Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/SAFA3KqMy4PFltrLtBtRjaQpSto.roa
File: SAFA3KqMy4PFltrLtBtRjaQpSto.roa (raw, json)
Hash identifier: 716WZPUvrw60ADGWJPjV5G6HWgakkZ8pmsmcNbl82fk=
Subject key identifier: 48:01:40:DC:AA:8C:CB:83:C5:96:DA:CB:B4:1B:51:8D:A4:29:4A:DA
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 018C53B290EDC9088A0B59781D0E505F8299
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/SAFA3KqMy4PFltrLtBtRjaQpSto.roa
Signing time: Sun 10 Dec 2023 12:27:40 +0000
ROA not before: Sun 10 Dec 2023 12:27:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215889
IP address blocks: 2a11:a580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:b2:90:ed:c9:08:8a:0b:59:78:1d:0e:50:5f:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Dec 10 12:27:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480140dcaa8ccb83c596dacbb41b518da4294ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:29:bf:b4:e8:e8:e4:13:05:68:32:73:c9:
4b:55:a9:81:d0:d0:dd:17:92:b2:32:84:d2:d2:63:
1d:cd:da:a8:c0:a6:4d:8c:7f:f0:33:f1:f3:ac:ce:
e4:5e:9b:24:b1:85:99:63:ce:10:cb:f9:c3:08:4f:
f1:0b:af:0b:93:1b:83:ce:07:48:e9:3e:5a:97:33:
5c:55:97:66:c4:54:93:b8:31:18:0c:a1:cb:4e:e4:
53:b3:41:91:cc:30:46:68:60:e8:86:f3:69:fd:7f:
8a:9f:f5:9d:8f:b5:f2:ae:05:83:de:d1:0b:52:d0:
85:87:0f:2f:ec:fd:7d:3a:ab:bd:45:f3:92:04:21:
c0:7e:cc:03:cd:e6:b1:e5:6b:55:b0:d3:16:a7:33:
9f:df:b7:f3:5a:fc:af:58:ab:1e:5b:b8:1d:08:35:
aa:a9:83:57:fd:9d:bf:57:ab:92:f4:5c:63:a2:59:
d5:da:00:b6:4c:76:8e:50:24:7e:31:1a:95:d5:55:
2b:9b:c4:0b:e0:12:4f:c3:14:da:97:db:53:2b:63:
9c:e3:ae:4f:f8:29:00:89:4e:9e:72:f5:9b:6c:ce:
55:a6:e5:13:fb:76:77:b2:48:6b:ff:7d:14:d0:99:
53:61:66:45:ef:9b:e0:68:a1:31:25:74:a9:11:cc:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:40:DC:AA:8C:CB:83:C5:96:DA:CB:B4:1B:51:8D:A4:29:4A:DA
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/SAFA3KqMy4PFltrLtBtRjaQpSto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/32
Signature Algorithm: sha256WithRSAEncryption
51:d4:7b:90:12:26:61:c2:94:2c:7a:b6:8d:bb:1f:b1:0c:1d:
60:5b:9d:75:4f:16:1a:d7:e2:53:08:97:2a:db:14:43:64:2e:
2e:61:67:8b:e9:cc:3d:ca:94:90:85:a5:90:24:eb:9a:99:95:
2f:c6:f0:cb:d8:90:d8:f3:88:41:55:99:61:7c:a2:6f:fe:ca:
b9:34:9f:59:88:eb:11:82:ef:36:62:4e:b5:8c:4e:f8:fe:ba:
ae:ff:95:2a:0f:02:82:77:58:13:50:36:ae:b7:43:d2:dd:b1:
41:ba:fa:1a:24:30:a7:db:a4:62:a0:51:7e:90:cc:a5:bd:33:
3e:d1:28:47:eb:23:ad:f9:ea:5c:bf:c0:ff:07:4e:90:09:f4:
8b:af:d1:51:c0:ce:79:2b:31:7b:b6:b6:b6:c6:da:c7:97:07:
c4:b6:d2:73:fb:47:ae:ae:56:13:0a:d8:3b:10:3b:bc:f8:48:
24:d3:d8:ed:26:37:ae:79:21:8d:ae:00:01:d9:e6:0b:10:52:
d2:de:62:41:24:8a:f5:2f:b8:67:ac:6c:03:23:0b:18:ef:48:
99:91:f5:e6:da:2f:c3:f0:45:f1:94:b1:4a:16:f5:c4:93:a9:
dd:5b:b6:56:1f:7f:58:ca:55:83:de:e2:59:92:d8:76:12:59:
e2:4f:35:ca
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYxTspDtyQiKC1l4HQ5QX4KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZjEwNGZjNGIwYjVjMDgyNzJlM2FlNzgzYjhjZDc3N2Jh
MmFhOTAwHhcNMjMxMjEwMTIyNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODAxNDBkY2FhOGNjYjgzYzU5NmRhY2JiNDFiNTE4ZGE0Mjk0YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Mpv7To6OQTBWgyc8lLVamB0NDd
F5KyMoTS0mMdzdqowKZNjH/wM/HzrM7kXpsksYWZY84Qy/nDCE/xC68LkxuDzgdI
6T5alzNcVZdmxFSTuDEYDKHLTuRTs0GRzDBGaGDohvNp/X+Kn/Wdj7XyrgWD3tEL
UtCFhw8v7P19Oqu9RfOSBCHAfswDzeax5WtVsNMWpzOf37fzWvyvWKseW7gdCDWq
qYNX/Z2/V6uS9FxjolnV2gC2THaOUCR+MRqV1VUrm8QL4BJPwxTal9tTK2Oc465P
+CkAiU6ecvWbbM5VpuUT+3Z3skhr/30U0JlTYWZF75vgaKExJXSpEcwoRQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEgBQNyqjMuDxZbay7QbUY2kKUraMB8GA1UdIwQY
MBaAFF7xBPxLC1wIJy4654O4zXd7oqqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZFRV9Fc0xYQWduTGpybmc3ak5kM3VpcXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zNTNiZmEtYWJkYi00NDRhLTgxNTQt
NGZjNTRiMGJhYTc4LzEvU0FGQTNLcU15NFBGbHRyTHRCdFJqYVFwU3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zNTNiZmEtYWJkYi00NDRhLTgxNTQtNGZjNTRiMGJhYTc4
LzEvWHZFRV9Fc0xYQWduTGpybmc3ak5kM3VpcXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGlgDAN
BgkqhkiG9w0BAQsFAAOCAQEAUdR7kBImYcKULHq2jbsfsQwdYFuddU8WGtfiUwiX
KtsUQ2QuLmFni+nMPcqUkIWlkCTrmpmVL8bwy9iQ2POIQVWZYXyib/7KuTSfWYjr
EYLvNmJOtYxO+P66rv+VKg8CgndYE1A2rrdD0t2xQbr6GiQwp9ukYqBRfpDMpb0z
PtEoR+sjrfnqXL/A/wdOkAn0i6/RUcDOeSsxe7a2tsbax5cHxLbSc/tHrq5WEwrY
OxA7vPhIJNPY7SY3rnkhja4AAdnmCxBS0t5iQSSK9S+4Z6xsAyMLGO9ImZH15tov
w/BF8ZSxShb1xJOp3Vu2Vh9/WMpVg97iWZLYdhJZ4k81yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org