Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/YyvYQGthpmnX3q3P_55UYre18lo.roa
File: YyvYQGthpmnX3q3P_55UYre18lo.roa (raw, json)
Hash identifier: 28WCPgqAvmIlYIbu541Lapagfu3HlR2z9YdCDfhTU4Y=
Subject key identifier: 63:2B:D8:40:6B:61:A6:69:D7:DE:AD:CF:FF:9E:54:62:B7:B5:F2:5A
Certificate issuer: /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial: 018A17519939E2A651D63D337E527663576E
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/YyvYQGthpmnX3q3P_55UYre18lo.roa
Signing time: Mon 21 Aug 2023 08:58:58 +0000
ROA not before: Mon 21 Aug 2023 08:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202932
IP address blocks: 2a0d:58c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:51:99:39:e2:a6:51:d6:3d:33:7e:52:76:63:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Validity
Not Before: Aug 21 08:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=632bd8406b61a669d7deadcfff9e5462b7b5f25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:44:e2:09:c4:dc:ea:a0:c3:10:71:1d:b9:
d2:d4:c6:fc:35:f8:90:1b:cc:d0:24:45:d3:5e:32:
ad:1b:06:e9:5c:61:fe:30:9b:e4:08:e7:b3:16:f4:
f4:69:61:b9:c0:19:31:d6:64:59:7c:a5:3f:f2:9e:
a3:ab:8c:b9:dc:f0:2e:cf:33:de:3c:0b:c8:87:4f:
d0:08:5e:b5:3a:40:f3:e2:91:fa:8c:ce:e9:6f:1a:
07:84:8d:7e:2f:a8:82:b6:ee:d3:6c:82:09:a3:97:
5b:03:2c:ca:b8:97:30:3b:e8:41:71:ed:24:11:69:
c5:0b:95:98:b7:79:c8:18:b0:a5:02:f0:d7:af:46:
71:4a:e2:24:3b:e6:84:69:35:71:df:a9:29:5d:d3:
28:43:3a:87:2a:4c:db:d5:fe:2f:78:e6:95:a8:3f:
ad:4b:e8:fe:f6:3f:1c:32:39:e9:80:2f:2f:18:04:
4f:2c:0f:9b:8a:5f:b0:6f:f2:36:79:12:a5:7d:02:
e3:31:80:00:21:f1:47:7b:14:c5:c4:0d:3b:2a:39:
2f:be:4f:27:f4:2f:3f:a7:dc:2a:18:a7:a8:cd:94:
fa:63:b8:ab:31:20:3e:b5:09:a3:0e:7a:15:ce:4c:
a9:98:82:47:42:83:d3:9c:25:ee:28:2f:04:ad:5b:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:D8:40:6B:61:A6:69:D7:DE:AD:CF:FF:9E:54:62:B7:B5:F2:5A
X509v3 Authority Key Identifier:
keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/YyvYQGthpmnX3q3P_55UYre18lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:00:36:89:e8:18:86:4b:44:bb:ee:21:90:63:b0:5e:e8:2d:
f9:1b:62:a5:ef:f5:b0:7b:bb:00:6f:f8:13:8e:b5:90:83:25:
7a:43:8c:64:78:2e:e5:5e:5a:16:31:48:eb:dc:21:51:5a:e3:
c4:3f:ce:a7:59:32:34:fd:2b:f2:76:73:85:74:9c:dd:cc:24:
09:b5:a6:50:90:69:d9:b4:a5:cc:74:13:f9:0a:74:c5:0f:ff:
41:e1:c6:d9:1b:8f:45:70:d9:1b:fb:d4:0f:49:83:ba:19:6a:
4e:bf:b4:2a:31:15:9f:d8:ea:b2:b2:e1:4e:5d:3a:44:4d:cb:
86:43:e0:70:17:a1:d0:43:bc:ec:34:40:7e:fc:04:9d:4c:de:
42:5b:3a:72:93:5a:d7:31:ba:a7:ba:e0:f8:4b:0d:fc:bc:79:
2f:af:e9:28:30:1f:5e:42:ba:22:ca:d9:95:f9:48:2a:23:9b:
c4:3d:bb:36:de:1b:ee:0f:1b:76:a1:3f:28:e1:5e:1d:8e:7d:
1e:22:67:eb:36:e5:87:48:42:67:6b:50:ec:c9:6d:cf:d9:47:
8b:d0:06:82:eb:83:3b:8d:93:86:33:26:e2:25:25:9d:d1:4a:
15:25:58:09:53:ee:15:14:d9:00:bb:fc:70:f6:72:36:55:5d:
fb:c7:ad:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYoXUZk54qZR1j0zflJ2Y1duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MWUwNGZmMTg1YjUwYjllNjFlYzVmNDZlMmIxMDg3NzQ5
MWQ4ODIwHhcNMjMwODIxMDg1ODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzJiZDg0MDZiNjFhNjY5ZDdkZWFkY2ZmZjllNTQ2MmI3YjVmMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8hE4gnE3OqgwxBxHbnS1Mb8NfiQ
G8zQJEXTXjKtGwbpXGH+MJvkCOezFvT0aWG5wBkx1mRZfKU/8p6jq4y53PAuzzPe
PAvIh0/QCF61OkDz4pH6jM7pbxoHhI1+L6iCtu7TbIIJo5dbAyzKuJcwO+hBce0k
EWnFC5WYt3nIGLClAvDXr0ZxSuIkO+aEaTVx36kpXdMoQzqHKkzb1f4veOaVqD+t
S+j+9j8cMjnpgC8vGARPLA+bil+wb/I2eRKlfQLjMYAAIfFHexTFxA07Kjkvvk8n
9C8/p9wqGKeozZT6Y7irMSA+tQmjDnoVzkypmIJHQoPTnCXuKC8ErVtB4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGMr2EBrYaZp196tz/+eVGK3tfJaMB8GA1UdIwQY
MBaAFDceBP8YW1C55h7F9G4rEId0kdiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTng0RV94aGJVTG5tSHNYMGJpc1FoM1NSMklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85ZTJmY2ItNWJiZS00NDE3LTk2NTYt
YmQ5MGY3OTc0NWNhLzEvWXl2WVFHdGhwbW5YM3EzUF81NVVZcmUxOGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85ZTJmY2ItNWJiZS00NDE3LTk2NTYtYmQ5MGY3OTc0NWNh
LzEvTng0RV94aGJVTG5tSHNYMGJpc1FoM1NSMklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1YwDAN
BgkqhkiG9w0BAQsFAAOCAQEAcgA2iegYhktEu+4hkGOwXugt+Rtipe/1sHu7AG/4
E461kIMlekOMZHgu5V5aFjFI69whUVrjxD/Op1kyNP0r8nZzhXSc3cwkCbWmUJBp
2bSlzHQT+Qp0xQ//QeHG2RuPRXDZG/vUD0mDuhlqTr+0KjEVn9jqsrLhTl06RE3L
hkPgcBeh0EO87DRAfvwEnUzeQls6cpNa1zG6p7rg+EsN/Lx5L6/pKDAfXkK6IsrZ
lflIKiObxD27Nt4b7g8bdqE/KOFeHY59HiJn6zblh0hCZ2tQ7Mltz9lHi9AGguuD
O42ThjMm4iUlndFKFSVYCVPuFRTZALv8cPZyNlVd+8ethg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org