Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/4u4zo1QymkoIsl8keUiexpjJOXo.roa
File: 4u4zo1QymkoIsl8keUiexpjJOXo.roa (raw, json)
Hash identifier: ceNoKD70rQ4x2INB1wZz648XwLMrDoszcYSvVs4jdnU=
Subject key identifier: E2:EE:33:A3:54:32:9A:4A:08:B2:5F:24:79:48:9E:C6:98:C9:39:7A
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01837782DC87015486C0A313D59D2981AA26
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/4u4zo1QymkoIsl8keUiexpjJOXo.roa
Signing time: Mon 26 Sep 2022 01:56:48 +0000
ROA not before: Mon 26 Sep 2022 01:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203236
IP address blocks: 2a12:3fc2:aa10::/48 maxlen: 48
2a12:3fc2:aa10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:77:82:dc:87:01:54:86:c0:a3:13:d5:9d:29:81:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Sep 26 01:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2ee33a354329a4a08b25f2479489ec698c9397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:71:72:d8:32:f3:fe:c3:e5:02:93:72:1e:
19:66:5d:eb:37:fc:f8:20:68:14:96:77:a6:98:d3:
99:17:89:20:30:6a:80:71:2c:13:6d:72:56:8f:2f:
cd:0c:f1:e4:53:65:76:dc:94:20:12:73:3c:7d:7c:
59:2e:48:61:55:86:d8:dc:a4:0f:27:c6:5f:43:c7:
4f:09:2a:ca:47:23:f6:a5:77:3b:8d:97:5e:38:82:
1a:34:02:5c:ae:98:69:f3:e8:87:32:c8:2f:64:e0:
1e:a2:a6:ed:ef:b9:e5:22:5d:b9:86:9b:b9:28:b8:
f3:8c:a4:41:a9:79:38:da:d9:1a:87:64:06:e0:ec:
c6:ce:d3:16:88:ce:3c:71:2c:17:45:86:68:89:a7:
a3:53:86:99:c9:72:0e:15:ac:04:04:17:5d:0b:03:
1c:8b:a5:b9:3f:c3:42:48:d1:9b:87:b4:2d:96:e4:
16:83:a8:45:45:7e:a6:db:f4:d1:1e:70:0d:f0:d9:
43:8e:df:90:a2:c2:5b:fd:01:a6:93:e1:0e:99:d5:
53:18:95:66:3f:e0:3c:e3:4f:1d:c0:f7:73:52:68:
9f:47:55:4b:ad:15:1f:cb:ba:a8:56:bb:73:be:e6:
84:5c:2f:e1:d2:b4:48:34:90:34:a5:ac:09:d6:45:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:33:A3:54:32:9A:4A:08:B2:5F:24:79:48:9E:C6:98:C9:39:7A
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/4u4zo1QymkoIsl8keUiexpjJOXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa10::/44
Signature Algorithm: sha256WithRSAEncryption
a7:7b:0b:f3:f9:4b:ae:5a:4d:9e:c1:42:f3:92:ca:3e:6e:e4:
a7:e5:70:de:8d:7b:e6:a2:d7:ad:14:85:26:c2:32:79:42:bd:
ca:26:1c:9c:f3:28:1c:79:44:72:8e:37:4f:b6:d2:4e:f8:e9:
84:21:7e:68:69:05:73:9b:97:9a:d0:7a:db:36:89:15:e3:17:
82:90:b3:06:3f:6a:dc:20:21:dd:66:af:f1:25:40:d5:77:38:
2c:f2:f3:1d:0a:ea:c8:22:c3:3f:9e:e1:05:60:38:2f:04:a5:
bc:68:ef:a9:fe:da:5f:5b:7a:7e:7a:29:4e:76:80:70:2b:88:
a8:43:0c:14:67:65:13:5d:1a:19:0a:a7:80:c0:69:d6:d0:69:
4f:e6:e8:bf:0b:4e:c7:03:bb:44:50:64:f8:98:47:5a:41:a9:
ef:e2:18:07:86:2a:5a:07:19:21:fe:3a:03:48:40:1b:97:83:
59:7f:f9:25:6b:aa:04:41:05:a4:28:bb:78:38:f6:43:5e:72:
2a:b7:48:6c:87:e7:3f:d6:2c:5c:61:39:76:ad:51:52:77:45:
d2:b3:e1:9c:ce:24:65:36:24:00:71:75:10:cc:18:51:95:c3:
17:60:a3:02:0f:76:84:0d:7d:cf:02:29:ae:05:39:44:11:0e:
48:67:53:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYN3gtyHAVSGwKMT1Z0pgaomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjIwOTI2MDE1NjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmVlMzNhMzU0MzI5YTRhMDhiMjVmMjQ3OTQ4OWVjNjk4YzkzOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9pxctgy8/7D5QKTch4ZZl3rN/z4
IGgUlnemmNOZF4kgMGqAcSwTbXJWjy/NDPHkU2V23JQgEnM8fXxZLkhhVYbY3KQP
J8ZfQ8dPCSrKRyP2pXc7jZdeOIIaNAJcrphp8+iHMsgvZOAeoqbt77nlIl25hpu5
KLjzjKRBqXk42tkah2QG4OzGztMWiM48cSwXRYZoiaejU4aZyXIOFawEBBddCwMc
i6W5P8NCSNGbh7QtluQWg6hFRX6m2/TRHnAN8NlDjt+QosJb/QGmk+EOmdVTGJVm
P+A8408dwPdzUmifR1VLrRUfy7qoVrtzvuaEXC/h0rRINJA0pawJ1kWIwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOLuM6NUMppKCLJfJHlInsaYyTl6MB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvNHU0em8xUXlta29Jc2w4a2VVaWV4cGpKT1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhI/wqoQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCnewvz+UuuWk2ewULzkso+buSn5XDejXvmotet
FIUmwjJ5Qr3KJhyc8ygceURyjjdPttJO+OmEIX5oaQVzm5ea0HrbNokV4xeCkLMG
P2rcICHdZq/xJUDVdzgs8vMdCurIIsM/nuEFYDgvBKW8aO+p/tpfW3p+eilOdoBw
K4ioQwwUZ2UTXRoZCqeAwGnW0GlP5ui/C07HA7tEUGT4mEdaQanv4hgHhipaBxkh
/joDSEAbl4NZf/kla6oEQQWkKLt4OPZDXnIqt0hsh+c/1ixcYTl2rVFSd0XSs+Gc
ziRlNiQAcXUQzBhRlcMXYKMCD3aEDX3PAimuBTlEEQ5IZ1On
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:29 2025 by rpki-client