Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/d20vcx4m9MayW0zgkwTyWD0VuQ4.roa
File: d20vcx4m9MayW0zgkwTyWD0VuQ4.roa (raw, json)
Hash identifier: wtBBxLuGeLdtogEiiBBlWuOXBysEdIE2Bi5KejgcbYc=
Subject key identifier: 77:6D:2F:73:1E:26:F4:C6:B2:5B:4C:E0:93:04:F2:58:3D:15:B9:0E
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018572034FB419CB78263A845A263F9013E7
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/d20vcx4m9MayW0zgkwTyWD0VuQ4.roa
Signing time: Mon 02 Jan 2023 10:24:57 +0000
ROA not before: Mon 02 Jan 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 2a02:9b8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4f:b4:19:cb:78:26:3a:84:5a:26:3f:90:13:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 2 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=776d2f731e26f4c6b25b4ce09304f2583d15b90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:24:ee:7e:16:b4:7e:a9:ac:50:c4:7e:20:
97:b5:fc:2f:a4:66:75:99:e0:b3:9b:fe:ea:31:e4:
8b:48:34:13:73:da:8e:c0:2a:c5:c6:a3:81:c1:89:
ec:7f:b3:38:d3:f7:ba:26:5f:48:35:78:56:dd:0a:
99:e1:76:23:ad:e9:18:f3:00:f0:02:de:d3:e5:39:
a3:87:6c:be:4a:d5:ad:a6:3c:21:f4:e9:90:e3:03:
ca:d0:89:f7:80:57:39:9d:b6:02:54:d8:fd:a9:35:
68:3e:02:48:13:2b:3b:00:90:d9:ef:ef:14:b3:6f:
50:29:20:bf:9f:96:7c:bd:61:a3:8a:1c:19:29:86:
33:1e:63:84:66:fe:e1:e2:94:86:cd:6b:a8:69:82:
c9:9b:4a:c8:0a:68:a9:6c:58:59:97:d9:24:42:3a:
ae:b7:1c:86:48:d7:3f:26:db:90:d6:49:7d:17:33:
54:43:c0:85:56:2f:c2:05:11:e9:e5:63:e7:98:e2:
3a:20:a0:0d:86:c4:d5:c6:14:f7:a5:c6:b3:33:2b:
cc:c4:f1:09:1b:50:a2:bf:b2:01:be:b9:b7:65:1a:
6e:d7:e0:c9:27:a4:65:cd:8a:8a:c6:c1:b7:15:0c:
77:37:f4:da:57:16:41:7f:33:dc:df:3c:75:0a:4f:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:2F:73:1E:26:F4:C6:B2:5B:4C:E0:93:04:F2:58:3D:15:B9:0E
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/d20vcx4m9MayW0zgkwTyWD0VuQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9b8::/31
Signature Algorithm: sha256WithRSAEncryption
18:8c:52:c9:2d:98:73:b0:17:27:46:94:91:69:8c:67:55:1b:
84:7b:47:57:60:0e:34:99:22:dd:14:59:74:2d:0a:90:1a:4e:
a1:86:70:25:64:50:17:ac:71:1c:0b:a9:3a:97:f2:16:5b:dc:
19:07:a5:aa:af:87:61:29:0d:06:52:cf:fd:ff:5f:24:fa:db:
62:20:54:c2:40:31:ec:13:f3:a6:69:2f:f6:97:fe:46:65:9a:
76:0a:a9:59:9d:0b:41:b7:4d:f6:aa:f0:17:77:e5:4c:f3:9b:
f4:da:d9:09:dc:3c:85:6f:fd:ea:76:71:92:d9:ac:f5:00:96:
6c:88:0d:35:85:0c:90:85:b4:7f:11:1d:90:c2:20:e2:10:6a:
54:1e:c3:a8:ad:c8:45:39:13:b8:6a:89:ed:44:d4:04:a1:a2:
c3:11:73:97:55:56:9e:79:21:03:2a:ce:96:64:05:5b:00:a7:
d6:cd:9d:cb:06:8c:f3:cb:00:07:5b:e2:56:10:98:29:31:16:
7a:f0:24:fe:37:61:10:a0:53:a4:88:87:f5:c0:13:63:84:d7:
71:ab:6e:21:8d:25:05:a0:b2:ff:4b:dc:02:d7:45:18:d1:44:
7c:3c:b7:35:6b:9c:51:b0:ad:b7:76:18:ec:c4:31:e4:5d:8c:
3f:27:4c:fe
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyA0+0Gct4JjqEWiY/kBPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmYwZmVjZDdiZjQ0MTQ4OTMxNzg4ZGZlN2YyMGQ2N2E2
N2EwZGIwHhcNMjMwMTAyMTAyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzZkMmY3MzFlMjZmNGM2YjI1YjRjZTA5MzA0ZjI1ODNkMTViOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynAk7n4WtH6prFDEfiCXtfwvpGZ1
meCzm/7qMeSLSDQTc9qOwCrFxqOBwYnsf7M40/e6Jl9INXhW3QqZ4XYjrekY8wDw
At7T5Tmjh2y+StWtpjwh9OmQ4wPK0In3gFc5nbYCVNj9qTVoPgJIEys7AJDZ7+8U
s29QKSC/n5Z8vWGjihwZKYYzHmOEZv7h4pSGzWuoaYLJm0rICmipbFhZl9kkQjqu
txyGSNc/JtuQ1kl9FzNUQ8CFVi/CBRHp5WPnmOI6IKANhsTVxhT3pcazMyvMxPEJ
G1Civ7IBvrm3ZRpu1+DJJ6RlzYqKxsG3FQx3N/TaVxZBfzPc3zx1Ck819QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHdtL3MeJvTGsltM4JME8lg9FbkOMB8GA1UdIwQY
MBaAFNT/D+zXv0QUiTF4jf5/INZ6Z6DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUt
ZjBjMjFmODE4NmYwLzEvZDIwdmN4NG05TWF5VzB6Z2t3VHlXRDBWdVE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUtZjBjMjFmODE4NmYw
LzEvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgIJuDAN
BgkqhkiG9w0BAQsFAAOCAQEAGIxSyS2Yc7AXJ0aUkWmMZ1UbhHtHV2AONJki3RRZ
dC0KkBpOoYZwJWRQF6xxHAupOpfyFlvcGQelqq+HYSkNBlLP/f9fJPrbYiBUwkAx
7BPzpmkv9pf+RmWadgqpWZ0LQbdN9qrwF3flTPOb9NrZCdw8hW/96nZxktms9QCW
bIgNNYUMkIW0fxEdkMIg4hBqVB7DqK3IRTkTuGqJ7UTUBKGiwxFzl1VWnnkhAyrO
lmQFWwCn1s2dywaM88sAB1viVhCYKTEWevAk/jdhEKBTpIiH9cATY4TXcatuIY0l
BaCy/0vcAtdFGNFEfDy3NWucUbCtt3YY7MQx5F2MPydM/g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:10:06 2025 by rpki-client