Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/ovbVZAHwXGRRxJgy_SMW87shNRs.roa
File: ovbVZAHwXGRRxJgy_SMW87shNRs.roa (raw, json)
Hash identifier: TaxDLsvqULZdi6kUwQKFKH0yuGipBLR1RZlsshPm5TA=
Subject key identifier: A2:F6:D5:64:01:F0:5C:64:51:C4:98:32:FD:23:16:F3:BB:21:35:1B
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 01863DC778D866E6B67BC005EF80B3DBCFC9
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/ovbVZAHwXGRRxJgy_SMW87shNRs.roa
Signing time: Sat 11 Feb 2023 00:02:08 +0000
ROA not before: Sat 11 Feb 2023 00:02:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a13:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3d:c7:78:d8:66:e6:b6:7b:c0:05:ef:80:b3:db:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Feb 11 00:02:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2f6d56401f05c6451c49832fd2316f3bb21351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:3b:b0:58:5c:9b:60:ae:16:38:6c:d0:9f:
cd:84:30:70:80:73:63:dc:8e:a7:c3:f6:c1:a2:79:
ec:54:d1:b8:9d:d0:8e:62:f0:85:eb:52:4b:6a:4f:
1d:55:9c:76:70:16:c5:c9:63:e5:32:ba:c4:b6:2a:
fe:9c:a5:83:b8:42:a9:33:3e:2a:09:3d:28:c3:71:
d9:31:f5:72:ac:17:16:80:54:90:7c:4d:16:4a:7b:
9c:5e:6e:d8:36:64:7e:fb:8c:c0:7c:72:53:b4:81:
7c:61:16:68:b1:87:a6:e4:87:6f:38:09:7d:66:00:
3a:bd:54:20:c8:20:25:cb:f2:b1:f9:0e:05:a5:f4:
33:0c:19:f6:20:99:9c:56:5c:21:49:a4:39:e0:56:
67:a4:70:2b:3f:eb:c9:f9:3c:39:71:20:29:31:6f:
48:b7:58:c1:23:e8:39:3d:1e:96:5d:9e:57:d6:a2:
b2:13:dc:de:2c:49:bc:0d:78:0d:4e:f3:b9:82:d7:
7c:fd:ba:52:68:1f:58:93:5b:c0:5b:ed:c4:ab:ab:
28:e6:0c:43:9f:ed:56:98:e7:25:47:46:a9:e5:e9:
cb:a4:5f:de:69:3e:83:5f:af:dd:69:e7:58:42:8f:
e6:dd:5a:2d:38:ce:1a:a8:1e:24:7f:d5:7a:78:4a:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:D5:64:01:F0:5C:64:51:C4:98:32:FD:23:16:F3:BB:21:35:1B
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/ovbVZAHwXGRRxJgy_SMW87shNRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b700::/29
Signature Algorithm: sha256WithRSAEncryption
78:cf:c9:3f:fc:72:0b:af:79:8d:bd:49:50:2a:8f:36:a9:bd:
5c:65:02:e3:26:4c:a0:0a:37:3c:89:c4:81:d0:11:0c:7e:1f:
a2:c9:8b:ed:e6:31:19:9a:03:2b:91:fd:1f:1e:73:ca:24:9a:
17:e6:6d:9c:a8:f1:99:89:eb:b2:5b:da:12:01:2d:a1:44:1e:
e3:2e:1f:50:c9:81:0b:65:32:13:ac:91:85:69:55:0c:98:ce:
a9:58:b0:8c:c6:4f:e7:24:75:73:94:0e:99:bc:31:49:9d:fb:
f2:e5:98:0e:77:6a:de:12:f8:e2:b6:ad:6b:09:f4:68:4e:e3:
1f:3a:01:c3:79:19:20:20:8f:55:be:4b:5a:7f:b4:44:c3:b6:
3a:f4:e4:dc:af:18:cc:0f:94:8e:ec:40:9b:1f:23:8b:8f:50:
46:57:b2:8f:6b:1e:ed:af:31:f9:44:62:e9:da:ac:28:9b:58:
55:0b:cc:49:ce:ce:36:c4:70:3d:18:7b:e4:b0:62:21:6f:6c:
8f:67:76:e3:c4:d5:74:16:ab:ee:e2:c7:39:c4:8c:13:17:8d:
ae:48:5d:99:df:c1:e5:bd:c5:cb:e8:a7:33:60:40:4b:aa:c8:
1d:ab:25:3c:37:2e:40:40:8f:29:df:d4:5d:50:2c:39:f8:e5:
a6:93:39:36
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYY9x3jYZua2e8AF74Cz28/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTYzZjUyMDBhNDkzMzAyNGU3YjQ3ZDc3ODYxOTQ1ODU2
OGFkYjAwHhcNMjMwMjExMDAwMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmY2ZDU2NDAxZjA1YzY0NTFjNDk4MzJmZDIzMTZmM2JiMjEzNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF07sFhcm2CuFjhs0J/NhDBwgHNj
3I6nw/bBonnsVNG4ndCOYvCF61JLak8dVZx2cBbFyWPlMrrEtir+nKWDuEKpMz4q
CT0ow3HZMfVyrBcWgFSQfE0WSnucXm7YNmR++4zAfHJTtIF8YRZosYem5IdvOAl9
ZgA6vVQgyCAly/Kx+Q4FpfQzDBn2IJmcVlwhSaQ54FZnpHArP+vJ+Tw5cSApMW9I
t1jBI+g5PR6WXZ5X1qKyE9zeLEm8DXgNTvO5gtd8/bpSaB9Yk1vAW+3Eq6so5gxD
n+1WmOclR0ap5enLpF/eaT6DX6/daedYQo/m3VotOM4aqB4kf9V6eEoSFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKL21WQB8FxkUcSYMv0jFvO7ITUbMB8GA1UdIwQY
MBaAFKpWP1IApJMwJOe0fXeGGUWFaK2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxZX1VnQ2trekFrNTdSOWQ0WVpSWVZvcmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zMWYzOTctNDMxNS00NGYwLWJhZDkt
MjY0OWUxZmRhMGY1LzEvb3ZiVlpBSHdYR1JSeEpneV9TTVc4N3NoTlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zMWYzOTctNDMxNS00NGYwLWJhZDktMjY0OWUxZmRhMGY1
LzEvcWxZX1VnQ2trekFrNTdSOWQ0WVpSWVZvcmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO3ADAN
BgkqhkiG9w0BAQsFAAOCAQEAeM/JP/xyC695jb1JUCqPNqm9XGUC4yZMoAo3PInE
gdARDH4fosmL7eYxGZoDK5H9Hx5zyiSaF+ZtnKjxmYnrslvaEgEtoUQe4y4fUMmB
C2UyE6yRhWlVDJjOqViwjMZP5yR1c5QOmbwxSZ378uWYDndq3hL44ratawn0aE7j
HzoBw3kZICCPVb5LWn+0RMO2OvTk3K8YzA+UjuxAmx8ji49QRleyj2se7a8x+URi
6dqsKJtYVQvMSc7ONsRwPRh75LBiIW9sj2d248TVdBar7uLHOcSMExeNrkhdmd/B
5b3Fy+inM2BAS6rIHaslPDcuQECPKd/UXVAsOfjlppM5Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-fra.rpki-client.org