Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/3f-zShezjR3V4GKjrnJQxvocc4s.roa
File: 3f-zShezjR3V4GKjrnJQxvocc4s.roa (raw, json)
Hash identifier: xMKQtWO2YwewdW6EmoKp/+fX1n0WsqhGxBGQVpYDZUI=
Subject key identifier: DD:FF:B3:4A:17:B3:8D:1D:D5:E0:62:A3:AE:72:50:C6:FA:1C:73:8B
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 018770490D6D85294192CD11FA4E101CFF80
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/3f-zShezjR3V4GKjrnJQxvocc4s.roa
Signing time: Tue 11 Apr 2023 12:27:28 +0000
ROA not before: Tue 11 Apr 2023 12:27:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a0b:1000::/29 maxlen: 29
2a11:f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:49:0d:6d:85:29:41:92:cd:11:fa:4e:10:1c:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Apr 11 12:27:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddffb34a17b38d1dd5e062a3ae7250c6fa1c738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:99:d1:e5:ec:69:ac:68:71:91:30:15:d9:
5f:c6:f9:21:be:0a:a0:ad:b6:ae:84:54:74:0e:80:
2b:39:4b:d7:44:26:4f:89:fd:5c:f1:7e:4c:e1:68:
25:ad:77:d1:46:d4:8d:7d:ec:ec:60:61:64:b0:f0:
71:0f:68:ca:62:d8:b4:ed:c4:dd:4b:07:4d:ba:c3:
ae:c1:b7:d2:84:82:3f:e5:a6:f2:34:ef:aa:d4:b0:
67:1c:ac:b2:ff:d4:77:f9:a7:98:dd:e6:6d:76:bb:
68:36:13:78:ce:f5:6a:37:8c:50:c7:8d:5f:e2:85:
c1:2d:25:54:a8:63:84:4b:97:b4:05:83:6a:d7:6d:
ea:be:f8:ee:f0:69:d7:84:4d:00:08:39:4c:9b:40:
e9:fc:9c:20:a8:35:50:ce:d8:9b:0d:de:ff:86:d4:
1e:c4:d5:fe:cb:84:0b:4e:23:51:9a:99:bd:49:70:
9a:8a:ca:eb:58:9f:52:2c:4e:d2:85:9b:d5:7b:5b:
87:79:83:59:27:78:05:b9:52:2d:f9:71:dd:42:ef:
28:36:e8:db:06:8c:bd:2c:d9:8d:08:d3:9b:8e:87:
fa:c2:bb:c1:07:3e:48:89:2f:d3:a1:a3:85:88:de:
12:14:87:25:ed:28:ce:d3:cf:29:36:94:a4:77:18:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:B3:4A:17:B3:8D:1D:D5:E0:62:A3:AE:72:50:C6:FA:1C:73:8B
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/3f-zShezjR3V4GKjrnJQxvocc4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1000::/29
2a11:f80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:c7:22:3c:fd:2a:d8:69:d2:7f:17:e8:ac:a1:ed:7d:ce:f3:
a0:77:9c:d1:62:2e:41:ff:5a:b2:c0:86:3f:89:90:96:62:7e:
e8:9d:c0:36:30:61:81:c5:2e:5d:52:c2:df:7e:a5:8f:e9:c0:
0d:9a:82:d1:a6:cf:67:a9:2d:10:50:59:a1:d8:31:03:b1:a5:
68:ef:f8:32:19:9e:93:d5:1d:51:cf:a1:cd:cf:4a:b8:72:b3:
a4:91:d3:ef:2a:6e:9a:fa:2c:75:b3:82:a1:17:90:4e:2e:ad:
bc:a7:d8:1a:d7:e1:f0:02:e2:34:52:09:d5:cd:c8:e1:a7:6a:
65:fb:f5:77:c4:2c:17:6d:40:0a:34:4e:7d:9a:cd:81:43:17:
df:e4:5e:cf:7d:e6:f1:13:ae:75:d1:ca:89:5b:67:99:a7:ce:
87:65:c2:f7:b3:4e:c8:19:ee:06:3e:ae:49:1e:22:46:db:90:
b9:0d:51:04:53:62:e3:0b:ac:3b:17:39:89:ae:60:a0:d6:98:
ab:f2:c4:01:54:6f:d9:33:17:ac:c9:f1:6f:da:31:fa:0a:86:
83:cf:d2:46:e9:f9:2f:61:6f:cc:fc:11:84:49:ca:00:fd:05:
af:df:61:40:ee:0e:83:c6:e3:df:3f:01:a3:ca:a8:b4:0e:41:
54:ed:0d:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYdwSQ1thSlBks0R+k4QHP+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTQ4NDg1Y2U5YjBlNDI1NjQwODA0ZWRjMGVkMmJhNmI4
ZjRiOGYwHhcNMjMwNDExMTIyNzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGZmYjM0YTE3YjM4ZDFkZDVlMDYyYTNhZTcyNTBjNmZhMWM3MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4aZ0eXsaaxocZEwFdlfxvkhvgqg
rbauhFR0DoArOUvXRCZPif1c8X5M4WglrXfRRtSNfezsYGFksPBxD2jKYti07cTd
SwdNusOuwbfShII/5abyNO+q1LBnHKyy/9R3+aeY3eZtdrtoNhN4zvVqN4xQx41f
4oXBLSVUqGOES5e0BYNq123qvvju8GnXhE0ACDlMm0Dp/JwgqDVQztibDd7/htQe
xNX+y4QLTiNRmpm9SXCaisrrWJ9SLE7ShZvVe1uHeYNZJ3gFuVIt+XHdQu8oNujb
Boy9LNmNCNObjof6wrvBBz5IiS/ToaOFiN4SFIcl7SjO088pNpSkdxiOKwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFN3/s0oXs40d1eBio65yUMb6HHOLMB8GA1UdIwQY
MBaAFIDkhIXOmw5CVkCATtwO0rprj0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2Et
YzAzMDE3ZTk4YzUzLzEvM2YtelNoZXpqUjNWNEdLanJuSlF4dm9jYzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2EtYzAzMDE3ZTk4YzUz
LzEvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgsQAAMF
AyoRD4AwDQYJKoZIhvcNAQELBQADggEBAEvHIjz9Kthp0n8X6Kyh7X3O86B3nNFi
LkH/WrLAhj+JkJZifuidwDYwYYHFLl1Swt9+pY/pwA2agtGmz2epLRBQWaHYMQOx
pWjv+DIZnpPVHVHPoc3PSrhys6SR0+8qbpr6LHWzgqEXkE4urbyn2BrX4fAC4jRS
CdXNyOGnamX79XfELBdtQAo0Tn2azYFDF9/kXs995vETrnXRyolbZ5mnzodlwvez
TsgZ7gY+rkkeIkbbkLkNUQRTYuMLrDsXOYmuYKDWmKvyxAFUb9kzF6zJ8W/aMfoK
hoPP0kbp+S9hb8z8EYRJygD9Ba/fYUDuDoPG498/AaPKqLQOQVTtDR0=
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:11 2025 by rpki-client