:e8:
48:09:9a:60:0c:2c:8f:ca:b5:3f:6d:e0:a4:7c:3a:
ae:07:9d:3b:88:24:98:f4:86:ae:81:b8:92:3b:0a:
df:42:11:59:ba:0b:15:01:33:30:ea:33:38:f6:55:
8b:e2:3c:02:e4:fe:0b:be:ef:b1:90:d3:dc:cc:6e:
d7:c1:24:06:c8:cf:53:1a:35:aa:aa:16:7b:15:96:
3a:45:c5:b8:ca:bf:ba:d5:1f:3a:c8:e7:82:f8:e1:
42:04:8a:0c:8d:bd:29:74:59:f7:3b:e5:17:29:b3:
ae:59:bc:da:64:a0:50:1e:72:1c:65:ab:93:05:f3:
2c:33:f5:bb:68:ee:60:bf:3f:22:20:4f:a3:73:6a:
a5:d9:dc:aa:e7:f6:7e:dd:e1:e4:65:49:90:1f:bd:
e5:f6:0c:9f:e8:62:11:ae:61:e5:14:66:c2:8e:c4:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:F1:CE:DF:41:2E:4E:35:98:53:31:76:95:04:62:50:C7:22:36
X509v3 Authority Key Identifier:
keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/c6_xzt9BLk41mFMxdpUEYlDHIjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
03:6a:cc:56:ad:0c:8a:8a:a1:30:40:70:67:ce:9f:14:9a:e2:
41:48:06:6e:53:18:b4:66:bc:ea:e5:3b:fe:06:d5:c0:7f:26:
1c:55:f8:cb:0d:4b:7b:00:cc:6e:e0:77:6e:ef:75:86:b2:7b:
5b:78:e5:9f:41:22:4f:b4:1d:cd:5b:62:85:43:6e:45:fb:a2:
b6:c8:85:f8:c1:28:b0:76:75:c9:64:97:f5:be:19:e6:f4:6e:
16:e6:38:36:5b:bd:09:66:e7:76:32:87:96:c3:d7:99:f4:25:
cb:f0:7e:69:f6:d8:9c:8f:dd:dc:24:b8:87:4f:19:a3:ef:a8:
bf:7c:f0:f9:86:cd:7d:81:63:a5:2f:56:c1:26:f2:d4:b5:53:
08:35:93:18:83:3d:77:82:8f:6b:18:6e:ec:86:ea:e3:c6:29:
28:f2:2d:02:50:13:74:88:c6:a0:46:d5:89:d2:7b:10:64:b1:
46:f9:dd:f8:e8:f5:ea:19:e6:b4:b9:3a:27:4f:6c:35:0c:31:
0b:dc:f9:d9:d3:60:8d:d3:38:64:d1:0a:31:00:ca:66:0e:da:
33:68:66:e6:25:e1:73:72:0e:3a:42:9c:c2:88:52:d4:d2:f0:
ee:2e:e6:bb:bd:67:60:16:bd:80:ed:f7:62:6c:52:c7:81:d3:
bb:b2:05:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVy1bPGkZzOgoHaFRNcDXWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzE0MTIyMDk2OGQwYWU0NDA0NWU2ODM2OTk5OTI4ZWNh
ODY0YjgwHhcNMjMwMTAyMTQxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FmZjFjZWRmNDEyZTRlMzU5ODUzMzE3Njk1MDQ2MjUwYzcyMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpUOo2ExI2q5t2S1RFzlxAJTJ1Ia
kwkPrgHS0CnUUW8hIwB6fpJIf5yuyZhbHIeEis2oRbuZSBLmiQ8XcOyCfcTRCzSp
wCt1ylamGysCYt9qsTOT4VN09ehICZpgDCyPyrU/beCkfDquB507iCSY9IaugbiS
OwrfQhFZugsVATMw6jM49lWL4jwC5P4Lvu+xkNPczG7XwSQGyM9TGjWqqhZ7FZY6
RcW4yr+61R86yOeC+OFCBIoMjb0pdFn3O+UXKbOuWbzaZKBQHnIcZauTBfMsM/W7
aO5gvz8iIE+jc2ql2dyq5/Z+3eHkZUmQH73l9gyf6GIRrmHlFGbCjsQuWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHOv8c7fQS5ONZhTMXaVBGJQxyI2MB8GA1UdIwQY
MBaAFO0xQSIJaNCuRAReaDaZmSjsqGS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RGQklnbG8wSzVFQkY1b05wbVpLT3lvWkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80NjA5YWQtMGI5NS00MGU0LWIwNTMt
YWQ1ZDUzNjk5ZGQ4LzEvYzZfeHp0OUJMazQxbUZNeGRwVUVZbERISWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80NjA5YWQtMGI5NS00MGU0LWIwNTMtYWQ1ZDUzNjk5ZGQ4
LzEvN1RGQklnbG8wSzVFQkY1b05wbVpLT3lvWkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCTgDAN
BgkqhkiG9w0BAQsFAAOCAQEAA2rMVq0MioqhMEBwZ86fFJriQUgGblMYtGa86uU7
/gbVwH8mHFX4yw1LewDMbuB3bu91hrJ7W3jln0EiT7QdzVtihUNuRfuitsiF+MEo
sHZ1yWSX9b4Z5vRuFuY4Nlu9CWbndjKHlsPXmfQly/B+afbYnI/d3CS4h08Zo++o
v3zw+YbNfYFjpS9WwSby1LVTCDWTGIM9d4KPaxhu7Ibq48YpKPItAlATdIjGoEbV
idJ7EGSxRvnd+Oj16hnmtLk6J09sNQwxC9z52dNgjdM4ZNEKMQDKZg7aM2hm5iXh
c3IOOkKcwohS1NLw7i7mu71nYBa9gO33YmxSx4HTu7IF6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 21 09:44:01 2023 by rpki-client on console-fra.rpki-client.org