Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/eO3mvOEVO8hnF77zdB9XzEzUVF0.roa
File: eO3mvOEVO8hnF77zdB9XzEzUVF0.roa (raw, json)
Hash identifier: pbABmVQA1IqfcCMNIQ5CFT2/ircqrbjX8l/PflnFWM0=
Subject key identifier: 78:ED:E6:BC:E1:15:3B:C8:67:17:BE:F3:74:1F:57:CC:4C:D4:54:5D
Certificate issuer: /CN=5792df61399569f74fb77b6311b7d921ba949825
Certificate serial: 01856C4A47ABB9A29CE5F3A0369D7A3E74D8
Authority key identifier: 57:92:DF:61:39:95:69:F7:4F:B7:7B:63:11:B7:D9:21:BA:94:98:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5LfYTmVafdPt3tjEbfZIbqUmCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/eO3mvOEVO8hnF77zdB9XzEzUVF0.roa
Signing time: Sun 01 Jan 2023 07:44:45 +0000
ROA not before: Sun 01 Jan 2023 07:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204931
IP address blocks: 2001:678:cb0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:47:ab:b9:a2:9c:e5:f3:a0:36:9d:7a:3e:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5792df61399569f74fb77b6311b7d921ba949825
Validity
Not Before: Jan 1 07:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ede6bce1153bc86717bef3741f57cc4cd4545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:1f:0a:7f:51:06:83:c0:53:f2:76:be:30:
2d:5c:18:a6:81:56:89:a5:e7:da:00:f8:1b:8b:ac:
10:b3:f1:89:e5:05:9a:ae:a1:78:7e:e1:24:ac:b9:
e8:b4:eb:2f:ff:99:7a:13:d3:37:8c:03:4b:a9:1d:
0d:02:8a:05:ec:a2:dd:35:bb:07:e4:25:59:74:ec:
32:ec:01:56:ec:2d:51:94:e0:75:96:87:65:b5:5b:
f7:06:07:f9:a5:52:5f:82:2c:51:b5:1d:f0:ab:35:
d5:12:27:18:b4:f4:4f:d6:d4:0a:e2:b3:8c:c1:6e:
58:3c:de:15:37:ae:93:aa:a5:b4:75:5d:0f:41:60:
38:ef:4a:4a:ac:df:cc:ca:c4:3e:ea:60:85:52:74:
2e:c2:f3:f8:3f:02:27:af:d6:73:d5:b1:a3:58:f4:
2f:f7:86:2d:8e:e2:60:aa:fb:ae:08:19:d1:35:e4:
da:3c:8f:7f:95:15:97:6f:3d:d5:c4:a5:e2:ad:3d:
58:f3:dc:45:93:f5:2e:14:86:6b:f2:8e:c9:64:5e:
b9:ec:68:c9:08:7e:5c:c8:3f:22:3a:de:27:4f:28:
ec:0d:d3:62:fb:1a:b4:16:53:4c:f8:9e:08:68:39:
39:87:fc:44:dc:5d:59:f6:26:e2:dc:9b:1f:b4:fe:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:E6:BC:E1:15:3B:C8:67:17:BE:F3:74:1F:57:CC:4C:D4:54:5D
X509v3 Authority Key Identifier:
keyid:57:92:DF:61:39:95:69:F7:4F:B7:7B:63:11:B7:D9:21:BA:94:98:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5LfYTmVafdPt3tjEbfZIbqUmCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/eO3mvOEVO8hnF77zdB9XzEzUVF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/V5LfYTmVafdPt3tjEbfZIbqUmCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cb0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:f0:d7:ae:4f:35:b8:e5:c3:37:fc:fa:ff:44:01:21:25:9f:
