Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/pv4zdsJnAOKpilhZS_3iPY5vg7U.roa
File: pv4zdsJnAOKpilhZS_3iPY5vg7U.roa (raw, json)
Hash identifier: 7xrv1zAWnHbmS4npefMxowRam6D2lBlRg5VFWKkmP0c=
Subject key identifier: A6:FE:33:76:C2:67:00:E2:A9:8A:58:59:4B:FD:E2:3D:8E:6F:83:B5
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 01857246F37377AE92BFCA5A3C2133BB7C59
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/pv4zdsJnAOKpilhZS_3iPY5vg7U.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203493
IP address blocks: 2a09:6280:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f3:73:77:ae:92:bf:ca:5a:3c:21:33:bb:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6fe3376c26700e2a98a58594bfde23d8e6f83b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:53:77:ee:09:20:e4:f2:31:bc:15:c7:72:
36:b9:2b:5b:be:9b:7b:bd:d8:28:93:63:51:d8:29:
2c:5d:2d:98:8d:3e:24:ce:7e:11:55:1a:f0:0e:0c:
a8:e3:e6:05:b6:30:87:8e:d8:83:32:2f:f3:57:f9:
1b:f8:ba:41:6c:59:ed:e4:4c:2a:cc:bc:2d:4b:f5:
06:b6:26:e8:33:59:34:ee:f4:cd:b6:26:b7:91:f4:
92:ea:e1:dc:b6:45:34:00:76:4d:06:a9:c0:fc:53:
b2:bb:5b:1d:1b:e5:72:6e:84:f4:9e:1f:e6:a0:53:
12:eb:34:49:a9:e0:34:a7:49:93:f4:b8:0f:da:83:
f1:bf:a9:a8:ce:4f:20:6b:14:b7:11:56:94:16:a0:
ff:80:c1:89:9d:27:dc:25:de:1b:64:2e:8c:62:a2:
e0:9f:8a:90:93:0a:87:6d:b5:73:f6:44:52:4b:62:
2c:6d:34:b0:0b:af:31:0d:6d:5a:d9:ca:76:22:88:
b8:7f:98:1e:e4:7a:2f:df:25:a7:65:ec:ab:5e:55:
84:97:29:88:bf:67:c1:74:b4:a0:ad:58:a4:de:63:
f5:1b:37:b4:53:08:e8:32:16:1a:4f:30:b6:ea:04:
a3:ae:0d:eb:0f:da:4f:cd:c0:25:d6:2e:2b:87:7d:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:33:76:C2:67:00:E2:A9:8A:58:59:4B:FD:E2:3D:8E:6F:83:B5
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/pv4zdsJnAOKpilhZS_3iPY5vg7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:3::/48
Signature Algorithm: sha256WithRSAEncryption
1c:39:c8:60:38:df:ab:e6:12:d0:03:f8:e7:93:12:cc:1a:a4:
76:dc:7b:1b:4b:6d:f3:7d:be:ed:f8:b5:73:20:30:17:a7:dc:
8b:8e:78:ab:e8:ed:8a:61:e7:86:4e:f1:ef:d6:48:7c:a7:72:
f7:ba:03:3e:ba:3a:c0:95:66:70:7c:68:47:eb:c1:fa:36:e7:
47:a9:95:7d:d8:62:be:6a:16:0e:4c:97:73:55:1a:25:3b:5a:
c3:af:ab:5d:be:5b:6d:0d:d0:d7:75:03:ac:51:ab:bd:38:0a:
d2:df:43:97:01:a3:1d:ea:90:58:d2:ff:0c:87:15:2f:81:3e:
33:82:29:06:22:0f:8a:ab:e7:db:88:24:a7:42:ed:91:3c:33:
5f:2a:18:17:04:dc:d5:c5:72:2f:50:71:16:eb:76:1b:7e:ab:
13:fe:d6:74:6a:f6:ac:1d:80:e2:ad:2c:36:0a:3a:55:af:a5:
27:a6:8c:85:10:4f:be:b7:69:e0:41:09:5d:2a:00:ff:92:84:
a1:ad:d5:e1:ab:c6:cf:b8:34:4e:8a:98:c8:59:1f:d1:fe:d3:
05:d1:18:fe:d3:93:f4:a3:70:f5:91:1b:25:45:7e:27:fa:87:
47:d8:dd:14:40:d1:e0:b4:f0:49:8c:20:f3:6a:8a:7f:8c:91:
62:b1:de:7f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyRvNzd66Sv8paPCEzu3xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDAxZTU4ODkwYmYyMzBkY2FlNWQwMzA1MTE5ZmYyYzJi
OGQ0MzMwHhcNMjMwMTAyMTEzODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmZlMzM3NmMyNjcwMGUyYTk4YTU4NTk0YmZkZTIzZDhlNmY4M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBTd+4JIOTyMbwVx3I2uStbvpt7
vdgok2NR2CksXS2YjT4kzn4RVRrwDgyo4+YFtjCHjtiDMi/zV/kb+LpBbFnt5Ewq
zLwtS/UGtiboM1k07vTNtia3kfSS6uHctkU0AHZNBqnA/FOyu1sdG+VyboT0nh/m
oFMS6zRJqeA0p0mT9LgP2oPxv6mozk8gaxS3EVaUFqD/gMGJnSfcJd4bZC6MYqLg
n4qQkwqHbbVz9kRSS2IsbTSwC68xDW1a2cp2Ioi4f5ge5Hov3yWnZeyrXlWElymI
v2fBdLSgrVik3mP1Gze0UwjoMhYaTzC26gSjrg3rD9pPzcAl1i4rh33pewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKb+M3bCZwDiqYpYWUv94j2Ob4O1MB8GA1UdIwQY
MBaAFDhAHliJC/Iw3K5dAwURn/LCuNQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYt
OGI5Y2RkYjczNDA4LzEvcHY0emRzSm5BT0twaWxoWlNfM2lQWTV2ZzdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYtOGI5Y2RkYjczNDA4
LzEvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgligAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAcOchgON+r5hLQA/jnkxLMGqR23HsbS23zfb7t
+LVzIDAXp9yLjnir6O2KYeeGTvHv1kh8p3L3ugM+ujrAlWZwfGhH68H6NudHqZV9
2GK+ahYOTJdzVRolO1rDr6tdvlttDdDXdQOsUau9OArS30OXAaMd6pBY0v8MhxUv
gT4zgikGIg+Kq+fbiCSnQu2RPDNfKhgXBNzVxXIvUHEW63YbfqsT/tZ0avasHYDi
rSw2CjpVr6UnpoyFEE++t2ngQQldKgD/koShrdXhq8bPuDROipjIWR/R/tMF0Rj+
05P0o3D1kRslRX4n+odH2N0UQNHgtPBJjCDzaop/jJFisd5/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:05 2025 by rpki-client