Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa
File: W89vRK954TUEdu-1bY8Z7z_5Crw.roa (raw, json)
Hash identifier: FsvfbPindKEpB7TzpQzjCIcTQvvDzRnM+FGsL127NCM=
Subject key identifier: 5B:CF:6F:44:AF:79:E1:35:04:76:EF:B5:6D:8F:19:EF:3F:F9:0A:BC
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018585A63AAC5134A38A43EE08A46FB3D2A3
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa
Signing time: Fri 06 Jan 2023 05:55:41 +0000
ROA not before: Fri 06 Jan 2023 05:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211703
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:a6:3a:ac:51:34:a3:8a:43:ee:08:a4:6f:b3:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 6 05:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bcf6f44af79e1350476efb56d8f19ef3ff90abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:2f:ee:f5:3b:db:f6:6f:a6:6a:16:4d:c3:
ab:20:db:28:70:d6:18:28:c9:15:72:6c:18:b7:4b:
97:89:28:81:6f:0a:39:45:30:8e:6c:33:f5:44:b9:
ec:4d:86:17:7d:9b:52:10:6d:13:b5:9d:b1:a6:ea:
21:6b:e0:8a:8b:72:4a:7f:d7:79:8e:69:51:fa:87:
ff:1c:0a:06:48:15:71:6b:a8:73:51:48:af:b7:86:
75:e1:b3:14:db:ce:55:b1:ec:8e:5a:b9:95:26:c1:
2a:30:96:3d:2f:ac:4c:b1:03:62:7c:d5:3d:46:1e:
75:91:de:53:0e:0f:73:3b:7c:67:ee:29:37:97:f3:
d3:b2:59:4b:1c:15:1c:60:ea:74:27:db:9a:13:c1:
c5:b2:c3:83:f0:a2:47:0e:41:e6:97:29:12:9c:a4:
af:37:bf:dc:b0:87:d1:76:5b:9b:98:03:26:1b:40:
08:e7:fe:ab:94:6a:c1:c5:06:5b:fb:dd:bf:b0:4b:
2d:a8:08:68:05:52:6f:e6:04:e0:e5:58:01:11:6c:
dd:28:9e:a2:b4:ae:57:a1:d7:69:49:16:07:13:8d:
7e:be:0d:2b:15:b4:08:f1:46:cf:d3:5b:86:c8:42:
ac:6b:f0:c3:3c:63:b3:c4:c3:ff:61:18:83:20:0d:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:6F:44:AF:79:E1:35:04:76:EF:B5:6D:8F:19:EF:3F:F9:0A:BC
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:d3:37:13:8b:d7:b9:4e:15:cb:c2:f0:c5:ba:b4:0f:b6:88:
ac:05:6e:79:10:cd:73:e6:53:1d:f6:8e:bd:17:1b:0d:62:53:
bf:e4:44:0c:c8:37:1b:de:48:49:41:88:04:4b:4f:c3:20:ed:
7e:a6:d8:ce:2e:d3:7c:da:68:fb:61:ea:d3:23:10:2f:31:3b:
5d:95:60:44:ce:d4:2b:21:b8:96:e8:f1:f6:68:ec:1e:3b:92:
bf:d2:3b:1f:cc:c7:bc:4d:2e:d3:5e:c4:83:91:eb:9f:46:81:
59:0e:d0:bb:bd:22:f3:09:ab:28:20:f0:09:8d:1e:1d:12:6c:
6e:3a:ab:27:b2:ed:ae:87:db:94:b4:61:d2:ab:07:f7:3e:3b:
4b:a9:97:58:50:c5:b4:db:7f:40:30:73:bb:21:61:86:2b:06:
a1:5b:57:86:10:11:50:a6:95:a4:ce:76:2e:a7:06:e3:6c:0d:
c7:a2:d2:ee:6b:44:b1:2c:ac:46:17:60:9a:a7:31:25:c7:0d:
70:a5:b8:52:2f:27:24:ec:26:8d:1f:13:49:88:d4:84:c3:c5:
47:fb:3d:13:25:df:0a:21:52:80:15:64:d4:3f:fa:9e:52:ff:
3f:8f:2f:7d:b2:41:83:41:f4:27:17:fd:b4:e9:76:e2:91:37:
57:9f:93:a2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYWFpjqsUTSjikPuCKRvs9KjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjMwMTA2MDU1NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmNmNmY0NGFmNzllMTM1MDQ3NmVmYjU2ZDhmMTllZjNmZjkwYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Av7vU72/ZvpmoWTcOrINsocNYY
KMkVcmwYt0uXiSiBbwo5RTCObDP1RLnsTYYXfZtSEG0TtZ2xpuoha+CKi3JKf9d5
jmlR+of/HAoGSBVxa6hzUUivt4Z14bMU285VseyOWrmVJsEqMJY9L6xMsQNifNU9
Rh51kd5TDg9zO3xn7ik3l/PTsllLHBUcYOp0J9uaE8HFssOD8KJHDkHmlykSnKSv
N7/csIfRdlubmAMmG0AI5/6rlGrBxQZb+92/sEstqAhoBVJv5gTg5VgBEWzdKJ6i
tK5XoddpSRYHE41+vg0rFbQI8UbP01uGyEKsa/DDPGOzxMP/YRiDIA3yuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFvPb0SveeE1BHbvtW2PGe8/+Qq8MB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvVzg5dlJLOTU0VFVFZHUtMWJZOFo3el81Q3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAONM3E4vXuU4Vy8Lwxbq0D7aIrAVueRDNc+ZTHfaO
vRcbDWJTv+REDMg3G95ISUGIBEtPwyDtfqbYzi7TfNpo+2Hq0yMQLzE7XZVgRM7U
KyG4lujx9mjsHjuSv9I7H8zHvE0u017Eg5Hrn0aBWQ7Qu70i8wmrKCDwCY0eHRJs
bjqrJ7LtrofblLRh0qsH9z47S6mXWFDFtNt/QDBzuyFhhisGoVtXhhARUKaVpM52
LqcG42wNx6LS7mtEsSysRhdgmqcxJccNcKW4Ui8nJOwmjR8TSYjUhMPFR/s9EyXf
CiFSgBVk1D/6nlL/P48vfbJBg0H0Jxf9tOl24pE3V5+Tog==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:33 2025 by rpki-client