b6:1b:b6:81:aa:c4:3e:99:c2:0b:14:ec:d6:29:f2:81:39:14:
99:36:d9:c0:50:46:cd:1e:b1:f9:3f:2c:cf:1f:7e:25:e2:2b:
e3:76:76:4c:b0:9d:56:ca:fb:4f:7b:4a:cc:58:c6:a2:de:4d:
60:72:cf:05:90:7b:64:a4:b7:ff:44:ce:ca:b0:c9:14:a7:dd:
9d:4b:43:40:96:ec:96:99:d3:d9:f9:62:88:62:8e:f1:3f:06:
e6:0e:a2:73:87:93:b8:c9:18:9f:fe:33:8f:38:25:62:83:ef:
c8:d9:a3:cc:a0:9c:3d:94:46:0a:19:e1:26:2f:cf:7a:b4:2b:
1f:9c:96:12:f6:42:cb:e7:bb:c0:26:d0:30:a6:00:3a:f9:99:
a2:c3:dc:95:c1:0c:e2:fa:e4:02:c2:83:f5:69:23:33:ab:5a:
78:86:ff:3b:16:f1:2b:5a:ea:69:3b:82:0b:a5:56:c4:00:0c:
87:31:11:66:81:a9:cb:62:45:61:2b:0c:ff:00:cd:aa:ef:df:
9c:19:8a:e5:57:ac:b7:4e:20:37:6b:9a:da:ac:e7:eb:f2:8e:
3b:90:1f:0f:6c:25:5c:8b:cd:a0:f6:26:d0:ad:c9:c0:7f:7a:
27:77:64:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsSkeruaKc5fOgNp16PnTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTJkZjYxMzk5NTY5Zjc0ZmI3N2I2MzExYjdkOTIxYmE5
NDk4MjUwHhcNMjMwMTAxMDc0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGVkZTZiY2UxMTUzYmM4NjcxN2JlZjM3NDFmNTdjYzRjZDQ1NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVcfCn9RBoPAU/J2vjAtXBimgVaJ
pefaAPgbi6wQs/GJ5QWarqF4fuEkrLnotOsv/5l6E9M3jANLqR0NAooF7KLdNbsH
5CVZdOwy7AFW7C1RlOB1lodltVv3Bgf5pVJfgixRtR3wqzXVEicYtPRP1tQK4rOM
wW5YPN4VN66TqqW0dV0PQWA470pKrN/MysQ+6mCFUnQuwvP4PwInr9Zz1bGjWPQv
94YtjuJgqvuuCBnRNeTaPI9/lRWXbz3VxKXirT1Y89xFk/UuFIZr8o7JZF657GjJ
CH5cyD8iOt4nTyjsDdNi+xq0FlNM+J4IaDk5h/xE3F1Z9ibi3JsftP53BwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHjt5rzhFTvIZxe+83QfV8xM1FRdMB8GA1UdIwQY
MBaAFFeS32E5lWn3T7d7YxG32SG6lJglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVMZllUbVZhZmRQdDN0akViZlpJYnFVbUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmJjMDYtMzkzZS00NDFkLThiYzAt
YjI5MmNmNGFlMDgwLzEvZU8zbXZPRVZPOGhuRjc3emRCOVh6RXpVVkYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yNmJjMDYtMzkzZS00NDFkLThiYzAtYjI5MmNmNGFlMDgw
LzEvVjVMZllUbVZhZmRQdDN0akViZlpJYnFVbUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAyw
MA0GCSqGSIb3DQEBCwUAA4IBAQAf8NeuTzW45cM3/Pr/RAEhJZ+2G7aBqsQ+mcIL
FOzWKfKBORSZNtnAUEbNHrH5PyzPH34l4ivjdnZMsJ1WyvtPe0rMWMai3k1gcs8F
kHtkpLf/RM7KsMkUp92dS0NAluyWmdPZ+WKIYo7xPwbmDqJzh5O4yRif/jOPOCVi
g+/I2aPMoJw9lEYKGeEmL896tCsfnJYS9kLL57vAJtAwpgA6+Zmiw9yVwQzi+uQC
woP1aSMzq1p4hv87FvErWuppO4ILpVbEAAyHMRFmganLYkVhKwz/AM2q79+cGYrl
V6y3TiA3a5rarOfr8o47kB8PbCVci82g9ibQrcnAf3ond2Q2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:14 2025 by rpki-client