Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/yQa8JIpzm-mR96jdpptHN6kLmTA.roa
File: yQa8JIpzm-mR96jdpptHN6kLmTA.roa (raw, json)
Hash identifier: yoFiCRg+xALxZKnTPbiXi0HuR/e21lqc2hnkpCQ33Nw=
Subject key identifier: C9:06:BC:24:8A:73:9B:E9:91:F7:A8:DD:A6:9B:47:37:A9:0B:99:30
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 01857102CD56A43A047D06909C8ACD650015
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/yQa8JIpzm-mR96jdpptHN6kLmTA.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397071
IP address blocks: 2a0c:5e00:7::/64 maxlen: 64
2a0c:5e00:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:cd:56:a4:3a:04:7d:06:90:9c:8a:cd:65:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c906bc248a739be991f7a8dda69b4737a90b9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:4e:75:0e:d7:40:8d:c1:ba:f3:b7:5b:3e:
11:bb:b7:83:d6:cf:7d:cd:cd:d4:04:01:aa:e9:18:
fd:22:2c:c0:0c:04:fb:e7:3b:40:b6:9f:2f:c2:31:
52:67:ef:f4:ef:aa:cc:3c:7e:25:68:3c:e1:a7:27:
ed:c6:48:8a:da:14:3e:9f:25:56:e3:42:54:91:5e:
b2:48:d1:19:d3:8c:c6:68:11:7e:6c:ca:f9:27:e7:
51:44:90:5f:0c:59:fb:95:5e:08:89:97:d3:cf:f7:
32:cd:ad:7f:94:75:6e:12:80:27:58:a9:73:26:fb:
46:fd:0c:fc:96:5d:0d:18:ff:02:61:99:c1:f0:07:
69:85:65:bb:11:76:86:4b:1c:91:ff:47:de:41:bc:
19:8f:56:ee:14:09:60:25:09:d5:6e:00:e4:ab:83:
d5:a1:96:39:66:a1:07:39:99:80:14:71:4c:26:37:
0b:22:10:25:3f:22:4b:01:87:c3:b0:eb:ce:dc:77:
dc:4b:56:c3:a7:b6:78:53:28:d3:c6:3c:b0:7c:ad:
7b:f0:05:30:f1:6d:a8:85:3c:7f:c9:c9:2c:0f:2d:
9d:e9:9d:4b:9d:31:d9:84:db:31:84:f2:98:eb:57:
8c:1c:d6:61:65:2e:28:9b:c8:21:a6:c7:10:ae:3e:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:BC:24:8A:73:9B:E9:91:F7:A8:DD:A6:9B:47:37:A9:0B:99:30
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/yQa8JIpzm-mR96jdpptHN6kLmTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5e00:7::/48
Signature Algorithm: sha256WithRSAEncryption
54:0b:b5:e8:a2:a7:3c:a9:01:67:db:47:9b:cc:73:2d:0a:32:
bc:ac:97:13:24:b8:ee:b5:de:f7:95:ac:12:49:15:e2:f2:8d:
8b:f9:f4:73:2f:4f:00:56:d1:8a:63:2a:1d:df:b7:95:13:fa:
c3:12:59:4c:29:38:f0:4a:b1:dc:58:70:4c:c1:29:5b:40:46:
6d:c5:42:6c:d8:92:20:4f:88:dd:70:a0:bc:e0:ac:d8:c7:72:
6a:3a:62:94:56:32:26:61:e1:a4:1d:3d:fe:53:c4:45:35:f5:
de:a7:08:34:a1:8f:c1:f2:25:d2:df:ab:bb:f2:38:f8:a3:e3:
9f:c5:de:6c:8d:67:f7:f6:c0:68:dc:a2:3a:bb:b0:fb:c1:e5:
69:09:86:9a:02:3c:9b:1e:cc:bb:83:31:89:f8:f5:d9:92:03:
8f:f2:82:53:e0:24:1f:de:c0:29:35:ec:d2:6d:1a:b9:3f:70:
4e:9d:25:5b:4e:a1:19:39:22:46:9d:ca:2a:89:8c:1d:76:8b:
51:81:31:87:dc:56:63:65:23:e3:9e:68:e2:b0:c3:3a:27:f6:
bd:4a:87:67:ee:f9:4c:f3:ab:42:45:82:fa:8c:9a:3e:db:cc:
4a:1e:0a:77:98:06:27:2a:11:82:d0:fe:52:a2:4f:50:cd:97:
29:cc:27:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxAs1WpDoEfQaQnIrNZQAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjJiZjE5MWZmZDYyYjlmMjc0NzUwMDljOGZiM2UwYTE0
YTIyMzcwHhcNMjMwMTAyMDU0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTA2YmMyNDhhNzM5YmU5OTFmN2E4ZGRhNjliNDczN2E5MGI5OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O9OdQ7XQI3BuvO3Wz4Ru7eD1s99
zc3UBAGq6Rj9IizADAT75ztAtp8vwjFSZ+/076rMPH4laDzhpyftxkiK2hQ+nyVW
40JUkV6ySNEZ04zGaBF+bMr5J+dRRJBfDFn7lV4IiZfTz/cyza1/lHVuEoAnWKlz
JvtG/Qz8ll0NGP8CYZnB8AdphWW7EXaGSxyR/0feQbwZj1buFAlgJQnVbgDkq4PV
oZY5ZqEHOZmAFHFMJjcLIhAlPyJLAYfDsOvO3HfcS1bDp7Z4UyjTxjywfK178AUw
8W2ohTx/ycksDy2d6Z1LnTHZhNsxhPKY61eMHNZhZS4om8ghpscQrj4kgwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMkGvCSKc5vpkfeo3aabRzepC5kwMB8GA1UdIwQY
MBaAFFryvxkf/WK58nR1AJyPs+ChSiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMt
ZTUxYWEwMzMxZGY1LzEveVFhOEpJcHptLW1SOTZqZHBwdEhONmtMbVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMtZTUxYWEwMzMxZGY1
LzEvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxeAAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQBUC7Xooqc8qQFn20ebzHMtCjK8rJcTJLjutd73
lawSSRXi8o2L+fRzL08AVtGKYyod37eVE/rDEllMKTjwSrHcWHBMwSlbQEZtxUJs
2JIgT4jdcKC84KzYx3JqOmKUVjImYeGkHT3+U8RFNfXepwg0oY/B8iXS36u78jj4
o+Ofxd5sjWf39sBo3KI6u7D7weVpCYaaAjybHsy7gzGJ+PXZkgOP8oJT4CQf3sAp
NezSbRq5P3BOnSVbTqEZOSJGncoqiYwddotRgTGH3FZjZSPjnmjisMM6J/a9Sodn
7vlM86tCRYL6jJo+28xKHgp3mAYnKhGC0P5Sok9QzZcpzCd9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:28 2024 by rpki-client on console-fra.rpki-client.org