Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/nc2LyMV-UeTz7SgE7PmnO73RD6c.roa
File: nc2LyMV-UeTz7SgE7PmnO73RD6c.roa (raw, json)
Hash identifier: q6qEmAOyGmrZF3oufBpJWQZPK7n/hJ6dPmMnpQ4JC4M=
Subject key identifier: 9D:CD:8B:C8:C5:7E:51:E4:F3:ED:28:04:EC:F9:A7:3B:BD:D1:0F:A7
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 0185C6CDE2E2499285F60650517240E5C098
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/nc2LyMV-UeTz7SgE7PmnO73RD6c.roa
Signing time: Wed 18 Jan 2023 21:34:19 +0000
ROA not before: Wed 18 Jan 2023 21:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:1880::/31 maxlen: 31
2a13:1884::/31 maxlen: 31
2a13:1886::/31 maxlen: 31
2a13:1882::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:cd:e2:e2:49:92:85:f6:06:50:51:72:40:e5:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Jan 18 21:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dcd8bc8c57e51e4f3ed2804ecf9a73bbdd10fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:84:29:c3:58:58:44:7d:4a:4f:a7:c5:ee:
6b:85:62:d6:71:fa:e4:2e:ad:a1:aa:6b:90:bc:dd:
c4:a1:b9:94:14:60:6b:8e:87:7e:8e:bd:4a:a0:0b:
33:e2:ab:b8:53:00:a0:83:f4:b9:14:52:53:72:61:
54:fc:74:9b:4c:d6:63:93:90:bb:ca:c9:ec:13:52:
98:4e:3f:95:5e:fa:71:55:65:13:0a:f2:ef:fe:c8:
c3:09:0d:f2:e4:13:0c:e1:3d:8f:47:87:0d:c4:d6:
3a:4e:c9:7b:54:cb:4c:fd:6c:03:34:95:1b:dd:c5:
a9:fa:f6:75:5e:d7:60:26:bf:06:d7:3f:c1:96:df:
76:18:9e:0d:a3:c1:d8:be:6a:0b:52:57:6f:7f:d4:
bb:57:10:1c:c4:fb:a7:86:4d:ae:8f:74:82:a3:d7:
fb:5c:8a:c7:8d:9e:97:c5:c3:2b:b3:f7:39:ff:31:
30:c9:d7:3f:db:45:df:65:39:e4:e3:f3:e9:80:45:
51:6b:e1:75:36:a6:d0:08:ac:a5:06:ca:3c:b6:9a:
85:34:e9:b7:59:85:a7:28:67:1a:5d:0a:64:df:ca:
67:56:b5:17:4a:3d:38:8e:e3:d2:95:6e:63:2c:c6:
be:e6:9d:76:b9:a6:70:24:46:ff:3c:97:cd:e4:a4:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:8B:C8:C5:7E:51:E4:F3:ED:28:04:EC:F9:A7:3B:BD:D1:0F:A7
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/nc2LyMV-UeTz7SgE7PmnO73RD6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1880::/29
Signature Algorithm: sha256WithRSAEncryption
24:46:0f:66:a8:cf:9f:cc:c7:15:94:b7:fc:42:a7:91:a3:4b:
7f:56:7f:01:58:41:d2:f9:77:00:88:b9:82:ca:87:90:78:b1:
1e:c1:18:91:68:7d:17:5f:65:41:47:25:49:3d:aa:d6:5f:7d:
84:89:66:4f:bc:d5:18:f8:cc:3e:a0:e4:3b:b4:22:9d:0e:d6:
97:72:ce:0e:63:f0:e1:7d:ca:0d:77:29:a6:e0:68:ac:a2:8a:
73:83:b3:70:90:ec:81:35:dc:6e:dd:d7:9c:86:4b:c8:b0:92:
03:00:4b:d5:66:e4:85:91:d3:3f:05:79:95:c9:5c:71:c6:e2:
ce:64:a2:6b:00:e9:20:dc:df:46:2b:de:b2:b5:35:d5:d5:68:
63:d1:63:86:b3:13:4f:fa:80:f6:5d:9e:d1:3f:bd:d7:47:50:
4f:f8:8f:33:99:42:b7:cf:51:8a:ad:db:67:68:5d:1e:92:e6:
0d:96:58:c0:7a:ad:65:43:51:66:11:76:56:f3:17:80:5c:d8:
ef:db:37:42:fb:10:ce:c6:34:06:d7:ab:02:9c:bd:d4:68:a4:
d2:f4:74:f2:5e:f9:b4:7a:ca:38:06:ea:94:be:b7:b5:a8:95:
6b:b5:09:90:a4:40:ec:15:5b:a9:15:dc:a5:0c:4d:96:74:e1:
5d:a0:52:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYXGzeLiSZKF9gZQUXJA5cCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODNjMzhlMTkzZWNkZTI3N2NhYzhmMDlkYTQxODdmYWVi
ZGE2MTYwHhcNMjMwMTE4MjEzNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGNkOGJjOGM1N2U1MWU0ZjNlZDI4MDRlY2Y5YTczYmJkZDEwZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4GEKcNYWER9Sk+nxe5rhWLWcfrk
Lq2hqmuQvN3EobmUFGBrjod+jr1KoAsz4qu4UwCgg/S5FFJTcmFU/HSbTNZjk5C7
ysnsE1KYTj+VXvpxVWUTCvLv/sjDCQ3y5BMM4T2PR4cNxNY6Tsl7VMtM/WwDNJUb
3cWp+vZ1XtdgJr8G1z/Blt92GJ4No8HYvmoLUldvf9S7VxAcxPunhk2uj3SCo9f7
XIrHjZ6XxcMrs/c5/zEwydc/20XfZTnk4/PpgEVRa+F1NqbQCKylBso8tpqFNOm3
WYWnKGcaXQpk38pnVrUXSj04juPSlW5jLMa+5p12uaZwJEb/PJfN5KQEFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ3Ni8jFflHk8+0oBOz5pzu90Q+nMB8GA1UdIwQY
MBaAFEODw44ZPs3id8rI8J2kGH+uvaYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRQRGpoay16ZUozeXNqd25hUVlmNjY5cGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jYmJiMjUtYTE3MC00ZTI0LWJiMDAt
OTcwZTJkNTU1YzQ0LzEvbmMyTHlNVi1VZVR6N1NnRTdQbW5PNzNSRDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jYmJiMjUtYTE3MC00ZTI0LWJiMDAtOTcwZTJkNTU1YzQ0
LzEvUTRQRGpoay16ZUozeXNqd25hUVlmNjY5cGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMYgDAN
BgkqhkiG9w0BAQsFAAOCAQEAJEYPZqjPn8zHFZS3/EKnkaNLf1Z/AVhB0vl3AIi5
gsqHkHixHsEYkWh9F19lQUclST2q1l99hIlmT7zVGPjMPqDkO7QinQ7Wl3LODmPw
4X3KDXcppuBorKKKc4OzcJDsgTXcbt3XnIZLyLCSAwBL1WbkhZHTPwV5lclcccbi
zmSiawDpINzfRivesrU11dVoY9FjhrMTT/qA9l2e0T+910dQT/iPM5lCt89Riq3b
Z2hdHpLmDZZYwHqtZUNRZhF2VvMXgFzY79s3QvsQzsY0BterApy91Gik0vR08l75
tHrKOAbqlL63taiVa7UJkKRA7BVbqRXcpQxNlnThXaBSaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org