Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/EdMfNVetFdDGW_dlD2KrL0T-Mrc.roa
File: EdMfNVetFdDGW_dlD2KrL0T-Mrc.roa (raw, json)
Hash identifier: mESccPktPMdezQ7JymNGTIfz8MDMCZLqlJfQjucUdZs=
Subject key identifier: 11:D3:1F:35:57:AD:15:D0:C6:5B:F7:65:0F:62:AB:2F:44:FE:32:B7
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CADC119A0A807442D12C2531C2AF1
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/EdMfNVetFdDGW_dlD2KrL0T-Mrc.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208223
IP address blocks: 2a12:3fc2:df00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ad:c1:19:a0:a8:07:44:2d:12:c2:53:1c:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d31f3557ad15d0c65bf7650f62ab2f44fe32b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:7c:15:61:86:56:52:f9:69:79:c1:af:83:
2f:ee:f6:b5:36:09:ee:e4:47:b4:d2:d2:19:27:02:
2d:1d:4f:74:15:e2:be:f1:bf:e3:07:42:1b:7e:14:
fb:7d:0c:8c:5e:87:e9:2d:97:e4:17:64:cd:b2:c1:
fe:ca:54:ea:b8:1b:56:a8:3f:1a:06:bd:0a:d8:61:
d8:7b:8e:09:4c:65:ef:cb:27:db:85:10:e7:cf:aa:
d0:6b:09:37:e6:69:8c:41:56:c1:23:45:64:60:ae:
3d:ba:b0:bb:36:92:70:4a:8c:9e:b0:3b:be:5c:a9:
57:8d:05:71:f2:4c:e1:d9:4c:6e:b8:b1:09:af:f8:
32:e8:c3:ad:04:bd:73:3a:02:9d:d0:d5:c0:74:ed:
5c:d3:5f:fb:76:56:99:05:e6:fc:19:cc:6f:18:46:
5a:8a:2b:05:33:68:08:b5:43:85:5c:ff:4c:03:36:
cf:9e:1f:79:80:b2:66:db:86:e8:ec:b0:a9:79:0b:
22:80:88:8e:61:bd:69:40:85:ea:44:da:74:7a:2f:
c3:47:af:3c:9f:58:07:24:65:2c:3a:09:bc:c7:89:
18:bf:1c:6f:51:2d:f1:fd:fd:ac:fd:b8:b6:55:87:
31:9f:a7:29:a3:91:d5:cd:0c:5c:d7:fd:71:11:f8:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:1F:35:57:AD:15:D0:C6:5B:F7:65:0F:62:AB:2F:44:FE:32:B7
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/EdMfNVetFdDGW_dlD2KrL0T-Mrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:df00::/40
Signature Algorithm: sha256WithRSAEncryption
4a:94:d4:30:5d:d6:f1:9b:f4:83:ed:2f:fd:7d:e2:2e:4b:aa:
d7:06:ca:f9:94:73:09:03:d4:94:d6:83:1f:07:f6:84:92:b2:
a4:8c:b2:52:ec:a7:51:03:64:84:11:65:93:ae:5c:b3:b8:4f:
3b:5d:70:36:a3:e1:96:a1:41:66:32:0f:d6:85:ea:de:29:8c:
cf:ba:0f:15:c6:04:35:8d:e4:30:b3:70:17:d5:d7:a8:3a:6c:
b5:ad:fb:4e:07:f0:e1:09:d4:07:51:0c:87:76:a4:d2:da:47:
cf:ee:78:20:fd:02:84:c7:5d:f1:2f:b0:b6:36:7d:5e:a7:91:
6a:9f:79:1b:ec:8b:90:03:c5:e3:54:71:ae:a1:84:a0:e4:19:
cb:76:d3:3d:34:d4:54:54:93:98:b3:9a:36:6e:3f:6c:46:ef:
ba:04:3f:2d:4a:da:79:1f:d5:6a:66:e7:eb:3b:49:c1:52:ed:
46:1e:58:83:3a:66:59:41:32:0f:c1:4d:7b:8d:c4:bb:f8:2e:
df:a5:43:7a:f7:32:69:85:44:bc:0f:7d:e6:8f:26:a4:e5:7c:
85:8f:37:91:55:59:44:36:cf:77:4b:b1:9e:f2:33:10:b2:7b:
06:f5:55:83:f8:73:07:17:65:b1:ec:e2:33:f9:df:c0:2c:36:
48:35:9a:12
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsHK3BGaCoB0QtEsJTHCrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQzMWYzNTU3YWQxNWQwYzY1YmY3NjUwZjYyYWIyZjQ0ZmUzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv18FWGGVlL5aXnBr4Mv7va1Ngnu
5Ee00tIZJwItHU90FeK+8b/jB0IbfhT7fQyMXofpLZfkF2TNssH+ylTquBtWqD8a
Br0K2GHYe44JTGXvyyfbhRDnz6rQawk35mmMQVbBI0VkYK49urC7NpJwSoyesDu+
XKlXjQVx8kzh2UxuuLEJr/gy6MOtBL1zOgKd0NXAdO1c01/7dlaZBeb8GcxvGEZa
iisFM2gItUOFXP9MAzbPnh95gLJm24bo7LCpeQsigIiOYb1pQIXqRNp0ei/DR688
n1gHJGUsOgm8x4kYvxxvUS3x/f2s/bi2VYcxn6cpo5HVzQxc1/1xEfhGtQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBHTHzVXrRXQxlv3ZQ9iqy9E/jK3MB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvRWRNZk5WZXRGZERHV19kbEQyS3JMMFQtTXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wt8w
DQYJKoZIhvcNAQELBQADggEBAEqU1DBd1vGb9IPtL/194i5LqtcGyvmUcwkD1JTW
gx8H9oSSsqSMslLsp1EDZIQRZZOuXLO4TztdcDaj4ZahQWYyD9aF6t4pjM+6DxXG
BDWN5DCzcBfV16g6bLWt+04H8OEJ1AdRDId2pNLaR8/ueCD9AoTHXfEvsLY2fV6n
kWqfeRvsi5ADxeNUca6hhKDkGct20z001FRUk5izmjZuP2xG77oEPy1K2nkf1Wpm
5+s7ScFS7UYeWIM6ZllBMg/BTXuNxLv4Lt+lQ3r3MmmFRLwPfeaPJqTlfIWPN5FV
WUQ2z3dLsZ7yMxCyewb1VYP4cwcXZbHs4jP538AsNkg1mhI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:30 2025 by rpki-client