Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/fZAFNuRR50dRZAog4lHV1NtWDzc.roa
File: fZAFNuRR50dRZAog4lHV1NtWDzc.roa (raw, json)
Hash identifier: /RBZHY4dwZZ8eFhneBQvZMue0D1byW4xP/2A3WOb4hA=
Subject key identifier: 7D:90:05:36:E4:51:E7:47:51:64:0A:20:E2:51:D5:D4:DB:56:0F:37
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4AD856581EC5FA0311116B91C9318A
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/fZAFNuRR50dRZAog4lHV1NtWDzc.roa
Signing time: Sun 01 Jan 2023 12:24:59 +0000
ROA not before: Sun 01 Jan 2023 12:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138987
IP address blocks: 2a0d:1a40:faf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d8:56:58:1e:c5:fa:03:11:11:6b:91:c9:31:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d900536e451e74751640a20e251d5d4db560f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:50:b9:fa:ac:01:78:92:45:90:c0:91:d3:
2c:3f:be:b2:64:49:b1:cf:c8:82:16:f7:f4:7e:d4:
ca:40:e2:71:45:8a:bb:f2:f7:dd:15:ab:ce:69:23:
9f:86:b3:de:b7:23:73:18:99:32:a6:2e:20:82:a3:
71:d9:51:28:c4:c5:58:7f:55:04:12:7d:91:bc:61:
ea:23:1f:28:7e:09:ec:41:9e:74:30:d5:7e:b1:33:
36:2a:89:04:81:69:af:d1:30:de:43:d5:fa:e7:8b:
d8:6c:1c:2b:c3:5f:28:38:c3:bf:9d:7e:db:7b:3b:
50:38:fc:81:bf:41:ac:c4:32:d5:61:70:09:c1:e3:
f2:58:89:d1:fd:5d:c8:e0:97:c3:66:a8:12:7c:14:
0b:3e:da:4d:02:ef:3f:ea:79:42:ab:1e:0b:0d:09:
2d:82:db:2f:26:86:cc:5e:f3:0f:32:7a:d6:22:b0:
54:da:69:5e:ba:d8:32:f9:c8:ec:a4:7e:91:b7:76:
62:a1:c8:a7:6e:97:93:f6:40:aa:85:d3:80:e2:17:
7a:f6:7f:77:5d:08:d8:eb:fd:4e:91:3d:dc:af:f8:
a4:e0:74:f2:f4:4c:66:8b:c3:c6:e1:78:af:9e:2f:
86:ed:12:85:49:9c:36:ef:0c:fd:ed:b8:c9:ff:9b:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:90:05:36:E4:51:E7:47:51:64:0A:20:E2:51:D5:D4:DB:56:0F:37
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/fZAFNuRR50dRZAog4lHV1NtWDzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:faf::/48
Signature Algorithm: sha256WithRSAEncryption
35:b8:9f:58:53:04:0d:b5:f1:34:37:c1:e1:29:63:ab:6d:02:
1e:71:fb:0c:ea:00:fd:d4:75:d9:27:c7:95:0d:b6:be:5c:e8:
62:c9:6b:b6:52:27:2a:0b:ed:09:7e:af:6d:0b:57:59:39:35:
d3:9d:f3:d9:89:0b:f4:cf:a1:31:7e:b4:30:d9:96:be:ec:28:
f5:b5:58:de:47:27:bf:1b:ea:db:40:cd:c3:c7:4b:ee:50:29:
a5:27:3f:61:7b:4a:e0:e0:e6:cb:f8:9a:e6:b7:e6:5d:f8:cb:
4a:bb:2d:d6:4d:57:f4:e9:11:b3:f8:9f:85:41:60:f2:dc:d7:
6d:d3:80:07:46:55:98:39:63:6a:6b:0b:3f:e0:a5:7b:09:6d:
8e:a5:a5:d5:39:52:78:c9:39:33:50:81:30:f3:88:31:2b:8f:
59:f9:f2:7d:a2:cf:c5:8a:51:ef:e7:10:45:dd:dc:b3:20:ae:
7f:d4:ea:90:96:7b:60:6f:06:1b:72:b3:27:60:65:ed:5e:4c:
ac:a2:10:13:25:9d:f1:73:9e:e4:a5:fc:43:0e:dd:73:88:8d:
46:18:1b:bc:a7:cd:3f:36:9d:05:39:c5:e2:63:9f:fa:2f:d3:
3b:eb:28:dd:10:1d:8a:39:d4:79:20:52:e1:ab:14:a0:44:86:
24:63:4a:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtSthWWB7F+gMREWuRyTGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzhkOGJiZjA1Nzk3YTc1YTQ5YzVkNzBmNTk3MWVjZGVj
NmRkOTMwHhcNMjMwMTAxMTIyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDkwMDUzNmU0NTFlNzQ3NTE2NDBhMjBlMjUxZDVkNGRiNTYwZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW9QufqsAXiSRZDAkdMsP76yZEmx
z8iCFvf0ftTKQOJxRYq78vfdFavOaSOfhrPetyNzGJkypi4ggqNx2VEoxMVYf1UE
En2RvGHqIx8ofgnsQZ50MNV+sTM2KokEgWmv0TDeQ9X654vYbBwrw18oOMO/nX7b
eztQOPyBv0GsxDLVYXAJwePyWInR/V3I4JfDZqgSfBQLPtpNAu8/6nlCqx4LDQkt
gtsvJobMXvMPMnrWIrBU2mleutgy+cjspH6Rt3ZiocinbpeT9kCqhdOA4hd69n93
XQjY6/1OkT3cr/ik4HTy9Exmi8PG4Xivni+G7RKFSZw27wz97bjJ/5ud7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH2QBTbkUedHUWQKIOJR1dTbVg83MB8GA1UdIwQY
MBaAFHfI2LvwV5enWknF1w9Zcezext2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhqWXVfQlhsNmRhU2NYWEQxbHg3TjdHM1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80NWFiZGUtNWI0NC00NzFhLTkzZDkt
NTM0NWY3ZTc0MDgzLzEvZlpBRk51UlI1MGRSWkFvZzRsSFYxTnRXRHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80NWFiZGUtNWI0NC00NzFhLTkzZDktNTM0NWY3ZTc0MDgz
LzEvZDhqWXVfQlhsNmRhU2NYWEQxbHg3TjdHM1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQA+v
MA0GCSqGSIb3DQEBCwUAA4IBAQA1uJ9YUwQNtfE0N8HhKWOrbQIecfsM6gD91HXZ
J8eVDba+XOhiyWu2UicqC+0Jfq9tC1dZOTXTnfPZiQv0z6ExfrQw2Za+7Cj1tVje
Rye/G+rbQM3Dx0vuUCmlJz9he0rg4ObL+Jrmt+Zd+MtKuy3WTVf06RGz+J+FQWDy
3Ndt04AHRlWYOWNqaws/4KV7CW2OpaXVOVJ4yTkzUIEw84gxK49Z+fJ9os/FilHv
5xBF3dyzIK5/1OqQlntgbwYbcrMnYGXtXkysohATJZ3xc57kpfxDDt1ziI1GGBu8
p80/Np0FOcXiY5/6L9M76yjdEB2KOdR5IFLhqxSgRIYkY0qc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org