Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/dxtCZZOfAzp8ZblA-l2TLU31-BE.roa
File: dxtCZZOfAzp8ZblA-l2TLU31-BE.roa (raw, json)
Hash identifier: 80AzE5QhATFcRIHRfQ8Ar1SnkWRnvN/uEG6dC13XwJQ=
Subject key identifier: 77:1B:42:65:93:9F:03:3A:7C:65:B9:40:FA:5D:93:2D:4D:F5:F8:11
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA2023BF5C94F5DD58F33210678FC
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/dxtCZZOfAzp8ZblA-l2TLU31-BE.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134478
IP address blocks: 2a12:3fc2:e700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a2:02:3b:f5:c9:4f:5d:d5:8f:33:21:06:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771b4265939f033a7c65b940fa5d932d4df5f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:d0:aa:bf:a1:17:9f:4d:4e:ce:b3:1e:b5:
9e:ae:91:b6:9f:f0:c9:e5:46:31:7d:0f:13:f6:3f:
2a:9e:7d:27:f4:cd:9e:21:35:f9:37:89:0e:39:04:
6b:3b:29:85:91:26:91:5b:bf:d1:82:b5:c6:34:d4:
af:eb:33:0f:7a:31:32:2c:09:18:ff:51:99:96:6e:
8c:b3:f0:6f:12:8f:12:91:74:1e:fc:17:b3:09:12:
cf:2b:cd:43:50:4d:b8:6f:cf:25:1d:39:9e:ab:d3:
26:a7:59:cd:39:e2:2c:e2:71:20:a3:42:4e:c4:8b:
4b:62:f0:77:b3:49:d0:3b:d3:78:95:3c:d3:44:e2:
f8:1c:f3:ae:63:e3:90:b5:7e:28:35:58:82:52:da:
22:fe:ef:35:33:1b:d7:52:f2:8f:3d:42:b6:a7:04:
1c:41:3e:33:72:97:ea:af:91:8f:f8:73:8d:fa:bc:
02:68:b7:50:83:82:8c:48:ea:43:84:3e:b8:10:2e:
14:7b:a1:22:4d:e7:dc:f0:eb:e5:49:8b:44:ee:97:
eb:c7:1b:11:bd:3a:f9:23:8d:93:75:83:6b:ef:8f:
71:7b:de:31:af:82:9d:78:8f:cb:3a:fd:52:21:81:
50:62:90:d5:f1:6f:67:5e:e9:ef:68:6f:6c:58:92:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:42:65:93:9F:03:3A:7C:65:B9:40:FA:5D:93:2D:4D:F5:F8:11
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/dxtCZZOfAzp8ZblA-l2TLU31-BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:e700::/40
Signature Algorithm: sha256WithRSAEncryption
a3:60:25:ff:d3:42:72:59:ba:3a:86:0f:e7:d2:3f:e8:a8:0f:
14:09:a7:71:c2:4f:0d:da:bc:76:77:be:13:c8:02:e6:0f:42:
a2:e5:47:57:0f:e5:6f:35:17:e4:a0:dc:bf:ba:87:7a:a4:48:
44:7d:59:62:c1:fa:62:76:10:72:63:cc:f4:c5:d0:bd:3b:ab:
ca:55:46:8e:6e:9f:87:78:d0:0a:10:65:3f:a1:e4:88:01:37:
c2:c8:1f:f5:13:67:a8:74:6a:15:c2:22:38:f1:08:77:0c:43:
1a:9e:e8:ac:3e:b4:a0:e0:17:0c:b6:c8:c5:2a:1e:98:55:cb:
3e:d6:2d:b0:89:0f:f8:f5:f9:72:0c:55:35:c0:d3:cc:cc:a4:
21:98:7e:e5:8f:a1:66:67:f0:48:1a:e0:55:8e:f5:21:92:85:
8b:13:11:36:93:be:7b:21:c2:bb:e7:c9:0e:39:2c:db:5f:2e:
63:cd:e3:7d:74:66:ea:84:c6:36:44:7e:87:9c:3d:c6:bf:ae:
a3:9a:84:73:95:50:2a:fc:db:bc:4a:64:99:25:e3:88:82:76:
e5:d7:0a:4a:f8:56:47:74:bf:0e:7a:97:8e:f8:48:d0:03:1b:
94:08:18:6d:22:db:93:21:dc:a8:85:eb:f7:01:5f:10:ef:4d:
24:40:1f:b8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsHKICO/XJT13VjzMhBnj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzFiNDI2NTkzOWYwMzNhN2M2NWI5NDBmYTVkOTMyZDRkZjVmODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsvQqr+hF59NTs6zHrWerpG2n/DJ
5UYxfQ8T9j8qnn0n9M2eITX5N4kOOQRrOymFkSaRW7/RgrXGNNSv6zMPejEyLAkY
/1GZlm6Ms/BvEo8SkXQe/BezCRLPK81DUE24b88lHTmeq9Mmp1nNOeIs4nEgo0JO
xItLYvB3s0nQO9N4lTzTROL4HPOuY+OQtX4oNViCUtoi/u81MxvXUvKPPUK2pwQc
QT4zcpfqr5GP+HON+rwCaLdQg4KMSOpDhD64EC4Ue6EiTefc8OvlSYtE7pfrxxsR
vTr5I42TdYNr749xe94xr4KdeI/LOv1SIYFQYpDV8W9nXunvaG9sWJJMmQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHcbQmWTnwM6fGW5QPpdky1N9fgRMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvZHh0Q1paT2ZBenA4WmJsQS1sMlRMVTMxLUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wucw
DQYJKoZIhvcNAQELBQADggEBAKNgJf/TQnJZujqGD+fSP+ioDxQJp3HCTw3avHZ3
vhPIAuYPQqLlR1cP5W81F+Sg3L+6h3qkSER9WWLB+mJ2EHJjzPTF0L07q8pVRo5u
n4d40AoQZT+h5IgBN8LIH/UTZ6h0ahXCIjjxCHcMQxqe6Kw+tKDgFwy2yMUqHphV
yz7WLbCJD/j1+XIMVTXA08zMpCGYfuWPoWZn8Ega4FWO9SGShYsTETaTvnshwrvn
yQ45LNtfLmPN4310ZuqExjZEfoecPca/rqOahHOVUCr827xKZJkl44iCduXXCkr4
Vkd0vw56l474SNADG5QIGG0i25Mh3KiF6/cBXxDvTSRAH7g=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:03 2025 by rpki-client