Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/i8urEU9YpD2g0YJFHJlkmwd59Gg.roa
File: i8urEU9YpD2g0YJFHJlkmwd59Gg.roa (raw, json)
Hash identifier: ViNwYBMzjKvc3mSFX7dLFgnlDgxQ4PJUSgKNNvMCa08=
Subject key identifier: 8B:CB:AB:11:4F:58:A4:3D:A0:D1:82:45:1C:99:64:9B:07:79:F4:68
Certificate issuer: /CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Certificate serial: 0182D527239180C21FAE941BA477DE3F4A00
Authority key identifier: BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/i8urEU9YpD2g0YJFHJlkmwd59Gg.roa
Signing time: Thu 25 Aug 2022 13:18:08 +0000
ROA not before: Thu 25 Aug 2022 13:18:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a03:cc40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:27:23:91:80:c2:1f:ae:94:1b:a4:77:de:3f:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Validity
Not Before: Aug 25 13:18:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bcbab114f58a43da0d182451c99649b0779f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:81:d1:d6:9d:9d:14:18:1b:12:c1:ce:a2:
52:0c:0c:a4:34:61:6d:9d:32:3d:1c:ba:09:be:77:
a8:41:a4:64:ab:78:7a:b2:ff:f1:c6:2e:c5:2e:4b:
7c:6f:2c:43:50:59:b5:3d:c5:7b:a6:60:ea:c9:61:
40:d6:d6:0f:f9:6f:2f:4f:7d:2e:fc:1c:47:dc:72:
de:58:9a:88:e3:a9:b0:0a:3b:4f:e5:56:12:c5:b0:
de:b2:66:15:d5:f8:3c:c9:da:2d:dc:35:d0:28:ec:
1e:98:2d:a7:5e:cc:ad:69:d3:e3:e8:9b:c9:d0:77:
66:b6:b6:36:b2:55:ce:3d:09:12:c0:c8:3c:91:82:
85:9b:4f:74:60:cc:5e:51:f3:2e:3e:b1:93:57:08:
75:47:74:4a:1b:e2:6c:22:2b:5b:e8:ef:01:ef:ba:
d6:43:69:37:38:6d:2d:d9:18:8f:d9:f2:80:9c:59:
13:9b:5a:09:56:9f:74:63:c6:5e:3f:18:8e:71:f0:
32:fe:04:da:3a:7f:e5:5c:a1:c2:20:21:82:bb:e0:
b1:54:d1:0e:21:5a:43:43:8b:f3:b8:18:c5:a7:54:
b3:bd:12:84:17:4a:22:fa:77:c8:b7:95:e4:e5:95:
6f:26:c5:75:bd:8d:e4:29:14:44:91:0a:2d:88:6a:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:AB:11:4F:58:A4:3D:A0:D1:82:45:1C:99:64:9B:07:79:F4:68
X509v3 Authority Key Identifier:
keyid:BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/i8urEU9YpD2g0YJFHJlkmwd59Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/vKXoztU5UgpGHcgnLvl8gHyXr9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:cc40::/29
Signature Algorithm: sha256WithRSAEncryption
aa:94:20:59:9e:3c:84:3d:1f:69:95:09:7d:8f:70:26:bc:2b:
da:fb:42:25:91:91:b4:35:40:be:d6:66:a9:d9:00:e7:1f:7a:
dc:7b:3d:36:2c:45:86:27:48:9c:f9:5c:fd:52:de:61:97:fd:
e9:c0:b7:e1:b3:ca:31:37:96:e5:6c:f7:0f:88:30:08:8b:e1:
fa:77:37:99:2e:68:e0:df:da:1c:1c:e9:ea:09:a2:9b:94:6c:
63:87:c3:6f:91:41:e7:94:8e:09:b2:34:05:4f:d0:d4:66:c3:
a5:ca:16:bb:b1:74:fb:01:cc:1a:bc:b2:00:16:d6:64:13:2a:
29:1a:bf:3f:71:75:61:12:e9:84:dd:70:dd:b3:8f:c6:c0:62:
74:73:d7:53:03:f6:7d:0f:c7:fb:85:b9:1c:b9:02:5c:19:22:
74:09:38:fb:af:44:b9:70:40:b3:32:5b:69:49:0c:a8:3c:08:
d5:dc:ea:4d:59:b7:fa:c4:e0:be:63:08:8e:7f:ea:23:9b:57:
3c:e5:e8:3b:57:44:15:b3:03:1a:26:2d:8a:1f:a7:bf:48:b1:
7d:ed:ed:31:65:61:d5:c6:dd:a9:ba:39:9e:83:70:d5:f9:3b:
d7:9b:51:da:e7:04:21:85:0d:8f:3a:49:09:86:a3:4f:a5:c3:
06:e3:09:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYLVJyORgMIfrpQbpHfeP0oAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTVlOGNlZDUzOTUyMGE0NjFkYzgyNzJlZjk3YzgwN2M5
N2FmZDYwHhcNMjIwODI1MTMxODA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmNiYWIxMTRmNThhNDNkYTBkMTgyNDUxYzk5NjQ5YjA3NzlmNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWKB0dadnRQYGxLBzqJSDAykNGFt
nTI9HLoJvneoQaRkq3h6sv/xxi7FLkt8byxDUFm1PcV7pmDqyWFA1tYP+W8vT30u
/BxH3HLeWJqI46mwCjtP5VYSxbDesmYV1fg8ydot3DXQKOwemC2nXsytadPj6JvJ
0HdmtrY2slXOPQkSwMg8kYKFm090YMxeUfMuPrGTVwh1R3RKG+JsIitb6O8B77rW
Q2k3OG0t2RiP2fKAnFkTm1oJVp90Y8ZePxiOcfAy/gTaOn/lXKHCICGCu+CxVNEO
IVpDQ4vzuBjFp1SzvRKEF0oi+nfIt5Xk5ZVvJsV1vY3kKRREkQotiGrTiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIvLqxFPWKQ9oNGCRRyZZJsHefRoMB8GA1UdIwQY
MBaAFLyl6M7VOVIKRh3IJy75fIB8l6/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktYb3p0VTVVZ3BHSGNnbkx2bDhnSHlYcjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTU2NjUtOTk2Yy00NzQ4LWIyN2Qt
YzkyMGIwMDBmNGU2LzEvaTh1ckVVOVlwRDJnMFlKRkhKbGttd2Q1OUdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZTU2NjUtOTk2Yy00NzQ4LWIyN2QtYzkyMGIwMDBmNGU2
LzEvdktYb3p0VTVVZ3BHSGNnbkx2bDhnSHlYcjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgPMQDAN
BgkqhkiG9w0BAQsFAAOCAQEAqpQgWZ48hD0faZUJfY9wJrwr2vtCJZGRtDVAvtZm
qdkA5x963Hs9NixFhidInPlc/VLeYZf96cC34bPKMTeW5Wz3D4gwCIvh+nc3mS5o
4N/aHBzp6gmim5RsY4fDb5FB55SOCbI0BU/Q1GbDpcoWu7F0+wHMGryyABbWZBMq
KRq/P3F1YRLphN1w3bOPxsBidHPXUwP2fQ/H+4W5HLkCXBkidAk4+69EuXBAszJb
aUkMqDwI1dzqTVm3+sTgvmMIjn/qI5tXPOXoO1dEFbMDGiYtih+nv0ixfe3tMWVh
1cbdqbo5noNw1fk715tR2ucEIYUNjzpJCYajT6XDBuMJjg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:53 2025 by rpki-client