Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/3WPnX86mSDFivb62-aygAV7Gbsg.roa
File: 3WPnX86mSDFivb62-aygAV7Gbsg.roa (raw, json)
Hash identifier: WjCbs9ecCKOAG0uWDSYbsAucVSif6egnO3Jc7Wfearc=
Subject key identifier: DD:63:E7:5F:CE:A6:48:31:62:BD:BE:B6:F9:AC:A0:01:5E:C6:6E:C8
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: 01857315C5587861DD41186509AFE2E1EAEA
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/3WPnX86mSDFivb62-aygAV7Gbsg.roa
Signing time: Mon 02 Jan 2023 15:24:44 +0000
ROA not before: Mon 02 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211085
IP address blocks: 2a02:6c20:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c5:58:78:61:dd:41:18:65:09:af:e2:e1:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Jan 2 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd63e75fcea6483162bdbeb6f9aca0015ec66ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:9c:cb:37:36:76:4c:c5:33:81:55:e6:8b:
8f:3a:c3:62:5e:eb:59:20:2f:ea:d8:54:c2:db:13:
d0:24:56:83:ba:79:c7:3d:58:b4:f1:50:85:db:e3:
3f:ff:2e:6b:6e:ea:e7:e9:f4:b4:31:f9:0d:a5:72:
e4:89:d4:54:26:1f:53:63:48:79:24:66:41:24:4f:
12:f1:29:e1:0d:4a:47:bc:96:fb:73:58:f8:d0:87:
ad:56:cf:8d:df:75:20:d1:65:bd:39:47:5b:11:41:
39:06:7a:bc:dd:bc:72:aa:0d:e2:b0:da:a0:07:aa:
9e:f6:36:dd:d4:43:2e:12:63:b3:d5:5f:92:c5:66:
89:5a:68:a9:1d:7b:9e:db:b9:c6:88:76:06:d9:6b:
15:fb:e3:82:86:2d:77:22:3f:1b:c4:f9:41:b8:df:
14:d7:bc:a3:2b:4f:b6:05:64:4e:2c:ea:12:8b:12:
fb:e0:16:b2:7a:b9:89:58:87:29:6e:e1:44:cd:ac:
72:57:bf:7a:3b:4e:d8:b0:20:ab:e2:60:2a:6d:98:
19:aa:0b:cc:8e:a4:43:cf:a8:bd:76:03:44:f1:40:
5c:59:e1:fc:77:28:76:a0:7e:06:de:9f:67:8b:da:
d1:d1:59:7d:58:0e:9e:cf:26:4e:8b:8a:37:1c:e4:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:E7:5F:CE:A6:48:31:62:BD:BE:B6:F9:AC:A0:01:5E:C6:6E:C8
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/3WPnX86mSDFivb62-aygAV7Gbsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6c20:7::/48
Signature Algorithm: sha256WithRSAEncryption
75:07:d1:e8:45:2c:30:b2:22:e8:c6:b3:d7:38:e6:8b:ef:94:
7a:2e:66:f1:3f:de:22:11:ae:2b:0b:3e:81:d9:5d:4b:1d:ff:
b6:63:50:4a:7b:c3:8c:b5:b6:e8:6d:4c:39:bc:84:9c:64:14:
72:b7:40:e6:0a:3d:1b:22:74:62:b1:39:84:44:02:4e:a9:57:
eb:c8:77:c2:98:b2:de:01:fa:b0:aa:f4:9f:c8:12:44:02:08:
0f:4e:e6:b1:76:dd:67:c3:bf:84:48:aa:7f:cf:fb:5d:78:18:
7d:09:f4:ae:3f:31:a5:3c:81:f0:6d:e5:b0:ff:69:5f:58:29:
39:47:56:01:98:1f:48:b3:22:e7:c8:9f:04:a5:cc:76:73:1a:
b2:f3:f8:d2:87:5c:95:dc:0e:d4:bc:f1:cf:a9:95:8c:40:61:
23:70:dd:92:07:20:0e:c2:08:f3:e6:e8:77:55:4f:06:42:1b:
07:09:0b:a4:e4:00:db:b2:95:e2:a9:f5:6a:60:c3:9b:cb:5e:
be:fa:29:a0:4b:c6:df:8f:5a:69:05:5f:90:9f:08:ff:36:fa:
56:a2:f0:13:01:38:ef:73:31:1e:45:f1:8e:08:90:eb:c6:1d:
56:d2:75:30:cd:73:3f:43:2e:07:23:29:96:bc:11:7e:b0:81:
5a:79:37:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVzFcVYeGHdQRhlCa/i4erqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGFhNTdhMTg1M2RiM2ZiOTQzYjlmYjBiMjg4MTlkYjM3
MGIyNzEwHhcNMjMwMTAyMTUyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDYzZTc1ZmNlYTY0ODMxNjJiZGJlYjZmOWFjYTAwMTVlYzY2ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5acyzc2dkzFM4FV5ouPOsNiXutZ
IC/q2FTC2xPQJFaDunnHPVi08VCF2+M//y5rburn6fS0MfkNpXLkidRUJh9TY0h5
JGZBJE8S8SnhDUpHvJb7c1j40IetVs+N33Ug0WW9OUdbEUE5Bnq83bxyqg3isNqg
B6qe9jbd1EMuEmOz1V+SxWaJWmipHXue27nGiHYG2WsV++OChi13Ij8bxPlBuN8U
17yjK0+2BWROLOoSixL74BayermJWIcpbuFEzaxyV796O07YsCCr4mAqbZgZqgvM
jqRDz6i9dgNE8UBcWeH8dyh2oH4G3p9ni9rR0Vl9WA6ezyZOi4o3HORLtwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN1j51/OpkgxYr2+tvmsoAFexm7IMB8GA1UdIwQY
MBaAFOPapXoYU9s/uUO5+wsogZ2zcLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlxbGVoaFQyei01UTduN0N5aUJuYk53c25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNzM4NDMtMjFmNC00ZDM2LTkxNDMt
MWZjNzMzN2Q0NjJlLzEvM1dQblg4Nm1TREZpdmI2Mi1heWdBVjdHYnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNzM4NDMtMjFmNC00ZDM2LTkxNDMtMWZjNzMzN2Q0NjJl
LzEvNDlxbGVoaFQyei01UTduN0N5aUJuYk53c25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJsIAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQB1B9HoRSwwsiLoxrPXOOaL75R6LmbxP94iEa4r
Cz6B2V1LHf+2Y1BKe8OMtbbobUw5vIScZBRyt0DmCj0bInRisTmERAJOqVfryHfC
mLLeAfqwqvSfyBJEAggPTuaxdt1nw7+ESKp/z/tdeBh9CfSuPzGlPIHwbeWw/2lf
WCk5R1YBmB9IsyLnyJ8Epcx2cxqy8/jSh1yV3A7UvPHPqZWMQGEjcN2SByAOwgjz
5uh3VU8GQhsHCQuk5ADbspXiqfVqYMOby16++imgS8bfj1ppBV+Qnwj/NvpWovAT
ATjvczEeRfGOCJDrxh1W0nUwzXM/Qy4HIymWvBF+sIFaeTd0
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:36 2025 by rpki-client