Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9vQrqn0jC2UJD3vp3MQcUchGXLQ.roa
File: 9vQrqn0jC2UJD3vp3MQcUchGXLQ.roa (raw, json)
Hash identifier: 3v44Yp3y2bdFA0dqoo0inCVwgugOb2sdHq7uEVKLKn4=
Subject key identifier: F6:F4:2B:AA:7D:23:0B:65:09:0F:7B:E9:DC:C4:1C:51:C8:46:5C:B4
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0187EAE9A062C707F697DB3F7F7E6D41B63C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9vQrqn0jC2UJD3vp3MQcUchGXLQ.roa
Signing time: Fri 05 May 2023 07:56:32 +0000
ROA not before: Fri 05 May 2023 07:56:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a10:12c0::/29 maxlen: 29
2a0e:be00::/29 maxlen: 29
2a07:6080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:e9:a0:62:c7:07:f6:97:db:3f:7f:7e:6d:41:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: May 5 07:56:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f42baa7d230b65090f7be9dcc41c51c8465cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:07:81:ca:65:e9:e2:81:7c:a7:a4:4b:53:
85:bc:4b:77:5f:ab:dd:47:88:98:fc:d2:6e:da:8d:
23:e4:59:4a:be:2a:9a:61:86:6a:6a:6a:d9:97:2d:
4e:58:39:28:be:a6:2c:5e:8e:55:54:7d:f2:98:95:
59:d4:4e:f8:04:5a:bf:70:fb:5b:1b:a8:50:d2:ef:
28:85:48:81:f4:4d:16:5d:9d:88:1f:9a:d6:35:23:
e9:f9:4b:d4:ec:e8:ec:d4:62:dd:c0:ca:43:fc:0a:
3e:cd:78:a3:7f:d4:68:a4:07:38:ee:6c:f3:52:1f:
3f:94:49:0e:a5:d6:eb:81:18:44:8f:45:80:0a:92:
25:ef:3f:31:27:97:dc:84:44:e1:68:e6:ac:9c:2a:
16:24:29:98:1b:08:43:54:c7:5f:f6:3b:36:07:6a:
ac:32:f7:94:72:0f:3d:ae:b0:be:88:63:ab:55:0e:
c6:9c:35:87:4b:a8:d2:05:c6:26:4b:7e:39:e0:94:
6a:02:3f:31:67:89:cf:cc:41:98:af:25:5b:34:bc:
a6:7f:12:b4:a7:b7:69:3c:99:8b:22:31:ef:8d:99:
21:3e:f2:b1:d5:30:14:ac:3b:bd:82:4d:62:e1:9f:
d3:76:20:29:f2:57:b1:2d:a2:b9:54:97:18:20:82:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:2B:AA:7D:23:0B:65:09:0F:7B:E9:DC:C4:1C:51:C8:46:5C:B4
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9vQrqn0jC2UJD3vp3MQcUchGXLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6080::/29
2a0e:be00::/29
2a10:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:14:e8:f6:f4:79:cc:7b:82:3e:d6:01:92:e3:25:c2:5c:17:
76:5f:ed:09:44:a4:f8:14:e7:ce:e7:17:8f:9f:4d:9f:5e:d3:
9d:61:13:ee:02:43:0b:9f:11:89:1c:7b:33:9a:9b:e8:65:f7:
7c:ff:35:c7:c1:8e:88:a3:39:bc:7f:55:5a:bd:0e:0b:d4:81:
08:84:2b:12:52:18:28:7c:b3:1e:0e:98:7b:e1:cb:85:9e:49:
76:36:c2:bd:8e:9c:21:75:d9:3a:e8:33:a6:f8:0d:e5:d2:01:
cb:a9:4c:72:fb:60:20:1d:88:c1:b8:f1:30:4b:a7:2b:ae:e6:
49:1f:b7:30:57:86:69:ff:fb:ac:33:12:4c:f4:3f:e4:dd:93:
e1:fd:e6:89:87:cb:99:2a:33:59:16:bb:10:8f:0a:cf:80:c0:
2d:00:b6:0d:d8:48:44:04:9b:32:84:ca:12:38:9f:46:13:bc:
d8:1f:1a:db:f4:b0:df:ca:d5:bd:56:2c:73:82:41:3e:78:c5:
ce:4b:70:8b:d9:e0:75:20:40:35:c8:a3:28:3f:7c:aa:82:bf:
5c:f5:eb:b2:c4:1c:4e:eb:00:7e:8e:1f:c0:d2:7a:2e:bf:30:
fb:01:9c:2f:db:ea:45:23:3a:a8:d6:59:fc:64:e9:a8:4f:71:
02:5e:2f:b8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYfq6aBixwf2l9s/f35tQbY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjMwNTA1MDc1NjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY0MmJhYTdkMjMwYjY1MDkwZjdiZTlkY2M0MWM1MWM4NDY1Y2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRcHgcpl6eKBfKekS1OFvEt3X6vd
R4iY/NJu2o0j5FlKviqaYYZqamrZly1OWDkovqYsXo5VVH3ymJVZ1E74BFq/cPtb
G6hQ0u8ohUiB9E0WXZ2IH5rWNSPp+UvU7Ojs1GLdwMpD/Ao+zXijf9RopAc47mzz
Uh8/lEkOpdbrgRhEj0WACpIl7z8xJ5fchEThaOasnCoWJCmYGwhDVMdf9js2B2qs
MveUcg89rrC+iGOrVQ7GnDWHS6jSBcYmS3454JRqAj8xZ4nPzEGYryVbNLymfxK0
p7dpPJmLIjHvjZkhPvKx1TAUrDu9gk1i4Z/TdiAp8lexLaK5VJcYIIIYnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPb0K6p9IwtlCQ976dzEHFHIRly0MB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvOXZRcnFuMGpDMlVKRDN2cDNNUWNVY2hHWExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgdggAMF
AyoOvgADBQMqEBLAMA0GCSqGSIb3DQEBCwUAA4IBAQBnFOj29HnMe4I+1gGS4yXC
XBd2X+0JRKT4FOfO5xePn02fXtOdYRPuAkMLnxGJHHszmpvoZfd8/zXHwY6Iozm8
f1VavQ4L1IEIhCsSUhgofLMeDph74cuFnkl2NsK9jpwhddk66DOm+A3l0gHLqUxy
+2AgHYjBuPEwS6crruZJH7cwV4Zp//usMxJM9D/k3ZPh/eaJh8uZKjNZFrsQjwrP
gMAtALYN2EhEBJsyhMoSOJ9GE7zYHxrb9LDfytW9VixzgkE+eMXOS3CL2eB1IEA1
yKMoP3yqgr9c9euyxBxO6wB+jh/A0nouvzD7AZwv2+pFIzqo1ln8ZOmoT3ECXi+4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:35 2025 by rpki-client