Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Hy7b7ORzyPsc-nU34DwwfnKO1t0.roa
File: Hy7b7ORzyPsc-nU34DwwfnKO1t0.roa (raw, json)
Hash identifier: wm4He7r/oXNiTpYZuA/KWDADb5rT6q3P/lm01XVqRFU=
Subject key identifier: 1F:2E:DB:EC:E4:73:C8:FB:1C:FA:75:37:E0:3C:30:7E:72:8E:D6:DD
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 078B82D3
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Hy7b7ORzyPsc-nU34DwwfnKO1t0.roa
Signing time: Sat 19 Feb 2022 21:43:05 +0000
ROA not before: Sat 19 Feb 2022 21:43:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/44 maxlen: 44
2a0f:85c1:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126583507 (0x78b82d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Feb 19 21:43:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f2edbece473c8fb1cfa7537e03c307e728ed6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:9e:dd:73:3f:6b:60:ee:7c:3d:c7:4e:33:
8f:35:d5:0c:07:5d:b8:63:d8:f4:e3:9d:de:94:74:
51:44:a9:04:44:e2:90:3a:69:21:e4:0e:f3:aa:31:
b6:9a:5e:ac:46:9f:60:1c:4c:45:df:b5:c3:55:4c:
73:74:f8:09:c7:ef:61:82:e5:e3:36:e6:4b:73:7e:
7e:0d:cf:e3:1f:71:c2:05:32:46:8f:4f:1e:91:69:
12:8c:9d:2d:c1:f3:94:0d:1f:60:89:80:60:18:74:
fb:ad:72:ad:89:a7:5c:4a:d6:a8:8c:ee:14:5d:2e:
b2:90:e4:db:d1:91:a8:fd:02:8a:32:88:4c:d7:cb:
2e:fc:13:3e:c3:53:90:3f:ed:41:87:cd:b2:8d:64:
88:34:2a:55:db:41:c6:ad:4a:a4:82:6c:29:55:2e:
9a:02:eb:31:15:a6:ac:51:f6:c7:5d:91:16:0b:ca:
41:85:43:c8:86:b8:27:61:4d:02:ab:0b:8b:51:ba:
f2:c0:28:17:72:12:8e:e1:dc:65:56:89:77:4b:82:
7e:36:e4:fd:2f:cb:25:62:b8:4c:32:87:3f:1f:a2:
03:5a:0f:f2:e2:b7:bf:8f:6b:5f:46:c0:68:c0:d0:
6b:97:cb:ff:93:4c:3b:31:40:1c:0c:07:45:e7:3f:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:DB:EC:E4:73:C8:FB:1C:FA:75:37:E0:3C:30:7E:72:8E:D6:DD
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Hy7b7ORzyPsc-nU34DwwfnKO1t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
33:1e:12:8d:a2:1e:b2:18:c9:6b:d9:e0:03:85:2f:29:2a:ac:
95:cd:96:cf:68:cb:50:3e:5e:31:ef:4a:eb:f8:2e:a9:07:db:
36:e9:db:51:63:51:c4:e9:01:59:aa:93:e9:89:37:33:36:85:
4a:bc:12:ab:41:b6:83:e7:33:54:b5:e2:fa:25:9b:8e:49:31:
22:01:3d:c9:77:48:46:c8:1b:10:d9:39:86:e8:7f:c3:c9:d6:
a7:de:ef:ee:3c:55:4b:ff:08:0b:ec:83:c5:a5:78:76:8e:5c:
c6:28:94:c8:23:13:c3:69:f3:ec:57:a4:77:2c:f2:2f:49:d0:
84:cd:1c:c6:1e:0d:83:30:99:94:42:85:4f:e5:ec:93:08:cb:
59:d1:a7:d3:d8:1c:26:da:be:db:b7:89:c1:9b:ab:52:4c:08:
33:f0:8b:61:07:8d:76:1e:f8:7a:a2:e7:22:e3:05:54:01:2f:
f3:04:f9:03:76:7b:50:ce:af:3e:5d:1e:6d:a4:f3:c4:eb:7d:
45:76:ae:7d:02:bd:3e:da:c0:64:57:46:53:64:22:e5:b2:5d:
4d:0d:96:bf:b5:10:21:a2:07:ae:d2:09:6a:65:fd:13:c5:a6:
06:81:35:3d:e1:c3:16:5d:db:74:3b:91:1f:31:1c:23:17:9f:
bf:05:75:bc
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB4uC0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmIzYWUxMWEzYTZhNWVlMWUzMmVhNmNjZTFmMTBkZjIzMWVhZDg4MB4XDTIyMDIx
OTIxNDMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWYyZWRiZWNlNDcz
YzhmYjFjZmE3NTM3ZTAzYzMwN2U3MjhlZDZkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANx6nt1zP2tg7nw9x04zjzXVDAdduGPY9OOd3pR0UUSpBETi
kDppIeQO86oxtpperEafYBxMRd+1w1VMc3T4CcfvYYLl4zbmS3N+fg3P4x9xwgUy
Ro9PHpFpEoydLcHzlA0fYImAYBh0+61yrYmnXErWqIzuFF0uspDk29GRqP0CijKI
TNfLLvwTPsNTkD/tQYfNso1kiDQqVdtBxq1KpIJsKVUumgLrMRWmrFH2x12RFgvK
QYVDyIa4J2FNAqsLi1G68sAoF3ISjuHcZVaJd0uCfjbk/S/LJWK4TDKHPx+iA1oP
8uK3v49rX0bAaMDQa5fL/5NMOzFAHAwHRec/M3UCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQfLtvs5HPI+xz6dTfgPDB+co7W3TAfBgNVHSMEGDAWgBRrs64Ro6al7h4y
6mzOHxDfIx6tiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E3T3VFYU9tcGU0ZU11cHN6aDhRM3lNZXJZZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvY2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8x
L0h5N2I3T1J6eVBzYy1uVTM0RHd3Zm5LTzF0MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
Y2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8xL2E3T3VFYU9tcGU0
ZU11cHN6aDhRM3lNZXJZZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPhcEAcDANBgkqhkiG9w0BAQsF
AAOCAQEAMx4SjaIeshjJa9ngA4UvKSqslc2Wz2jLUD5eMe9K6/guqQfbNunbUWNR
xOkBWaqT6Yk3MzaFSrwSq0G2g+czVLXi+iWbjkkxIgE9yXdIRsgbENk5huh/w8nW
p97v7jxVS/8IC+yDxaV4do5cxiiUyCMTw2nz7FekdyzyL0nQhM0cxh4NgzCZlEKF
T+XskwjLWdGn09gcJtq+27eJwZurUkwIM/CLYQeNdh74eqLnIuMFVAEv8wT5A3Z7
UM6vPl0ebaTzxOt9RXaufQK9PtrAZFdGU2Qi5bJdTQ2Wv7UQIaIHrtIJamX9E8Wm
BoE1PeHDFl3bdDuRHzEcIxefvwV1vA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org