Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/RA94-YrODfRapBfrOJbCPUjE4Do.roa
File: RA94-YrODfRapBfrOJbCPUjE4Do.roa (raw, json)
Hash identifier: cHIANoiNkiVnrGAKCnzNB1hm31ncqkhAH2yE33FsCXc=
Subject key identifier: 44:0F:78:F9:8A:CE:0D:F4:5A:A4:17:EB:38:96:C2:3D:48:C4:E0:3A
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 018CC3B742CC3F6BAD30696BA21231385646
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/RA94-YrODfRapBfrOJbCPUjE4Do.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397071
IP address blocks: 2a0c:5e00:7::/64 maxlen: 64
2a0c:5e00:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:42:cc:3f:6b:ad:30:69:6b:a2:12:31:38:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=440f78f98ace0df45aa417eb3896c23d48c4e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:3f:e6:af:f8:55:0b:9a:e8:f8:18:fa:10:
4e:f9:42:66:6f:0a:8a:73:59:fa:40:8e:42:41:04:
18:9b:32:50:79:98:fd:87:e6:ff:4d:ff:a8:9b:65:
90:f3:3c:42:01:7c:b1:02:c3:82:c1:5d:0c:5f:42:
25:e0:72:2d:cf:ba:6e:e0:07:fb:89:6b:d9:2c:16:
02:45:42:76:8e:06:c9:fa:d9:06:10:20:af:5c:ce:
4c:e8:1d:14:b8:b4:05:78:8a:ac:0a:dc:b7:87:60:
65:be:5a:c8:c7:17:93:68:d7:47:5c:08:4f:a7:47:
47:b7:0f:56:a1:33:2d:4c:e9:a6:51:6b:96:94:34:
ab:11:af:84:e6:e6:6e:18:c8:9b:28:c7:f8:ed:b0:
e2:17:f6:b9:20:37:8f:00:e7:ff:cd:23:72:9a:3c:
3a:9c:b9:dd:4b:c8:c7:eb:21:c2:41:8f:2b:20:d0:
96:73:b9:61:e4:81:c0:c0:d1:2c:3d:c0:fa:e6:c2:
8c:05:63:bc:41:88:5a:02:1b:45:fa:96:ea:38:d0:
07:b7:a7:3a:8e:b6:bc:82:a9:04:3a:44:66:dc:21:
c5:2d:b7:c8:db:97:ea:df:5e:d6:6d:4f:22:75:11:
8d:3b:4e:17:5e:61:bf:9f:a6:fc:e0:97:03:cc:e2:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:78:F9:8A:CE:0D:F4:5A:A4:17:EB:38:96:C2:3D:48:C4:E0:3A
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/RA94-YrODfRapBfrOJbCPUjE4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5e00:7::/48
Signature Algorithm: sha256WithRSAEncryption
68:3e:9b:14:89:7c:12:24:f1:92:ca:e2:8d:c4:5a:c7:2f:f2:
05:cb:b2:57:01:0e:e2:04:5d:9e:bd:3f:9d:cf:6b:24:c0:36:
86:3e:0e:b5:e8:1a:f2:58:bf:ec:f1:ab:09:40:a6:99:fb:4d:
80:cd:cd:1e:70:89:be:09:01:b2:f3:b2:a5:c4:59:53:79:58:
95:0a:06:8a:4c:ec:2f:f4:91:48:b3:f4:50:ae:c3:20:15:45:
17:c7:9b:76:5b:d6:b1:24:f4:5b:fa:4b:0c:01:e0:da:9c:9a:
ab:03:06:cf:15:be:08:d3:4d:91:55:30:51:29:cd:55:f0:cd:
3c:34:00:3c:38:88:16:72:5b:98:df:d8:d9:cc:98:b4:4a:41:
95:40:df:13:35:f0:1a:7d:10:8a:f5:29:42:09:6c:59:ae:18:
cf:94:e2:7c:d2:d1:c0:c3:95:80:ce:31:18:b7:06:cd:71:3b:
98:4d:db:43:1e:86:2b:04:ab:29:ee:d0:27:82:fc:93:dc:3e:
e2:69:5a:48:d4:fe:fe:cd:75:da:db:e0:d4:0c:db:66:c5:4d:
ba:f8:4d:af:98:7e:77:a3:0f:3f:83:60:3c:48:a8:31:0c:43:
7d:74:b3:e3:ce:5d:0e:32:41:7a:04:88:b4:02:f7:14:5a:a1:
b5:6e:6e:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDt0LMP2utMGlrohIxOFZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjJiZjE5MWZmZDYyYjlmMjc0NzUwMDljOGZiM2UwYTE0
YTIyMzcwHhcNMjQwMTAxMDYzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDBmNzhmOThhY2UwZGY0NWFhNDE3ZWIzODk2YzIzZDQ4YzRlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxo/5q/4VQua6PgY+hBO+UJmbwqK
c1n6QI5CQQQYmzJQeZj9h+b/Tf+om2WQ8zxCAXyxAsOCwV0MX0Il4HItz7pu4Af7
iWvZLBYCRUJ2jgbJ+tkGECCvXM5M6B0UuLQFeIqsCty3h2BlvlrIxxeTaNdHXAhP
p0dHtw9WoTMtTOmmUWuWlDSrEa+E5uZuGMibKMf47bDiF/a5IDePAOf/zSNymjw6
nLndS8jH6yHCQY8rINCWc7lh5IHAwNEsPcD65sKMBWO8QYhaAhtF+pbqONAHt6c6
jra8gqkEOkRm3CHFLbfI25fq317WbU8idRGNO04XXmG/n6b84JcDzOLgWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEQPePmKzg30WqQX6ziWwj1IxOA6MB8GA1UdIwQY
MBaAFFryvxkf/WK58nR1AJyPs+ChSiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMt
ZTUxYWEwMzMxZGY1LzEvUkE5NC1Zck9EZlJhcEJmck9KYkNQVWpFNERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMtZTUxYWEwMzMxZGY1
LzEvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxeAAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQBoPpsUiXwSJPGSyuKNxFrHL/IFy7JXAQ7iBF2e
vT+dz2skwDaGPg616BryWL/s8asJQKaZ+02Azc0ecIm+CQGy87KlxFlTeViVCgaK
TOwv9JFIs/RQrsMgFUUXx5t2W9axJPRb+ksMAeDanJqrAwbPFb4I002RVTBRKc1V
8M08NAA8OIgWcluY39jZzJi0SkGVQN8TNfAafRCK9SlCCWxZrhjPlOJ80tHAw5WA
zjEYtwbNcTuYTdtDHoYrBKsp7tAngvyT3D7iaVpI1P7+zXXa2+DUDNtmxU26+E2v
mH53ow8/g2A8SKgxDEN9dLPjzl0OMkF6BIi0AvcUWqG1bm7/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:05 2025 by rpki-client