Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fsFWwZGI8bFW_KzCgEgSYl2o0r4.roa
File: fsFWwZGI8bFW_KzCgEgSYl2o0r4.roa (raw, json)
Hash identifier: IirRZ/3xneMbMPvMshX+JnXKxdVBS36dV2BdNVbJayA=
Subject key identifier: 7E:C1:56:C1:91:88:F1:B1:56:FC:AC:C2:80:48:12:62:5D:A8:D2:BE
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 019302420602872F16FB445726DFDE63A974
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fsFWwZGI8bFW_KzCgEgSYl2o0r4.roa
Signing time: Wed 06 Nov 2024 16:15:01 +0000
ROA not before: Wed 06 Nov 2024 16:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49542
IP address blocks: 2a11:fb41::/32 maxlen: 32
2a11:fb46::/32 maxlen: 32
2a12:3b45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:42:06:02:87:2f:16:fb:44:57:26:df:de:63:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Nov 6 16:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec156c19188f1b156fcacc2804812625da8d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:0c:cb:11:64:0e:ae:20:e1:a0:80:e0:62:
38:e1:8d:f6:d6:71:c4:aa:df:c2:ff:54:9b:93:96:
3b:7f:73:aa:1b:f3:09:ba:bf:df:53:7b:a7:b1:93:
cc:97:ac:55:36:5a:d8:8d:e5:54:6c:ef:99:41:1c:
4e:8c:31:32:97:5f:ab:66:a6:51:e0:b4:10:69:6f:
17:37:68:d5:34:6a:e3:39:75:91:7d:87:20:03:4c:
50:1b:64:1f:57:d2:b9:bc:a3:3c:c8:3f:60:e1:81:
da:51:19:16:4c:01:ac:60:a7:00:74:12:b0:8c:4e:
e2:ac:d9:86:42:8d:b9:d3:88:77:dc:9a:6d:bc:f9:
66:99:02:c4:07:14:34:98:d6:4a:41:88:7d:e2:88:
16:17:aa:3c:b9:72:cb:32:1a:50:46:2c:cf:aa:ad:
33:42:e3:75:d6:98:ee:60:a2:04:e3:b7:f4:25:a8:
d1:7a:81:77:40:61:0b:7e:85:57:af:1a:42:ed:4e:
ab:7a:71:fc:bd:ca:39:83:71:23:48:ce:05:01:fe:
1e:df:40:2b:47:03:66:43:b7:74:ca:67:9d:a4:ec:
cb:a9:e2:e2:5b:05:0e:09:6a:b0:76:b8:cd:60:fd:
d5:26:5f:60:46:be:8d:37:f9:f4:44:fe:b4:80:02:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C1:56:C1:91:88:F1:B1:56:FC:AC:C2:80:48:12:62:5D:A8:D2:BE
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fsFWwZGI8bFW_KzCgEgSYl2o0r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fb41::/32
2a11:fb46::/32
2a12:3b45::/32
Signature Algorithm: sha256WithRSAEncryption
51:6c:f5:d7:d6:e6:b2:16:21:87:52:3e:c2:60:13:f2:c8:d3:
78:95:06:d2:2c:9f:ca:0e:b4:65:d5:2d:dc:0c:1a:d3:ef:66:
0a:2c:68:ec:2f:a1:4e:fb:2f:bc:e5:fa:9a:0a:9f:a0:84:8c:
4e:1c:4d:0e:9f:e9:7b:83:5c:a8:45:76:bf:0c:96:b8:c5:de:
9d:af:f8:ae:49:6a:98:97:7d:88:84:27:28:da:da:7f:bc:00:
c4:1a:11:63:11:69:bc:c1:4e:4b:39:b6:7b:e2:64:a0:eb:f3:
9b:16:a2:9a:c0:76:f7:40:6c:5c:46:b3:8b:c0:e1:cf:11:e6:
bb:94:b6:b0:fd:53:b8:28:26:0e:5b:83:b5:27:91:d8:d4:af:
48:1f:c5:a1:aa:ff:13:81:ac:30:21:4b:1b:ab:a1:27:ad:32:
bf:dc:f8:c8:0c:01:dc:e8:ca:9e:08:69:ac:66:84:56:cc:14:
d6:9f:81:f7:91:d1:05:1a:c3:25:90:dc:d2:0f:2b:9e:3f:3b:
96:1a:9d:00:7c:40:2b:14:d6:b2:c9:1a:72:e5:99:36:9b:c2:
25:a4:fb:55:0d:fd:f6:66:5e:74:d7:3d:2f:4f:10:a8:00:c8:
33:92:57:ba:aa:d9:f5:6c:25:d0:8f:49:28:d0:cc:77:c7:f6:
2d:36:61:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZMCQgYChy8W+0RXJt/eY6l0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjYxOWVmMjAwODQwZGZhOGZkNDM1NjdjN2E5NzhjMTUz
MTJkN2YwHhcNMjQxMTA2MTYxNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWMxNTZjMTkxODhmMWIxNTZmY2FjYzI4MDQ4MTI2MjVkYThkMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXIMyxFkDq4g4aCA4GI44Y321nHE
qt/C/1Sbk5Y7f3OqG/MJur/fU3unsZPMl6xVNlrYjeVUbO+ZQRxOjDEyl1+rZqZR
4LQQaW8XN2jVNGrjOXWRfYcgA0xQG2QfV9K5vKM8yD9g4YHaURkWTAGsYKcAdBKw
jE7irNmGQo2504h33JptvPlmmQLEBxQ0mNZKQYh94ogWF6o8uXLLMhpQRizPqq0z
QuN11pjuYKIE47f0JajReoF3QGELfoVXrxpC7U6renH8vco5g3EjSM4FAf4e30Ar
RwNmQ7d0ymedpOzLqeLiWwUOCWqwdrjNYP3VJl9gRr6NN/n0RP60gAK85QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH7BVsGRiPGxVvyswoBIEmJdqNK+MB8GA1UdIwQY
MBaAFLD2Ge8gCEDfqP1DVnx6l4wVMS1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYt
MDY5NjYxNjc1MTA2LzEvZnNGV3daR0k4YkZXX0t6Q2dFZ1NZbDJvMHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYtMDY5NjYxNjc1MTA2
LzEvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKhH7QQMF
ACoR+0YDBQAqEjtFMA0GCSqGSIb3DQEBCwUAA4IBAQBRbPXX1uayFiGHUj7CYBPy
yNN4lQbSLJ/KDrRl1S3cDBrT72YKLGjsL6FO+y+85fqaCp+ghIxOHE0On+l7g1yo
RXa/DJa4xd6dr/iuSWqYl32IhCco2tp/vADEGhFjEWm8wU5LObZ74mSg6/ObFqKa
wHb3QGxcRrOLwOHPEea7lLaw/VO4KCYOW4O1J5HY1K9IH8Whqv8TgawwIUsbq6En
rTK/3PjIDAHc6MqeCGmsZoRWzBTWn4H3kdEFGsMlkNzSDyuePzuWGp0AfEArFNay
yRpy5Zk2m8IlpPtVDf32Zl501z0vTxCoAMgzkle6qtn1bCXQj0ko0Mx3x/YtNmFN
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:54 2025 by rpki-client