Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa
File: iyotq66R_fQ8Ig0b5NPvCX_reRk.roa (raw, json)
Hash identifier: GyZ/qpG2vzAXkaQirYplgr669Q2OlY7tQd07bKXe5Ds=
Subject key identifier: 8B:2A:2D:AB:AE:91:FD:F4:3C:22:0D:1B:E4:D3:EF:09:7F:EB:79:19
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 09B7DB52
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa
Signing time: Wed 22 Jun 2022 12:05:33 +0000
ROA not before: Wed 22 Jun 2022 12:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a0e:1b43::/32 maxlen: 32
2a0e:1b41::/32 maxlen: 32
2a0e:1b45::/32 maxlen: 32
2a0e:1b47::/32 maxlen: 32
2a0e:1b44::/32 maxlen: 32
2a0e:1b42::/32 maxlen: 32
2a0e:1b40::/32 maxlen: 32
2a0e:1b46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163044178 (0x9b7db52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 22 12:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b2a2dabae91fdf43c220d1be4d3ef097feb7919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:f0:03:eb:e6:75:38:25:8e:d5:fc:b4:a1:
f9:b4:f7:f5:8a:8d:09:57:50:06:b8:13:61:44:fa:
ce:d1:4a:93:61:55:b1:aa:e3:15:28:97:a6:c7:25:
98:4a:db:c8:2b:b6:d4:22:26:95:38:11:cb:09:44:
f8:75:54:a5:dd:96:9f:29:f5:aa:cb:ce:dc:d5:e6:
f7:47:6d:c8:74:1f:9a:f9:10:06:c7:05:fb:a9:77:
67:2a:10:5a:41:7e:33:c6:cc:e3:8d:a4:7b:bc:ab:
fe:a3:40:fe:28:60:a3:a0:99:c8:c6:97:ab:c4:60:
e6:8c:dc:b9:09:51:13:c5:fa:6f:6e:df:47:86:b0:
d9:0a:d4:fa:16:91:58:3c:63:fa:ce:e9:f4:91:46:
31:e8:d9:2d:df:43:88:a2:f2:4f:32:2e:3b:ec:55:
48:21:cb:6c:be:e7:9e:57:22:a5:61:2c:40:d8:54:
37:c6:0d:65:37:bc:26:f6:77:c4:d0:1f:47:18:29:
63:01:1e:29:7f:40:82:19:ab:35:cc:29:99:43:1a:
bb:6b:9f:79:4b:77:77:57:17:33:da:b7:60:e6:fa:
44:c0:75:3a:71:7d:e6:1b:6e:56:b8:b9:fe:d7:b1:
71:ad:1d:c8:b3:2b:c8:6c:7b:c2:de:88:60:fb:87:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:2D:AB:AE:91:FD:F4:3C:22:0D:1B:E4:D3:EF:09:7F:EB:79:19
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1b40::/29
Signature Algorithm: sha256WithRSAEncryption
78:2c:e8:17:0f:fe:8d:c9:c6:49:f8:d4:35:44:79:e0:af:32:
15:1c:19:a1:b8:c2:c2:70:3c:0a:e7:84:97:1e:f7:00:8c:35:
68:76:cc:ca:3d:bf:38:77:ec:4b:5e:ca:f7:bf:2a:03:a4:1e:
97:31:7a:47:e2:6a:c5:3a:2f:3d:15:77:ae:dd:11:89:45:11:
47:45:c7:2c:61:5b:af:44:c6:d3:60:34:73:6a:02:b4:42:d6:
5c:3e:a9:df:c4:91:6c:f9:08:02:1c:10:dd:f1:61:37:50:10:
62:37:eb:ea:09:18:06:0d:9b:67:67:cc:1d:9c:86:16:24:cc:
bc:bc:1e:44:cb:98:46:e3:05:4f:8d:34:8a:f5:ce:e6:c0:c7:
05:50:49:68:49:4e:de:0e:f2:1f:b3:1c:46:e7:d3:88:5f:22:
40:30:03:f2:14:16:72:02:4c:3c:1c:81:4d:fe:ce:49:bc:a4:
54:be:13:ad:53:8a:07:ca:33:26:55:fb:c1:2c:a2:5d:95:31:
aa:76:9f:f0:9b:41:57:98:48:ab:e6:5e:48:b0:6a:d2:89:6f:
12:22:d1:f6:5d:56:71:22:02:ae:31:8a:73:ee:d0:70:e7:e5:
5c:ef:f3:5a:eb:66:25:50:58:2f:0a:38:66:c8:09:ec:9f:5a:
16:d5:2e:4a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECbfbUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Mjc2MDNhOTNiY2EzMWIwMThmNTExZjZkNGIwYjc1NDZlOTYzMzYyMB4XDTIyMDYy
MjEyMDUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGIyYTJkYWJhZTkx
ZmRmNDNjMjIwZDFiZTRkM2VmMDk3ZmViNzkxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6h8APr5nU4JY7V/LSh+bT39YqNCVdQBrgTYUT6ztFKk2FV
sarjFSiXpsclmErbyCu21CImlTgRywlE+HVUpd2Wnyn1qsvO3NXm90dtyHQfmvkQ
BscF+6l3ZyoQWkF+M8bM442ke7yr/qNA/ihgo6CZyMaXq8Rg5ozcuQlRE8X6b27f
R4aw2QrU+haRWDxj+s7p9JFGMejZLd9DiKLyTzIuO+xVSCHLbL7nnlcipWEsQNhU
N8YNZTe8JvZ3xNAfRxgpYwEeKX9AghmrNcwpmUMau2ufeUt3d1cXM9q3YOb6RMB1
OnF95htuVri5/texca0dyLMryGx7wt6IYPuHYO8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSLKi2rrpH99DwiDRvk0+8Jf+t5GTAfBgNVHSMEGDAWgBSCdgOpO8oxsBj1
EfbUsLdUbpYzYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2duWURxVHZLTWJBWTlSSDIxTEMzVkc2V00ySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvOTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8x
L2l5b3RxNjZSX2ZROElnMGI1TlB2Q1hfcmVSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
OTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8xL2duWURxVHZLTWJB
WTlSSDIxTEMzVkc2V00ySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOG0AwDQYJKoZIhvcNAQELBQAD
ggEBAHgs6BcP/o3Jxkn41DVEeeCvMhUcGaG4wsJwPArnhJce9wCMNWh2zMo9vzh3
7Eteyve/KgOkHpcxekfiasU6Lz0Vd67dEYlFEUdFxyxhW69ExtNgNHNqArRC1lw+
qd/EkWz5CAIcEN3xYTdQEGI36+oJGAYNm2dnzB2chhYkzLy8HkTLmEbjBU+NNIr1
zubAxwVQSWhJTt4O8h+zHEbn04hfIkAwA/IUFnICTDwcgU3+zkm8pFS+E61TigfK
MyZV+8Esol2VMap2n/CbQVeYSKvmXkiwatKJbxIi0fZdVnEiAq4xinPu0HDn5Vzv
81rrZiVQWC8KOGbICeyfWhbVLko=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:56 2025 by rpki-client