Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I7oVxbiK9gQzh82Ge_2nkHAlRek.roa
File: I7oVxbiK9gQzh82Ge_2nkHAlRek.roa (raw, json)
Hash identifier: f75PaDOw3qs4L+VR3IlmCculD6i4QWYTojnC9cc49PQ=
Subject key identifier: 23:BA:15:C5:B8:8A:F6:04:33:87:CD:86:7B:FD:A7:90:70:25:45:E9
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200BD6F0E9DC812A9FB82C9DDDBBBEB24
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I7oVxbiK9gQzh82Ge_2nkHAlRek.roa
Signing time: Fri 15 Jul 2022 07:23:10 +0000
ROA not before: Fri 15 Jul 2022 07:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210675
IP address blocks: 2a00:7180:8014::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:bd:6f:0e:9d:c8:12:a9:fb:82:c9:dd:db:bb:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 07:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23ba15c5b88af6043387cd867bfda790702545e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:5b:99:66:fb:f8:24:38:97:06:d2:e8:40:
8c:1c:5c:67:e8:c0:f2:12:f5:64:c3:41:26:99:92:
74:00:03:4b:e3:b2:00:9f:2d:7b:64:7f:5a:ff:ca:
fc:9a:7c:12:35:f5:c9:52:db:69:1f:7a:a1:58:e5:
8a:e5:5c:d7:8d:08:b6:b7:f3:58:ba:a3:70:f2:d4:
52:a8:0a:d3:2a:c2:29:73:7d:53:96:d3:51:12:3f:
61:93:74:28:36:26:fa:ee:90:91:78:cb:f7:3b:c3:
cc:43:d6:42:d6:e3:e0:63:ce:84:5a:bb:ff:52:9e:
42:72:e7:d9:32:ba:8f:dd:08:11:58:6e:66:17:13:
4a:42:c0:fb:cc:7d:60:80:bb:a3:9e:28:3d:3c:e5:
64:4d:8d:67:b0:17:05:f8:73:14:e0:1c:32:83:d9:
23:80:7c:a5:b5:15:6c:4d:6b:59:4a:77:53:6d:34:
0b:fb:65:e7:e4:40:ed:60:d5:a1:b5:42:1b:c5:f0:
5e:7b:6f:1b:eb:d8:b4:36:65:75:28:fa:de:9a:39:
48:2e:93:3c:af:f1:a8:6a:16:3c:29:fc:1a:0c:b2:
95:07:1d:eb:8d:96:49:0d:97:62:02:37:33:69:32:
ea:0a:16:3a:77:c1:79:04:39:ff:af:e4:cd:0d:ce:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:15:C5:B8:8A:F6:04:33:87:CD:86:7B:FD:A7:90:70:25:45:E9
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I7oVxbiK9gQzh82Ge_2nkHAlRek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8014::/46
Signature Algorithm: sha256WithRSAEncryption
11:2a:91:e1:1d:65:6e:40:18:71:b5:d2:74:e2:06:ea:a9:54:
16:03:eb:8d:7c:1a:60:d8:83:fa:ce:0b:97:79:51:48:0d:d0:
6e:58:0c:e3:54:49:2a:7d:80:bb:c1:f2:b1:7c:bb:7f:d1:fe:
0e:e2:8b:09:5a:5c:99:69:e4:05:91:12:98:a7:f1:dd:8c:6e:
20:88:95:30:92:d6:28:4e:ca:cf:a7:96:21:14:0c:1b:23:8f:
d3:c3:4e:25:33:66:ff:b8:88:31:0f:6e:21:7a:94:3d:c9:4f:
07:4a:0d:14:34:ee:b8:7e:39:54:25:6f:09:02:81:50:fb:6a:
62:c9:b6:92:05:0b:fc:2c:63:cd:fb:bd:a4:fb:07:61:69:4f:
9a:73:59:9e:3c:0b:9d:bf:19:e8:40:03:37:52:4a:59:2e:73:
74:2d:6e:99:bb:c1:78:39:56:18:7a:15:c6:69:46:e0:cc:c8:
c6:4f:70:aa:60:3e:10:a2:19:9e:ba:6c:39:04:5c:53:f6:a2:
7e:07:54:5b:58:52:1f:cc:1f:e1:5c:04:75:21:14:72:ae:67:
5b:9b:6c:ad:64:3e:c2:57:27:12:17:25:5c:08:d3:9f:0a:4b:
f4:2b:43:2d:12:94:56:f7:7a:66:6d:26:37:6e:22:cd:97:b2:
bb:8d:23:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIAvW8OncgSqfuCyd3bu+skMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjIwNzE1MDcyMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JhMTVjNWI4OGFmNjA0MzM4N2NkODY3YmZkYTc5MDcwMjU0NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/tbmWb7+CQ4lwbS6ECMHFxn6MDy
EvVkw0EmmZJ0AANL47IAny17ZH9a/8r8mnwSNfXJUttpH3qhWOWK5VzXjQi2t/NY
uqNw8tRSqArTKsIpc31TltNREj9hk3QoNib67pCReMv3O8PMQ9ZC1uPgY86EWrv/
Up5CcufZMrqP3QgRWG5mFxNKQsD7zH1ggLujnig9POVkTY1nsBcF+HMU4Bwyg9kj
gHyltRVsTWtZSndTbTQL+2Xn5EDtYNWhtUIbxfBee28b69i0NmV1KPremjlILpM8
r/GoahY8KfwaDLKVBx3rjZZJDZdiAjczaTLqChY6d8F5BDn/r+TNDc4QFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCO6FcW4ivYEM4fNhnv9p5BwJUXpMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvSTdvVnhiaUs5Z1F6aDgyR2VfMm5rSEFsUmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgBxgIAU
MA0GCSqGSIb3DQEBCwUAA4IBAQARKpHhHWVuQBhxtdJ04gbqqVQWA+uNfBpg2IP6
zguXeVFIDdBuWAzjVEkqfYC7wfKxfLt/0f4O4osJWlyZaeQFkRKYp/HdjG4giJUw
ktYoTsrPp5YhFAwbI4/Tw04lM2b/uIgxD24hepQ9yU8HSg0UNO64fjlUJW8JAoFQ
+2piybaSBQv8LGPN+72k+wdhaU+ac1mePAudvxnoQAM3UkpZLnN0LW6Zu8F4OVYY
ehXGaUbgzMjGT3CqYD4Qohmeumw5BFxT9qJ+B1RbWFIfzB/hXAR1IRRyrmdbm2yt
ZD7CVycSFyVcCNOfCkv0K0MtEpRW93pmbSY3biLNl7K7jSPD
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:13 2025 by rpki-client