Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/__Sv4FpvrIoa7iNQVE95fwyt8yg.roa
File: __Sv4FpvrIoa7iNQVE95fwyt8yg.roa (raw, json)
Hash identifier: yYKHnnPCrb3os5+52ww1Ig+NQCRef14NmzhZuJ9xe14=
Subject key identifier: FF:F4:AF:E0:5A:6F:AC:8A:1A:EE:23:50:54:4F:79:7F:0C:AD:F3:28
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0182ECB20C9BC96FB1DE0A4DB7E87E701B8B
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/__Sv4FpvrIoa7iNQVE95fwyt8yg.roa
Signing time: Tue 30 Aug 2022 03:01:07 +0000
ROA not before: Tue 30 Aug 2022 03:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a12:3fc2:df00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ec:b2:0c:9b:c9:6f:b1:de:0a:4d:b7:e8:7e:70:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Aug 30 03:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff4afe05a6fac8a1aee2350544f797f0cadf328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:84:0e:ef:75:df:43:28:fa:92:be:3f:3f:
ca:8a:af:7a:30:50:99:88:d1:c5:85:62:89:e5:2f:
5d:ed:2e:fb:93:4c:87:92:9e:2e:84:4f:39:0b:1a:
13:cb:aa:2b:5e:80:9a:c8:8c:b8:8a:35:37:86:90:
fb:30:59:fc:4d:8e:c1:96:65:aa:80:bc:f9:ae:10:
b0:dc:03:3b:27:71:93:3a:d1:4b:23:0a:29:5a:7f:
17:ba:55:4e:30:1a:00:91:fd:fb:41:53:5e:7b:4c:
99:a8:2c:6f:13:5c:bf:85:ee:6a:22:d2:0c:3a:19:
34:e9:0d:ba:f3:53:2f:c1:1b:d8:01:00:e1:2f:1f:
51:51:d5:2a:54:2d:22:84:06:52:ac:9e:b6:1f:dd:
fe:d2:78:0a:15:44:de:92:29:59:53:11:ca:cc:1d:
77:43:ce:39:ec:73:9e:4f:c2:21:6f:4e:7e:1d:a7:
4c:f4:bb:89:d5:5b:4c:82:af:39:1e:c1:ba:44:b1:
15:5e:14:de:6e:65:18:6c:8e:f1:e3:70:3a:4c:74:
a5:0e:41:54:3e:99:65:8f:62:83:5a:48:ef:b0:39:
ba:55:ad:a1:15:e6:1a:74:7c:b9:4a:ed:c2:de:c5:
0d:29:78:3e:7a:99:56:af:23:e6:10:46:98:5f:5a:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:AF:E0:5A:6F:AC:8A:1A:EE:23:50:54:4F:79:7F:0C:AD:F3:28
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/__Sv4FpvrIoa7iNQVE95fwyt8yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:df00::/40
Signature Algorithm: sha256WithRSAEncryption
66:95:29:5b:1d:a2:a3:24:22:89:42:4f:f0:10:63:a7:19:4d:
31:c2:2a:c3:fe:45:c7:af:e8:a4:b6:5d:6a:07:3e:dd:d9:23:
06:bd:cd:47:63:e8:78:f9:e4:19:4a:29:cd:d5:06:59:24:41:
17:6e:14:f9:51:35:69:f9:b3:39:2e:d8:a4:ac:47:60:a9:5b:
d2:d5:0b:c4:b9:9c:0e:f9:22:58:0c:57:46:7f:b9:0c:4b:88:
9f:55:2e:60:ec:5d:03:4d:e6:65:f5:c2:e3:be:c4:e4:b9:72:
eb:86:17:2b:72:2f:bf:e1:20:69:66:f8:1e:de:6b:8f:5e:b4:
54:6b:e5:62:b7:a7:31:ae:dd:7e:e6:c1:a7:22:9e:b4:05:ab:
f1:9e:dd:c0:9f:a6:1c:52:af:2c:62:b1:7b:62:0d:7b:30:10:
d1:64:de:69:46:29:31:20:1c:7b:7c:ce:aa:eb:94:ef:3e:29:
d7:3f:44:8b:39:cc:b1:03:96:af:3c:4f:c6:87:e2:c7:1d:26:
c0:be:80:5d:16:c3:15:68:30:63:56:c4:74:13:94:75:fc:c5:
32:d0:5b:d9:88:8b:47:4a:2a:90:78:bc:9d:4b:61:50:27:f6:
50:49:9c:30:cf:94:39:da:3a:b5:0a:a6:24:72:9d:43:46:51:
1d:a2:2f:b3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYLssgybyW+x3gpNt+h+cBuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjIwODMwMDMwMTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmY0YWZlMDVhNmZhYzhhMWFlZTIzNTA1NDRmNzk3ZjBjYWRmMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEmEDu9130Mo+pK+Pz/Kiq96MFCZ
iNHFhWKJ5S9d7S77k0yHkp4uhE85CxoTy6orXoCayIy4ijU3hpD7MFn8TY7BlmWq
gLz5rhCw3AM7J3GTOtFLIwopWn8XulVOMBoAkf37QVNee0yZqCxvE1y/he5qItIM
Ohk06Q2681MvwRvYAQDhLx9RUdUqVC0ihAZSrJ62H93+0ngKFUTekilZUxHKzB13
Q8457HOeT8Ihb05+HadM9LuJ1VtMgq85HsG6RLEVXhTebmUYbI7x43A6THSlDkFU
Ppllj2KDWkjvsDm6Va2hFeYadHy5Su3C3sUNKXg+eplWryPmEEaYX1q8KwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFP/0r+Bab6yKGu4jUFRPeX8MrfMoMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvX19TdjRGcHZySW9hN2lOUVZFOTVmd3l0OHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wt8w
DQYJKoZIhvcNAQELBQADggEBAGaVKVsdoqMkIolCT/AQY6cZTTHCKsP+Rcev6KS2
XWoHPt3ZIwa9zUdj6Hj55BlKKc3VBlkkQRduFPlRNWn5szku2KSsR2CpW9LVC8S5
nA75IlgMV0Z/uQxLiJ9VLmDsXQNN5mX1wuO+xOS5cuuGFytyL7/hIGlm+B7ea49e
tFRr5WK3pzGu3X7mwacinrQFq/Ge3cCfphxSryxisXtiDXswENFk3mlGKTEgHHt8
zqrrlO8+Kdc/RIs5zLEDlq88T8aH4scdJsC+gF0WwxVoMGNWxHQTlHX8xTLQW9mI
i0dKKpB4vJ1LYVAn9lBJnDDPlDnaOrUKpiRynUNGUR2iL7M=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:45 2025 by rpki-client