Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C-Y_6Q9361wHKd3p3ZGX-vyQ6cA.roa
File: C-Y_6Q9361wHKd3p3ZGX-vyQ6cA.roa (raw, json)
Hash identifier: z+dNQ8H4wrKZ11elkBxTbsW8nrqDBswkX1mQhacm+Lw=
Subject key identifier: 0B:E6:3F:E9:0F:77:EB:5C:07:29:DD:E9:DD:91:97:FA:FC:90:E9:C0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EB4D4850F0076AB2DCB3D461146696C2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C-Y_6Q9361wHKd3p3ZGX-vyQ6cA.roa
Signing time: Wed 07 Dec 2022 06:37:01 +0000
ROA not before: Wed 07 Dec 2022 06:37:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200885
IP address blocks: 2a0a:6040:ea00::/40 maxlen: 48
2a06:a005:2570::/44 maxlen: 48
2a06:a005:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:4d:48:50:f0:07:6a:b2:dc:b3:d4:61:14:66:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 06:37:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0be63fe90f77eb5c0729dde9dd9197fafc90e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:c5:c6:16:51:32:e4:7d:35:a7:1d:55:1c:
ff:1e:c1:b7:78:e9:d3:70:ac:fb:6e:48:16:96:00:
bc:6c:d8:59:63:4b:f2:9f:a3:60:a2:9e:00:53:94:
ec:66:50:3f:f2:67:c9:f9:0c:62:b1:b2:44:e3:a3:
7e:df:a5:34:9d:fb:df:5f:c8:1c:8d:5a:66:59:35:
82:13:2d:7b:01:48:cf:b8:58:97:70:39:6f:72:7b:
8b:0a:c1:f0:78:55:b3:ca:a2:ac:ac:28:fe:dd:06:
56:77:da:82:ae:ff:4d:6c:1b:6b:34:02:2c:e2:5e:
e2:12:91:be:8b:b5:ab:1b:c4:f0:07:7a:b0:04:51:
9b:ae:96:7a:68:a6:be:cd:6b:34:87:3f:ad:0c:b5:
62:d4:c5:fe:17:7b:cb:2c:a5:bc:fa:ae:6e:a9:55:
02:f0:fd:f3:a9:74:92:ff:e1:aa:ab:7c:b1:17:d2:
c9:08:58:5f:db:fe:52:bf:41:8a:f8:b5:fe:df:f4:
d9:f4:af:a0:ca:dd:3e:e5:56:85:cc:5a:e6:e5:88:
33:86:b9:14:b5:c6:7c:0f:b3:3f:7a:f9:63:41:67:
55:0a:a1:fe:a9:79:89:ae:3c:4d:15:4e:ba:5f:7c:
36:2b:3d:d7:1f:8b:19:ac:07:ba:fe:ce:88:c7:20:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:3F:E9:0F:77:EB:5C:07:29:DD:E9:DD:91:97:FA:FC:90:E9:C0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C-Y_6Q9361wHKd3p3ZGX-vyQ6cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5::/48
2a06:a005:2570::/44
2a0a:6040:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
27:11:4e:cc:ec:b0:18:85:2f:fe:ea:5f:5e:db:12:3f:95:fb:
80:10:3e:91:a5:c6:8e:a3:77:4d:38:83:22:67:79:06:1c:47:
74:53:19:4f:eb:92:d9:4b:04:af:d5:2f:b9:32:18:6e:2d:fe:
81:a1:19:27:a8:34:22:08:0e:3e:d9:98:c7:1e:ab:43:98:d5:
0d:44:83:9f:18:a2:3b:77:f5:be:37:7a:be:0d:e7:99:83:72:
80:f2:b4:ce:46:3d:2f:c9:11:62:a1:c7:73:74:1d:36:96:7c:
f9:b5:da:3a:8a:90:3f:13:fb:fb:0a:c9:63:a2:de:6b:47:5b:
00:b4:36:08:11:58:3b:85:70:74:85:c3:5c:1d:a1:d3:69:02:
cb:47:ed:99:12:0f:81:10:4a:24:f8:2e:a6:3a:1f:e1:05:77:
4e:b3:0b:8d:88:f4:17:45:0d:3d:d4:e2:b5:82:ec:5b:a4:c4:
3d:78:33:68:4f:4a:4e:ee:dd:17:70:6c:c0:e5:cb:54:80:20:
3b:11:32:5c:f8:b8:84:33:57:7f:3b:b1:ca:fd:8b:d0:a3:82:
b8:3e:d9:cd:ce:7f:9c:1a:55:f4:eb:44:fd:7d:7a:5d:07:d6:
5c:3d:fb:1a:cb:d7:27:ce:75:98:71:25:88:a8:1a:29:53:a2:
76:c0:00:d6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYTrTUhQ8Adqstyz1GEUZpbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA3MDYzNzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmU2M2ZlOTBmNzdlYjVjMDcyOWRkZTlkZDkxOTdmYWZjOTBlOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklzFxhZRMuR9NacdVRz/HsG3eOnT
cKz7bkgWlgC8bNhZY0vyn6Ngop4AU5TsZlA/8mfJ+QxisbJE46N+36U0nfvfX8gc
jVpmWTWCEy17AUjPuFiXcDlvcnuLCsHweFWzyqKsrCj+3QZWd9qCrv9NbBtrNAIs
4l7iEpG+i7WrG8TwB3qwBFGbrpZ6aKa+zWs0hz+tDLVi1MX+F3vLLKW8+q5uqVUC
8P3zqXSS/+Gqq3yxF9LJCFhf2/5Sv0GK+LX+3/TZ9K+gyt0+5VaFzFrm5YgzhrkU
tcZ8D7M/evljQWdVCqH+qXmJrjxNFU66X3w2Kz3XH4sZrAe6/s6IxyCG4wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAvmP+kPd+tcBynd6d2Rl/r8kOnAMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQy1ZXzZROTM2MXdIS2QzcDNaR1gtdnlRNmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAKgagBQAF
AwcEKgagBSVwAwYAKgpgQOowDQYJKoZIhvcNAQELBQADggEBACcRTszssBiFL/7q
X17bEj+V+4AQPpGlxo6jd004gyJneQYcR3RTGU/rktlLBK/VL7kyGG4t/oGhGSeo
NCIIDj7ZmMceq0OY1Q1Eg58Yojt39b43er4N55mDcoDytM5GPS/JEWKhx3N0HTaW
fPm12jqKkD8T+/sKyWOi3mtHWwC0NggRWDuFcHSFw1wdodNpAstH7ZkSD4EQSiT4
LqY6H+EFd06zC42I9BdFDT3U4rWC7FukxD14M2hPSk7u3RdwbMDly1SAIDsRMlz4
uIQzV387scr9i9Cjgrg+2c3Of5waVfTrRP19el0H1lw9+xrL1yfOdZhxJYioGilT
onbAANY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org