Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/djv4GiQ0opvi5FgDATg3HuaYgg0.roa
File: djv4GiQ0opvi5FgDATg3HuaYgg0.roa (raw, json)
Hash identifier: b1ApHJTDQN2bDzfyqONy1arrNLUvVBjZuTY2K8kHA1M=
Subject key identifier: 76:3B:F8:1A:24:34:A2:9B:E2:E4:58:03:01:38:37:1E:E6:98:82:0D
Certificate issuer: /CN=496e79694637ee05579e1804c14d851e382a14c8
Certificate serial: 018C2668098332A8EC0142F07A7389E96DBE
Authority key identifier: 49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/djv4GiQ0opvi5FgDATg3HuaYgg0.roa
Signing time: Fri 01 Dec 2023 17:23:21 +0000
ROA not before: Fri 01 Dec 2023 17:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 2a09:3700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:68:09:83:32:a8:ec:01:42:f0:7a:73:89:e9:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496e79694637ee05579e1804c14d851e382a14c8
Validity
Not Before: Dec 1 17:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763bf81a2434a29be2e458030138371ee698820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:a9:62:f4:d9:39:93:94:db:9d:c2:97:aa:
b1:82:45:cb:7e:32:8d:55:91:20:97:28:1a:ad:04:
d6:63:65:19:87:58:8c:71:e2:54:1a:25:e9:ce:ef:
e5:00:ff:d4:d6:7f:aa:29:f4:b7:e2:60:35:bf:89:
15:11:8b:cf:2c:f1:ca:63:c5:3b:f6:53:c1:9a:7f:
73:4e:9b:1a:65:98:8b:aa:73:67:62:c1:cf:e8:f3:
d5:04:9d:f7:3c:7e:85:dd:45:64:87:b9:12:d3:37:
cf:54:fe:84:18:b8:da:96:da:cc:7c:4e:31:79:d7:
01:9c:b6:ad:36:d7:1d:e5:53:3d:d9:db:2a:33:1a:
2b:64:42:90:6d:e9:7d:68:27:52:64:64:85:75:21:
02:7e:5e:95:99:18:02:c8:46:f9:92:5a:a9:85:f0:
63:49:06:74:cd:32:94:90:2e:ce:59:a2:60:9a:c7:
c8:54:dd:7f:65:e8:91:23:19:c9:22:a1:ff:0a:85:
09:99:6b:62:82:f9:93:5b:68:08:c9:d6:96:60:dc:
1d:32:9b:0d:76:34:9a:03:38:6e:37:fa:9d:68:3b:
01:8a:cb:ad:15:1b:37:d9:7d:c1:e8:c7:37:85:ba:
96:b0:76:a9:55:55:60:bf:2a:86:0f:7f:2b:74:1d:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:F8:1A:24:34:A2:9B:E2:E4:58:03:01:38:37:1E:E6:98:82:0D
X509v3 Authority Key Identifier:
keyid:49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/djv4GiQ0opvi5FgDATg3HuaYgg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3700::/32
Signature Algorithm: sha256WithRSAEncryption
9b:8f:dd:b5:f6:b3:f9:cc:9a:2a:f3:a6:f2:82:5f:20:f3:df:
56:33:04:c4:56:0d:4d:b4:3a:1a:47:12:1a:e2:21:0d:bd:f3:
1a:5b:bf:0e:26:80:b4:f0:99:1e:06:8f:3b:d4:a0:8e:bb:62:
35:c5:eb:76:96:7f:cf:87:f8:8e:39:94:cb:b6:49:23:0e:70:
47:da:59:46:c3:c1:ab:92:31:95:73:c2:c9:9f:c5:8c:df:1b:
b1:df:a3:f3:c8:d2:6b:11:be:e0:02:f9:6b:96:7e:09:4f:b4:
21:1b:c0:85:37:8b:78:9f:26:1b:ba:6f:47:74:32:de:4f:59:
66:03:02:6c:7c:e7:53:29:57:51:5c:76:4b:66:5e:25:ea:01:
f1:52:d2:b7:8c:c9:3e:bf:19:ac:3e:03:00:cb:4b:02:64:9b:
36:9e:71:9f:b6:55:04:fb:a5:1b:24:9e:bf:35:37:5b:1d:57:
c7:ce:88:20:c6:58:e0:f1:25:7e:c1:ed:be:e1:c7:49:2e:c4:
58:58:7e:bc:4f:c2:03:1e:d2:34:c6:ba:af:7e:67:e3:99:93:
b7:82:d1:5e:e1:3f:2e:b7:84:22:ad:56:c1:87:51:5b:ac:ba:
5d:37:04:9f:ee:82:4a:cc:81:cc:64:70:05:7f:e4:c0:92:34:
e1:e2:f4:8d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYwmaAmDMqjsAULwenOJ6W2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmU3OTY5NDYzN2VlMDU1NzllMTgwNGMxNGQ4NTFlMzgy
YTE0YzgwHhcNMjMxMjAxMTcyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjNiZjgxYTI0MzRhMjliZTJlNDU4MDMwMTM4MzcxZWU2OTg4MjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqpYvTZOZOU253Cl6qxgkXLfjKN
VZEglygarQTWY2UZh1iMceJUGiXpzu/lAP/U1n+qKfS34mA1v4kVEYvPLPHKY8U7
9lPBmn9zTpsaZZiLqnNnYsHP6PPVBJ33PH6F3UVkh7kS0zfPVP6EGLjaltrMfE4x
edcBnLatNtcd5VM92dsqMxorZEKQbel9aCdSZGSFdSECfl6VmRgCyEb5klqphfBj
SQZ0zTKUkC7OWaJgmsfIVN1/ZeiRIxnJIqH/CoUJmWtigvmTW2gIydaWYNwdMpsN
djSaAzhuN/qdaDsBisutFRs32X3B6Mc3hbqWsHapVVVgvyqGD38rdB0gMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHY7+BokNKKb4uRYAwE4Nx7mmIINMB8GA1UdIwQY
MBaAFElueWlGN+4FV54YBMFNhR44KhTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1c1NWFVWTM3Z1ZYbmhnRXdVMkZIamdxRk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMzVkMjgtOGFjMS00NTlhLTkxMjkt
M2Y3MDM5MzQ1Mjg5LzEvZGp2NEdpUTBvcHZpNUZnREFUZzNIdWFZZ2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMzVkMjgtOGFjMS00NTlhLTkxMjktM2Y3MDM5MzQ1Mjg5
LzEvU1c1NWFVWTM3Z1ZYbmhnRXdVMkZIamdxRk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgk3ADAN
BgkqhkiG9w0BAQsFAAOCAQEAm4/dtfaz+cyaKvOm8oJfIPPfVjMExFYNTbQ6GkcS
GuIhDb3zGlu/DiaAtPCZHgaPO9SgjrtiNcXrdpZ/z4f4jjmUy7ZJIw5wR9pZRsPB
q5IxlXPCyZ/FjN8bsd+j88jSaxG+4AL5a5Z+CU+0IRvAhTeLeJ8mG7pvR3Qy3k9Z
ZgMCbHznUylXUVx2S2ZeJeoB8VLSt4zJPr8ZrD4DAMtLAmSbNp5xn7ZVBPulGySe
vzU3Wx1Xx86IIMZY4PElfsHtvuHHSS7EWFh+vE/CAx7SNMa6r35n45mTt4LRXuE/
LreEIq1WwYdRW6y6XTcEn+6CSsyBzGRwBX/kwJI04eL0jQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:39:35 2025 by rpki-client