Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0uNwie-vAh4kaSoH6CF5PADohrU.roa
File: 0uNwie-vAh4kaSoH6CF5PADohrU.roa (raw, json)
Hash identifier: LVOnp8JvNumN8LkCGmHV9VhNxYP980pTOYdgEfeVSU8=
Subject key identifier: D2:E3:70:89:EF:AF:02:1E:24:69:2A:07:E8:21:79:3C:00:E8:86:B5
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D4C3E82C600524FB8974363E5B34D
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0uNwie-vAh4kaSoH6CF5PADohrU.roa
Signing time: Sun 01 Jan 2023 13:55:03 +0000
ROA not before: Sun 01 Jan 2023 13:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209552
IP address blocks: 2a0f:85c1:51::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:4c:3e:82:c6:00:52:4f:b8:97:43:63:e5:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e37089efaf021e24692a07e821793c00e886b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:83:77:4e:d4:db:e3:42:87:96:d3:8f:d0:
37:ca:12:37:58:88:1d:0e:68:10:c9:86:99:41:06:
1e:64:6e:4e:d0:69:d9:59:4c:9b:f2:ee:75:05:70:
fd:92:0a:39:76:54:d9:66:54:7e:9e:db:97:0d:57:
ca:90:87:1f:17:5f:97:48:23:02:68:18:07:ea:71:
b8:b9:3d:a8:08:31:ec:1b:2c:3e:fd:b4:4d:55:fc:
2b:1e:e5:d4:bf:a2:23:e3:cb:82:9c:41:26:f7:91:
28:d3:0e:f8:ea:6e:a6:b8:7c:db:9f:9c:d7:19:b2:
18:6c:54:bb:17:70:7c:94:53:57:7e:01:87:2b:77:
e2:cd:cf:3d:ff:4d:75:9e:e6:d5:4e:12:35:de:e9:
bd:86:65:85:c6:4c:9d:da:1c:fb:48:ee:e1:01:1a:
5f:b3:57:23:52:9c:4c:43:ed:ca:45:f2:66:f4:34:
9d:31:c5:27:a7:d1:e7:f3:56:ee:17:69:bf:18:d0:
51:a7:b3:2d:71:b7:97:61:e6:b2:d2:df:a8:25:31:
37:ae:d9:46:68:0e:ec:00:28:c0:93:a5:c9:c0:a1:
da:1f:5f:c8:0a:65:6e:a9:15:a6:05:af:41:0a:f0:
cc:8d:ad:89:0b:e2:cb:f8:36:36:6b:16:4c:b7:eb:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:70:89:EF:AF:02:1E:24:69:2A:07:E8:21:79:3C:00:E8:86:B5
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0uNwie-vAh4kaSoH6CF5PADohrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:51::/48
Signature Algorithm: sha256WithRSAEncryption
a8:c7:77:ad:0a:79:8e:fa:b9:12:02:cd:05:b5:49:b8:da:72:
ef:82:72:da:7b:3a:69:a5:59:41:31:64:79:a0:12:ca:ba:71:
0b:71:3c:ea:a6:9e:de:14:41:81:83:5a:db:76:38:4a:05:f4:
9b:11:2a:c9:11:da:39:a2:9f:c5:ea:66:c5:25:12:c1:04:16:
eb:df:5d:17:88:cc:21:58:07:86:85:4e:1c:6e:d1:b5:ce:b1:
de:ee:51:e3:56:52:6c:0c:08:76:d8:51:31:2c:f0:3b:c5:72:
8b:d4:47:24:51:37:a6:8f:b1:c8:af:74:88:6b:20:7b:b4:55:
dc:a4:f9:de:fe:f9:99:bb:35:57:ba:bc:3f:d6:eb:1f:3a:df:
42:60:21:f6:f4:08:c7:c8:42:a9:30:d3:c9:e5:fe:00:d8:a8:
9e:fe:06:f5:f7:99:21:d0:93:9a:57:04:3f:98:29:5c:45:ea:
f9:37:95:05:64:d4:f0:6c:1a:ab:ed:b9:d0:ed:55:13:88:42:
91:77:39:d0:04:d9:e7:81:0a:ed:48:4b:18:a0:49:5c:0d:9b:
f8:9c:52:8a:5f:03:9d:b8:62:5e:15:6e:c3:4e:ba:75:c5:43:
ef:c1:8f:8f:a8:a2:08:95:4f:0e:a9:42:5a:88:d7:02:49:9c:
01:41:a5:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtnUw+gsYAUk+4l0Nj5bNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjNhZTExYTNhNmE1ZWUxZTMyZWE2Y2NlMWYxMGRmMjMx
ZWFkODgwHhcNMjMwMTAxMTM1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmUzNzA4OWVmYWYwMjFlMjQ2OTJhMDdlODIxNzkzYzAwZTg4NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHqDd07U2+NCh5bTj9A3yhI3WIgd
DmgQyYaZQQYeZG5O0GnZWUyb8u51BXD9kgo5dlTZZlR+ntuXDVfKkIcfF1+XSCMC
aBgH6nG4uT2oCDHsGyw+/bRNVfwrHuXUv6Ij48uCnEEm95Eo0w746m6muHzbn5zX
GbIYbFS7F3B8lFNXfgGHK3fizc89/011nubVThI13um9hmWFxkyd2hz7SO7hARpf
s1cjUpxMQ+3KRfJm9DSdMcUnp9Hn81buF2m/GNBRp7MtcbeXYeay0t+oJTE3rtlG
aA7sACjAk6XJwKHaH1/ICmVuqRWmBa9BCvDMja2JC+LL+DY2axZMt+tGcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNLjcInvrwIeJGkqB+gheTwA6Ia1MB8GA1UdIwQY
MBaAFGuzrhGjpqXuHjLqbM4fEN8jHq2IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdPdUVhT21wZTRlTXVwc3poOFEzeU1lcllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jYzExZTgtZDUxYi00Njc5LTljNmMt
MWVmMTk3ZDZkYzY5LzEvMHVOd2llLXZBaDRrYVNvSDZDRjVQQURvaHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jYzExZTgtZDUxYi00Njc5LTljNmMtMWVmMTk3ZDZkYzY5
LzEvYTdPdUVhT21wZTRlTXVwc3poOFEzeU1lcllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+FwQBR
MA0GCSqGSIb3DQEBCwUAA4IBAQCox3etCnmO+rkSAs0FtUm42nLvgnLaezpppVlB
MWR5oBLKunELcTzqpp7eFEGBg1rbdjhKBfSbESrJEdo5op/F6mbFJRLBBBbr310X
iMwhWAeGhU4cbtG1zrHe7lHjVlJsDAh22FExLPA7xXKL1EckUTemj7HIr3SIayB7
tFXcpPne/vmZuzVXurw/1usfOt9CYCH29AjHyEKpMNPJ5f4A2Kie/gb195kh0JOa
VwQ/mClcRer5N5UFZNTwbBqr7bnQ7VUTiEKRdznQBNnngQrtSEsYoElcDZv4nFKK
XwOduGJeFW7DTrp1xUPvwY+PqKIIlU8OqUJaiNcCSZwBQaVy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org