Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/T_J0Mt_L0-KUnSWErXmPHFKgJWc.roa
File: T_J0Mt_L0-KUnSWErXmPHFKgJWc.roa (raw, json)
Hash identifier: kpGwTjrhPcyLgppB26HUyT/C/QipF5pqr1M4NTW8Ceg=
Subject key identifier: 4F:F2:74:32:DF:CB:D3:E2:94:9D:25:84:AD:79:8F:1C:52:A0:25:67
Certificate issuer: /CN=5386fa6196b281d7b9342e671068ade678fa5119
Certificate serial: 176C9B3F
Authority key identifier: 53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/T_J0Mt_L0-KUnSWErXmPHFKgJWc.roa
Signing time: Sat 01 Jan 2022 09:56:28 +0000
ROA not before: Sat 01 Jan 2022 09:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12502
IP address blocks: 2001:67c:2a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392993599 (0x176c9b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5386fa6196b281d7b9342e671068ade678fa5119
Validity
Not Before: Jan 1 09:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ff27432dfcbd3e2949d2584ad798f1c52a02567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:4b:25:62:b7:25:f8:b2:e4:f3:17:52:1e:
a2:2d:0a:87:53:54:69:54:b0:06:f6:99:6f:b1:33:
9a:28:f1:cf:45:c6:f7:6d:89:33:fe:5c:3e:87:1f:
1b:d6:ef:62:a0:66:e9:f3:de:7f:24:ca:84:6a:4d:
f7:4e:01:4d:ed:66:17:fc:02:73:32:32:69:98:54:
28:f6:90:90:9d:b1:10:b6:75:2b:96:aa:8e:45:51:
01:d1:1c:ef:4c:61:48:af:22:d2:03:11:fd:aa:03:
fc:17:21:c2:5f:8e:7d:0b:da:ca:d4:99:cc:b7:77:
25:60:ae:6c:00:4c:c6:29:09:e9:6c:82:b0:cd:18:
ea:0c:00:4e:d7:66:0b:6d:aa:e1:3a:67:c8:9c:e4:
4a:26:bc:23:21:00:2c:63:9b:97:f5:55:1f:7d:f2:
15:ff:30:9c:70:8c:6c:f6:80:a6:2b:32:97:fb:cb:
52:46:0b:4d:79:9a:ed:0a:5f:5e:73:33:3b:70:a1:
5a:ea:88:1a:36:e0:4d:97:05:2b:de:79:e3:87:27:
37:28:1a:fa:7f:36:e3:16:c8:4c:49:a7:73:78:98:
25:32:16:69:6b:7b:b4:98:56:f8:ef:33:5e:d0:44:
86:3a:8b:ab:cf:2b:c4:b9:cc:c1:69:b4:1e:7e:2c:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:74:32:DF:CB:D3:E2:94:9D:25:84:AD:79:8F:1C:52:A0:25:67
X509v3 Authority Key Identifier:
keyid:53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/T_J0Mt_L0-KUnSWErXmPHFKgJWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
22:ff:63:dc:39:34:b3:00:58:b9:6d:b9:7e:6d:b7:6d:4c:d8:
9b:aa:21:ff:ab:cf:ae:ab:fc:35:08:da:32:27:42:84:24:34:
10:70:6b:02:3c:29:6e:46:1c:e2:a3:a5:7b:60:98:d2:32:3b:
1c:ec:ca:34:2e:57:0e:1c:a5:aa:69:b0:4e:7c:73:6d:78:2d:
d7:f2:a4:2b:e3:b9:39:2a:05:98:36:2a:54:cb:c4:61:54:a4:
ec:ed:a4:9f:38:a6:a1:70:9a:c0:a6:8e:a5:b6:2b:01:d3:8c:
d3:07:b5:b4:21:97:64:40:86:23:73:d7:3c:f5:1c:fe:5c:ac:
c8:51:47:d8:47:35:9f:08:62:d0:ed:b9:d0:e5:88:5d:7d:d6:
c7:ba:9b:af:a6:0f:64:8e:dc:58:c7:bd:b4:1f:00:61:b0:d2:
fc:8e:1e:03:ef:ad:35:7f:ba:63:02:72:4f:21:a5:4b:03:96:
5a:d3:9c:69:4c:14:3e:40:0a:3f:35:54:16:a3:fd:fb:d2:20:
1f:d7:54:e6:3a:b7:11:f7:e2:f7:b5:1c:76:c2:9c:dd:6d:fa:
94:11:5a:88:a9:25:7c:fb:7f:9c:9a:3b:cb:4d:05:bc:8b:af:
36:38:b1:ff:45:e3:cc:f8:81:99:c9:da:bf:f1:64:18:da:08:
8a:01:0b:38
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEF2ybPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Mzg2ZmE2MTk2YjI4MWQ3YjkzNDJlNjcxMDY4YWRlNjc4ZmE1MTE5MB4XDTIyMDEw
MTA5NTYyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGZmMjc0MzJkZmNi
ZDNlMjk0OWQyNTg0YWQ3OThmMWM1MmEwMjU2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2fSyVityX4suTzF1Ieoi0Kh1NUaVSwBvaZb7Ezmijxz0XG
922JM/5cPocfG9bvYqBm6fPefyTKhGpN904BTe1mF/wCczIyaZhUKPaQkJ2xELZ1
K5aqjkVRAdEc70xhSK8i0gMR/aoD/Bchwl+OfQvaytSZzLd3JWCubABMxikJ6WyC
sM0Y6gwATtdmC22q4TpnyJzkSia8IyEALGObl/VVH33yFf8wnHCMbPaApisyl/vL
UkYLTXma7QpfXnMzO3ChWuqIGjbgTZcFK95544cnNyga+n824xbITEmnc3iYJTIW
aWt7tJhW+O8zXtBEhjqLq88rxLnMwWm0Hn4sR1cCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRP8nQy38vT4pSdJYSteY8cUqAlZzAfBgNVHSMEGDAWgBRThvphlrKB17k0
LmcQaK3mePpRGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1U0YjZZWmF5Z2RlNU5DNW5FR2l0NW5qNlVSay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvODRiMmRhLTgyMDEtNDA4Ni05ZDJjLWRhMzE1MWRlMzZlNi8x
L1RfSjBNdF9MMC1LVW5TV0VyWG1QSEZLZ0pXYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
ODRiMmRhLTgyMDEtNDA4Ni05ZDJjLWRhMzE1MWRlMzZlNi8xL1U0YjZZWmF5Z2Rl
NU5DNW5FR2l0NW5qNlVSay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwqFDANBgkqhkiG9w0BAQsF
AAOCAQEAIv9j3Dk0swBYuW25fm23bUzYm6oh/6vPrqv8NQjaMidChCQ0EHBrAjwp
bkYc4qOle2CY0jI7HOzKNC5XDhylqmmwTnxzbXgt1/KkK+O5OSoFmDYqVMvEYVSk
7O2knzimoXCawKaOpbYrAdOM0we1tCGXZECGI3PXPPUc/lysyFFH2Ec1nwhi0O25
0OWIXX3Wx7qbr6YPZI7cWMe9tB8AYbDS/I4eA++tNX+6YwJyTyGlSwOWWtOcaUwU
PkAKPzVUFqP9+9IgH9dU5jq3Effi97UcdsKc3W36lBFaiKklfPt/nJo7y00FvIuv
Njix/0XjzPiBmcnav/FkGNoIigELOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org