Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/6BrXWzvoSPw3K5bIeesLK6do8i8.roa
File: 6BrXWzvoSPw3K5bIeesLK6do8i8.roa (raw, json)
Hash identifier: Ic2yu7vJ5M1/YLtXcSBCMmmZTna4TPbbZ/ugtStkpUQ=
Subject key identifier: E8:1A:D7:5B:3B:E8:48:FC:37:2B:96:C8:79:EB:0B:2B:A7:68:F2:2F
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 444B41E0
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/6BrXWzvoSPw3K5bIeesLK6do8i8.roa
Signing time: Sat 01 Jan 2022 16:02:47 +0000
ROA not before: Sat 01 Jan 2022 16:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21371
IP address blocks: 2a03:6980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145782752 (0x444b41e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 16:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e81ad75b3be848fc372b96c879eb0b2ba768f22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:7e:7c:2b:97:df:ae:0c:9d:b1:6d:41:2a:
88:61:08:60:41:db:26:6b:b1:ae:75:bb:13:25:fd:
2d:dc:86:87:53:18:87:88:22:98:ea:19:c7:d9:bf:
fc:34:59:d1:f5:94:5f:24:c2:b3:74:10:bb:50:e2:
85:7d:64:6e:af:02:d9:80:08:31:e9:9e:65:39:96:
78:ed:5e:56:fc:c1:d5:28:9f:70:91:8c:7d:fe:ac:
26:3e:1d:25:6f:a6:c5:1f:98:f0:fd:e6:8c:d2:ff:
89:46:13:21:2a:95:e3:d2:73:75:4f:77:ca:f0:7b:
c3:69:74:c2:1b:52:4f:21:a4:50:97:39:cf:c8:99:
47:fe:03:12:e8:d9:14:1f:4c:47:e3:67:b4:98:2e:
1e:82:e0:0f:e2:25:7c:e9:5e:b8:5c:ec:df:99:9d:
33:f8:1c:eb:f5:35:c8:52:65:81:78:7b:1f:f3:86:
c6:3a:1d:1f:4b:56:9c:b2:7a:2f:bb:5a:c2:dc:db:
d8:7c:86:08:8a:c8:fd:e5:b9:e1:5d:5b:20:8c:38:
b5:23:e0:54:fc:1c:59:f1:f2:09:35:21:35:2f:bb:
35:59:a1:cd:2e:90:ac:ec:cb:a6:57:3d:84:08:31:
9c:9f:1d:da:af:0f:24:53:da:91:d8:41:02:c0:5f:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:D7:5B:3B:E8:48:FC:37:2B:96:C8:79:EB:0B:2B:A7:68:F2:2F
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/6BrXWzvoSPw3K5bIeesLK6do8i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6980::/32
Signature Algorithm: sha256WithRSAEncryption
12:77:a6:11:92:63:f3:85:85:a1:3f:a2:73:cc:12:6f:32:b2:
27:77:05:cb:76:68:03:5f:2a:3c:06:ca:07:2c:b1:11:4d:61:
86:1d:34:96:4e:7e:d0:1c:e5:98:e2:85:a4:dc:b9:f4:33:e6:
a2:6d:10:32:ec:c0:86:42:1c:5d:1f:64:4a:7a:68:55:22:22:
5a:a2:f7:69:e3:fb:a7:bb:86:78:13:5a:3d:21:7a:2b:01:58:
7d:e1:4f:93:87:b6:e0:d9:fa:96:86:70:f2:d0:8e:66:96:2a:
25:4e:a7:6e:8c:7e:28:2f:bf:cd:e4:7d:f1:3c:08:e7:ca:e4:
e1:bc:f7:84:ab:43:92:38:e7:b2:1f:29:82:ae:17:29:7f:a3:
bc:d4:00:b3:84:94:a8:1c:eb:91:b8:9c:8c:6f:b6:a7:a8:25:
d0:f8:8f:cb:83:ea:d9:44:cd:f4:fb:a0:2d:04:65:87:bd:a3:
53:10:48:09:02:8f:55:85:a7:65:ab:2d:38:31:39:8f:a2:5a:
be:ab:db:91:ba:3f:a6:17:1d:f9:45:33:61:05:ef:08:b9:7b:
06:ae:25:1c:bc:cc:12:95:40:2d:df:26:5b:4b:6a:6a:e6:2f:
37:ee:72:68:cb:b3:56:5e:2d:a7:fc:43:07:58:26:c4:be:2e:
be:13:93:d6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEREtB4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzBmZTk3MWIzZTM2YjE2YTkyYmU4NWY1OTk4NWJlNDU5NjhiODY0MB4XDTIyMDEw
MTE2MDI0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTgxYWQ3NWIzYmU4
NDhmYzM3MmI5NmM4NzllYjBiMmJhNzY4ZjIyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfzfnwrl9+uDJ2xbUEqiGEIYEHbJmuxrnW7EyX9LdyGh1MY
h4gimOoZx9m//DRZ0fWUXyTCs3QQu1DihX1kbq8C2YAIMemeZTmWeO1eVvzB1Sif
cJGMff6sJj4dJW+mxR+Y8P3mjNL/iUYTISqV49JzdU93yvB7w2l0whtSTyGkUJc5
z8iZR/4DEujZFB9MR+NntJguHoLgD+IlfOleuFzs35mdM/gc6/U1yFJlgXh7H/OG
xjodH0tWnLJ6L7tawtzb2HyGCIrI/eW54V1bIIw4tSPgVPwcWfHyCTUhNS+7NVmh
zS6QrOzLplc9hAgxnJ8d2q8PJFPakdhBAsBft7kCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBToGtdbO+hI/Dcrlsh56wsrp2jyLzAfBgNVHSMEGDAWgBQzD+lxs+NrFqkr
6F9ZmFvkWWi4ZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L013X3BjYlBqYXhhcEstaGZXWmhiNUZsb3VHUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvYTM4NjkzLWNmYTAtNDNlOC1hNTFiLTExZTllOWYwMTM0My8x
LzZCclhXenZvU1B3M0s1YkllZXNMSzZkbzhpOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
YTM4NjkzLWNmYTAtNDNlOC1hNTFiLTExZTllOWYwMTM0My8xL013X3BjYlBqYXhh
cEstaGZXWmhiNUZsb3VHUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoDaYAwDQYJKoZIhvcNAQELBQAD
ggEBABJ3phGSY/OFhaE/onPMEm8ysid3Bct2aANfKjwGygcssRFNYYYdNJZOftAc
5ZjihaTcufQz5qJtEDLswIZCHF0fZEp6aFUiIlqi92nj+6e7hngTWj0heisBWH3h
T5OHtuDZ+paGcPLQjmaWKiVOp26Mfigvv83kffE8COfK5OG894SrQ5I457IfKYKu
Fyl/o7zUALOElKgc65G4nIxvtqeoJdD4j8uD6tlEzfT7oC0EZYe9o1MQSAkCj1WF
p2WrLTgxOY+iWr6r25G6P6YXHflFM2EF7wi5ewauJRy8zBKVQC3fJltLamrmLzfu
cmjLs1ZeLaf8QwdYJsS+Lr4Tk9Y=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:33 2025 by rpki-client