Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/9gLBYRo_u9PnKGN3hM9HVt5CkqA.roa
File: 9gLBYRo_u9PnKGN3hM9HVt5CkqA.roa (raw, json)
Hash identifier: +dZbLL5iaUVs1WPEzVJL8ttYIFRxEFvDi++HIx2xTCg=
Subject key identifier: F6:02:C1:61:1A:3F:BB:D3:E7:28:63:77:84:CF:47:56:DE:42:92:A0
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 018CC26D17779B3B1F0627E1046BC161CB0F
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/9gLBYRo_u9PnKGN3hM9HVt5CkqA.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 2a0a:8f40:5::/48 maxlen: 48
2a0a:8f40:6::/48 maxlen: 48
2a0a:8f40:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:77:9b:3b:1f:06:27:e1:04:6b:c1:61:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f602c1611a3fbbd3e728637784cf4756de4292a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:22:82:e6:76:a4:f0:d4:72:5c:80:e8:50:
96:5c:46:93:aa:6f:d7:be:54:fe:85:f8:fd:f9:e1:
88:0e:2c:72:04:8b:16:e8:a4:93:6d:a5:60:be:fd:
fa:96:5c:e6:2b:7b:43:98:fb:30:8e:87:ba:b0:1a:
be:bc:36:8f:7f:32:bb:dc:a3:9d:d7:ed:a3:80:ae:
5a:ec:79:6c:f3:50:e9:a3:7d:80:7a:20:27:33:9c:
46:2a:15:62:2c:93:a4:3c:43:d4:0b:f6:4f:9e:84:
8f:01:a3:c6:77:b9:96:66:b6:ae:4a:39:1a:ac:8c:
a1:d2:f3:c9:4d:06:1a:0d:23:2a:0e:fa:2d:b0:e9:
0b:ae:55:a1:17:22:f6:20:17:80:56:fb:5f:48:30:
31:35:c3:6a:37:28:9b:6c:36:fe:b6:45:d9:aa:89:
6e:1d:8d:74:db:06:18:e3:05:44:ef:15:65:b5:57:
b9:4e:15:e1:01:d0:83:7a:50:7e:17:a1:4e:66:5b:
ee:38:c6:ad:8b:2d:45:84:02:55:05:8f:ef:e6:33:
f2:80:54:36:29:80:f1:b8:10:54:9c:f7:a2:1c:7b:
98:78:c7:a8:3b:b4:57:cf:26:2c:0c:30:0e:5b:ed:
a4:bc:a9:5a:4f:97:3e:03:80:f4:81:b0:2d:4b:0e:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:C1:61:1A:3F:BB:D3:E7:28:63:77:84:CF:47:56:DE:42:92:A0
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/9gLBYRo_u9PnKGN3hM9HVt5CkqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8f40:4::-2a0a:8f40:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:bc:80:d6:8d:52:69:3d:a0:5a:97:b9:a6:4f:45:65:ef:ad:
25:08:8d:f1:dd:a2:20:26:10:cc:11:49:72:87:6e:06:60:e6:
50:f4:a8:83:7e:d1:52:6b:5c:00:2f:6b:81:1b:ca:b4:95:05:
c7:39:f2:f0:09:9c:63:1c:4f:31:e2:ee:bb:dd:01:6a:78:29:
38:1e:de:28:81:1f:fc:31:34:4a:7e:37:b3:88:9a:02:f8:b6:
77:5f:77:5c:8d:7c:77:54:77:af:7e:1c:cc:ca:c6:91:1b:28:
33:e0:4d:c8:9d:88:22:33:b6:14:03:d7:87:7d:84:5e:a0:56:
9c:74:ad:36:06:1e:03:e1:be:c3:d1:38:ee:62:4c:0a:19:84:
33:f0:33:fc:67:23:f3:fc:5c:28:da:bf:9f:f0:1f:9a:67:c3:
0e:fd:ae:31:52:45:1d:d4:58:46:78:82:18:fd:fe:26:32:e0:
5a:21:05:0d:09:39:9b:97:5c:09:53:af:44:f8:ca:89:8c:38:
66:cd:d9:22:ae:eb:c8:6a:2a:78:17:dd:62:52:42:e5:77:a7:
0a:f6:c3:8c:84:ef:cb:dd:2c:50:d4:26:4d:6d:8a:dd:77:ec:
d2:7c:4e:8a:4a:f1:02:e2:83:cb:35:ca:ef:27:1b:c9:0d:ca:
8c:6a:d9:b9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzCbRd3mzsfBifhBGvBYcsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjNhYmQ0NzljYmZmNzYwODIzMDRiZjYwZDAzYWRjMzE4
N2Q5MzYwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjAyYzE2MTFhM2ZiYmQzZTcyODYzNzc4NGNmNDc1NmRlNDI5MmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5QiguZ2pPDUclyA6FCWXEaTqm/X
vlT+hfj9+eGIDixyBIsW6KSTbaVgvv36llzmK3tDmPswjoe6sBq+vDaPfzK73KOd
1+2jgK5a7Hls81Dpo32AeiAnM5xGKhViLJOkPEPUC/ZPnoSPAaPGd7mWZrauSjka
rIyh0vPJTQYaDSMqDvotsOkLrlWhFyL2IBeAVvtfSDAxNcNqNyibbDb+tkXZqolu
HY102wYY4wVE7xVltVe5ThXhAdCDelB+F6FOZlvuOMatiy1FhAJVBY/v5jPygFQ2
KYDxuBBUnPeiHHuYeMeoO7RXzyYsDDAOW+2kvKlaT5c+A4D0gbAtSw7JPwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPYCwWEaP7vT5yhjd4TPR1beQpKgMB8GA1UdIwQY
MBaAFKZjq9R5y/92CCMEv2DQOtwxh9k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMt
YmZhMDRmNmNkZTUwLzEvOWdMQllSb191OVBuS0dOM2hNOUhWdDVDa3FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMtYmZhMDRmNmNkZTUw
LzEvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwIqCo9A
AAQDBwAqCo9AAAYwDQYJKoZIhvcNAQELBQADggEBAKu8gNaNUmk9oFqXuaZPRWXv
rSUIjfHdoiAmEMwRSXKHbgZg5lD0qIN+0VJrXAAva4EbyrSVBcc58vAJnGMcTzHi
7rvdAWp4KTge3iiBH/wxNEp+N7OImgL4tndfd1yNfHdUd69+HMzKxpEbKDPgTcid
iCIzthQD14d9hF6gVpx0rTYGHgPhvsPROO5iTAoZhDPwM/xnI/P8XCjav5/wH5pn
ww79rjFSRR3UWEZ4ghj9/iYy4FohBQ0JOZuXXAlTr0T4yomMOGbN2SKu68hqKngX
3WJSQuV3pwr2w4yE78vdLFDUJk1tit137NJ8TopK8QLig8s1yu8nG8kNyoxq2bk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:40 2024 by rpki-client on console-ams.rpki-client.org