Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/FuSngGmR7ajRRCkiepKndS7YfRE.roa
File: FuSngGmR7ajRRCkiepKndS7YfRE.roa (raw, json)
Hash identifier: nv0Qckm9tcxiUkLI4/639DgpIfWHs7epD7cYDwVcVBM=
Subject key identifier: 16:E4:A7:80:69:91:ED:A8:D1:44:29:22:7A:92:A7:75:2E:D8:7D:11
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 07060B06
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/FuSngGmR7ajRRCkiepKndS7YfRE.roa
Signing time: Sat 01 Jan 2022 00:56:43 +0000
ROA not before: Sat 01 Jan 2022 00:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206628
IP address blocks: 2a0f:85c1:22::/48 maxlen: 48
2a0f:85c1:30::/48 maxlen: 48
2a0f:85c1:31::/48 maxlen: 48
2a0f:85c1:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117836550 (0x7060b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 00:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e4a7806991eda8d14429227a92a7752ed87d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:db:8e:18:84:48:47:32:56:80:a2:1f:ad:
5f:f3:36:8d:8c:72:fe:ee:b9:d8:3e:b6:90:af:dc:
d5:01:ac:09:72:06:44:16:2b:69:d0:5d:c2:65:27:
57:13:06:8c:37:f1:31:90:82:01:76:68:92:d8:50:
11:f0:d7:73:74:d4:b2:3c:be:64:f3:9c:24:a0:81:
e3:3a:f1:8c:5c:0f:57:67:08:7f:d2:05:32:72:97:
01:3d:25:8c:64:e1:fe:f0:62:60:11:f0:91:52:a8:
d8:57:14:11:45:fb:b6:d4:4b:94:d7:40:84:90:cd:
97:55:3f:fc:f1:a3:10:5e:cf:bf:c2:e8:a2:df:d0:
2a:33:f2:70:90:e6:23:69:41:1f:11:48:d4:a3:ad:
60:db:b6:b7:4c:5c:e4:53:97:66:2a:6c:e6:ed:fd:
06:6b:ef:12:ed:97:53:39:1a:58:8b:8b:f2:88:5a:
21:d2:c6:6c:44:a8:ff:04:81:74:17:f1:59:03:5a:
ad:e4:a2:f0:26:f3:3e:78:80:51:37:42:8d:74:ae:
59:b8:46:19:00:33:70:cd:31:78:94:43:79:ec:06:
59:97:09:fc:81:e2:aa:e1:12:d2:78:68:2b:9a:70:
92:97:14:32:8c:52:0a:15:7b:df:05:9a:00:a3:e3:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:A7:80:69:91:ED:A8:D1:44:29:22:7A:92:A7:75:2E:D8:7D:11
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/FuSngGmR7ajRRCkiepKndS7YfRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:21::-2a0f:85c1:22:ffff:ffff:ffff:ffff:ffff
2a0f:85c1:30::/47
Signature Algorithm: sha256WithRSAEncryption
70:51:d4:31:44:8e:86:07:ea:19:3c:86:08:41:77:18:5e:59:
f0:dc:91:d7:3d:4c:7e:b7:f8:5b:90:ec:43:8f:9e:8a:2b:0a:
fc:e8:62:08:df:44:d9:39:9a:20:5e:c1:27:d3:41:e9:0d:bc:
f1:82:3d:68:80:b1:96:c7:0a:1a:de:2a:84:f1:10:ca:f9:bc:
97:83:2f:94:f0:71:0b:4d:78:16:0b:33:b3:e3:e0:1c:6d:64:
00:a8:19:7b:9f:b0:85:a9:29:06:82:6c:78:87:a2:f4:21:50:
e2:cb:d9:87:d4:77:f6:62:60:1d:7a:2e:20:7e:70:6d:29:c3:
19:91:06:24:c1:11:a5:b5:24:fa:b7:62:bb:fe:af:f0:2a:2f:
ec:8c:a5:c2:25:3c:4f:07:92:40:68:88:91:27:bf:e5:64:7c:
43:10:ad:2b:5f:ea:a3:bb:38:c6:4e:e3:dc:06:bd:f7:2c:e0:
9e:71:ac:7d:e2:43:57:58:30:38:c8:8b:1e:ad:ab:c6:6a:a0:
21:49:6c:df:57:8b:51:d8:bd:e8:7a:6e:01:70:65:b7:b8:04:
2e:50:1e:58:2c:d8:1b:8d:f3:c4:73:5a:c1:be:06:e8:08:ee:
b1:2d:ea:a6:6a:6c:53:1b:ab:c9:8c:4f:ef:f1:a8:1d:80:47:
e3:0c:0a:09
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEBwYLBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmIzYWUxMWEzYTZhNWVlMWUzMmVhNmNjZTFmMTBkZjIzMWVhZDg4MB4XDTIyMDEw
MTAwNTY0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZlNGE3ODA2OTkx
ZWRhOGQxNDQyOTIyN2E5MmE3NzUyZWQ4N2QxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKA1244YhEhHMlaAoh+tX/M2jYxy/u652D62kK/c1QGsCXIG
RBYradBdwmUnVxMGjDfxMZCCAXZokthQEfDXc3TUsjy+ZPOcJKCB4zrxjFwPV2cI
f9IFMnKXAT0ljGTh/vBiYBHwkVKo2FcUEUX7ttRLlNdAhJDNl1U//PGjEF7Pv8Lo
ot/QKjPycJDmI2lBHxFI1KOtYNu2t0xc5FOXZips5u39BmvvEu2XUzkaWIuL8oha
IdLGbESo/wSBdBfxWQNareSi8CbzPniAUTdCjXSuWbhGGQAzcM0xeJRDeewGWZcJ
/IHiquES0nhoK5pwkpcUMoxSChV73wWaAKPjl50CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQW5KeAaZHtqNFEKSJ6kqd1Lth9ETAfBgNVHSMEGDAWgBRrs64Ro6al7h4y
6mzOHxDfIx6tiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E3T3VFYU9tcGU0ZU11cHN6aDhRM3lNZXJZZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvY2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8x
L0Z1U25nR21SN2FqUlJDa2llcEtuZFM3WWZSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
Y2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8xL2E3T3VFYU9tcGU0
ZU11cHN6aDhRM3lNZXJZZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHTASAwcAKg+FwQAhAwcAKg+FwQAiAwcB
Kg+FwQAwMA0GCSqGSIb3DQEBCwUAA4IBAQBwUdQxRI6GB+oZPIYIQXcYXlnw3JHX
PUx+t/hbkOxDj56KKwr86GII30TZOZogXsEn00HpDbzxgj1ogLGWxwoa3iqE8RDK
+byXgy+U8HELTXgWCzOz4+AcbWQAqBl7n7CFqSkGgmx4h6L0IVDiy9mH1Hf2YmAd
ei4gfnBtKcMZkQYkwRGltST6t2K7/q/wKi/sjKXCJTxPB5JAaIiRJ7/lZHxDEK0r
X+qjuzjGTuPcBr33LOCecax94kNXWDA4yIseravGaqAhSWzfV4tR2L3oem4BcGW3
uAQuUB5YLNgbjfPEc1rBvgboCO6xLeqmamxTG6vJjE/v8agdgEfjDAoJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org