Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/gjMOyiXWw4wKUsOShqXPcdKNOmI.roa
File: gjMOyiXWw4wKUsOShqXPcdKNOmI.roa (raw, json)
Hash identifier: nQTjwswYz6J7ULtj5ZgJjCBnZU/SyFDKZWaAfg/Udh0=
Subject key identifier: 82:33:0E:CA:25:D6:C3:8C:0A:52:C3:92:86:A5:CF:71:D2:8D:3A:62
Certificate issuer: /CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Certificate serial: 0182F51B99C5B775B0E6322A3E264B77A4C3
Authority key identifier: EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/gjMOyiXWw4wKUsOShqXPcdKNOmI.roa
Signing time: Wed 31 Aug 2022 18:13:22 +0000
ROA not before: Wed 31 Aug 2022 18:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210743
IP address blocks: 2a12:1ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:1b:99:c5:b7:75:b0:e6:32:2a:3e:26:4b:77:a4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Validity
Not Before: Aug 31 18:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82330eca25d6c38c0a52c39286a5cf71d28d3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:28:33:fa:b6:12:a7:56:5b:7f:67:4b:42:
1b:ef:ee:38:01:47:aa:c3:59:90:e6:6c:15:2f:ac:
5b:54:e6:2e:86:a7:3a:06:f1:f9:f8:ce:ff:65:42:
df:c7:bd:f9:db:b5:20:c6:86:79:33:c2:9a:92:91:
48:ae:08:fc:9b:6d:03:62:3e:a3:ea:7f:de:bf:53:
7c:65:b3:9e:cd:c4:dc:50:6b:3f:ea:f1:1e:fd:50:
13:af:37:b1:c6:49:9c:11:fe:ac:54:fb:9d:62:13:
ec:8d:3e:8b:9a:f1:84:22:1f:b7:7d:c1:4e:d1:df:
9e:77:2b:f4:7f:1d:9e:28:58:22:24:a3:3d:63:c0:
dd:7a:b9:ad:df:4f:a9:e3:da:20:7e:ee:43:18:64:
49:d0:cd:18:0d:27:e7:a3:d1:62:6c:e8:b3:85:03:
55:77:a4:59:c8:cf:c5:2c:e1:d2:40:e5:a2:f7:9e:
d1:8f:76:81:2d:08:e4:fa:f3:ab:b3:0e:b9:63:dc:
08:75:fb:f8:72:7d:09:3b:9d:20:3c:67:01:81:19:
84:fc:14:d1:04:22:88:bf:b9:47:61:59:58:04:55:
0f:df:b8:6b:d1:30:97:51:dd:78:01:cd:42:e8:24:
e6:26:4a:86:89:a0:84:6d:54:26:58:b8:b5:c7:c6:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:0E:CA:25:D6:C3:8C:0A:52:C3:92:86:A5:CF:71:D2:8D:3A:62
X509v3 Authority Key Identifier:
keyid:EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/gjMOyiXWw4wKUsOShqXPcdKNOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
c3:c8:dc:89:14:8f:27:e6:f6:d0:d0:4e:26:b4:ec:42:9c:88:
8e:94:d5:e7:38:c6:e3:93:05:57:bb:91:8b:71:69:4d:df:4b:
93:13:ff:47:35:c2:7e:2e:e8:2a:ef:70:27:31:3f:b9:e3:02:
bf:74:d1:03:58:71:a8:c0:11:59:7c:d7:6f:fb:b2:e2:88:b1:
f9:dd:c7:c5:d0:2c:13:8c:80:b6:d9:a2:e5:c6:e4:22:4e:7d:
54:fb:69:1a:f7:73:4c:2f:a6:bb:50:4c:55:79:20:d3:c9:b8:
db:4c:70:c5:4a:1e:af:5b:09:00:23:98:30:5c:a5:5c:e3:bb:
02:3d:05:4f:a5:e7:ce:09:d8:a6:4d:9c:8d:f8:a6:c7:63:88:
31:e4:43:0f:82:9d:fb:d5:f1:35:ee:ef:a7:5e:ea:10:e7:26:
91:dd:6e:bb:d8:da:23:c6:11:a4:68:09:58:03:c9:3d:25:8b:
07:e7:ae:2d:a7:45:b3:1b:3e:7a:7e:ab:a9:e3:96:fd:e5:2c:
2a:1e:1d:8b:52:df:a4:a6:98:40:ef:24:81:f2:97:e3:7a:46:
c9:89:ab:40:e7:dc:19:d6:b5:25:61:94:22:d6:9d:20:c3:00:
00:6e:41:2d:ac:74:de:2c:8d:9f:58:15:a4:6b:6c:a6:2c:b2:
38:d3:b7:f0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYL1G5nFt3Ww5jIqPiZLd6TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmFmNmNmMjI2MGVlMTliN2EwMmEzOTIyM2ZjNGUyMmU5
YTYyYWUwHhcNMjIwODMxMTgxMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjMzMGVjYTI1ZDZjMzhjMGE1MmMzOTI4NmE1Y2Y3MWQyOGQzYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIoM/q2EqdWW39nS0Ib7+44AUeq
w1mQ5mwVL6xbVOYuhqc6BvH5+M7/ZULfx73527UgxoZ5M8KakpFIrgj8m20DYj6j
6n/ev1N8ZbOezcTcUGs/6vEe/VATrzexxkmcEf6sVPudYhPsjT6LmvGEIh+3fcFO
0d+edyv0fx2eKFgiJKM9Y8Ddermt30+p49ogfu5DGGRJ0M0YDSfno9FibOizhQNV
d6RZyM/FLOHSQOWi957Rj3aBLQjk+vOrsw65Y9wIdfv4cn0JO50gPGcBgRmE/BTR
BCKIv7lHYVlYBFUP37hr0TCXUd14Ac1C6CTmJkqGiaCEbVQmWLi1x8Z0qwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIIzDsol1sOMClLDkoalz3HSjTpiMB8GA1UdIwQY
MBaAFOoq9s8iYO4Zt6AqOSI/xOIummKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmlyMnp5Smc3aG0zb0NvNUlqX0U0aTZhWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGIzZTUtMTk3Mi00YzhkLThjNGUt
NGE4ZjgyNDk3MmNlLzEvZ2pNT3lpWFd3NHdLVXNPU2hxWFBjZEtOT21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZGIzZTUtMTk3Mi00YzhkLThjNGUtNGE4ZjgyNDk3MmNl
LzEvNmlyMnp5Smc3aG0zb0NvNUlqX0U0aTZhWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIawDAN
BgkqhkiG9w0BAQsFAAOCAQEAw8jciRSPJ+b20NBOJrTsQpyIjpTV5zjG45MFV7uR
i3FpTd9LkxP/RzXCfi7oKu9wJzE/ueMCv3TRA1hxqMARWXzXb/uy4oix+d3HxdAs
E4yAttmi5cbkIk59VPtpGvdzTC+mu1BMVXkg08m420xwxUoer1sJACOYMFylXOO7
Aj0FT6XnzgnYpk2cjfimx2OIMeRDD4Kd+9XxNe7vp17qEOcmkd1uu9jaI8YRpGgJ
WAPJPSWLB+euLadFsxs+en6rqeOW/eUsKh4di1LfpKaYQO8kgfKX43pGyYmrQOfc
Gda1JWGUItadIMMAAG5BLax03iyNn1gVpGtspiyyONO38A==
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:51 2025 by rpki-client