Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/F8GGA_7MU7x2wPmIqH4yqKmuyS0.roa
File: F8GGA_7MU7x2wPmIqH4yqKmuyS0.roa (raw, json)
Hash identifier: WnMWchOR/CAm19nykPctIiDEd7LXCBe3AQkTbAG0DOM=
Subject key identifier: 17:C1:86:03:FE:CC:53:BC:76:C0:F9:88:A8:7E:32:A8:A9:AE:C9:2D
Certificate issuer: /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial: 0188EDB365AC4534B08CE9B8E8A63C4CAF7E
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/F8GGA_7MU7x2wPmIqH4yqKmuyS0.roa
Signing time: Sat 24 Jun 2023 13:58:57 +0000
ROA not before: Sat 24 Jun 2023 13:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 2a09:2b80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:b3:65:ac:45:34:b0:8c:e9:b8:e8:a6:3c:4c:af:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Validity
Not Before: Jun 24 13:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c18603fecc53bc76c0f988a87e32a8a9aec92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:44:cc:70:3b:a1:34:5d:22:b0:27:07:42:
d7:f7:56:ec:4f:cd:07:00:b0:eb:0c:ea:1e:c5:b9:
14:b5:83:f1:a2:16:46:1a:b3:31:08:6e:20:c4:77:
2d:86:2f:f1:80:ea:9f:50:5c:bf:dd:da:af:7e:8a:
e0:eb:2d:65:71:33:69:c6:a2:8f:9e:00:30:7f:91:
5a:55:74:e7:0c:7c:84:9e:03:51:44:2f:64:6a:7a:
29:76:51:f5:9d:73:f7:8b:ab:fe:00:38:b7:aa:9a:
c1:78:4b:f1:aa:3a:2e:89:62:41:2d:c5:4d:48:2a:
3e:70:78:7c:9b:f5:8a:10:b7:ba:de:3b:84:08:4b:
de:43:ed:49:ff:43:f3:b2:3c:aa:58:ab:80:0d:c9:
d6:33:3f:a0:f7:60:f1:67:f5:a0:f3:f3:aa:d0:e9:
9b:62:69:3b:9f:d4:e6:8c:67:43:d0:61:ff:52:4d:
90:c7:07:56:79:c3:71:c3:37:1d:c9:10:73:ea:c7:
9b:8d:09:15:37:c2:a2:d4:22:63:8e:cc:19:95:1d:
ca:43:23:8d:70:10:06:9d:7b:30:4a:9a:03:58:ed:
b1:33:06:d7:6e:b3:f2:4e:1a:e8:02:fe:44:a9:e7:
96:4d:ce:0b:96:12:81:45:2b:e7:ca:84:d3:2a:e3:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:86:03:FE:CC:53:BC:76:C0:F9:88:A8:7E:32:A8:A9:AE:C9:2D
X509v3 Authority Key Identifier:
keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/F8GGA_7MU7x2wPmIqH4yqKmuyS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
19:46:82:35:9a:0a:4c:ae:f6:ca:f2:c1:a4:52:08:ee:58:86:
c5:46:dc:e9:7b:6e:87:cc:87:93:4b:52:a6:7a:15:07:43:1a:
b5:e5:b1:ed:cc:ff:06:19:d5:0a:cd:7b:ce:ce:c5:8a:ca:8b:
e3:1c:94:41:3d:42:21:8b:e7:7c:62:a0:1a:46:88:a6:21:8f:
f9:79:4c:bb:92:fc:fd:19:54:a0:2f:1d:69:e1:97:35:7e:e4:
af:e5:7b:f2:07:be:89:54:92:6b:90:53:1a:2d:f4:71:c9:2f:
f4:fd:6b:c6:d3:08:1b:80:d2:34:0c:0f:de:39:8a:54:e1:cf:
8c:18:57:29:88:16:50:79:9a:af:34:f2:cd:2d:b3:0a:76:6e:
4d:09:2c:6e:6e:31:fe:73:5b:ec:e6:4b:34:11:de:85:ac:4e:
81:f5:74:13:8b:48:1b:30:24:5e:e8:d2:db:0b:fc:46:94:6c:
bb:b2:ef:86:e3:a0:35:73:db:2e:59:45:6c:a9:72:58:39:4a:
3e:d3:ae:1d:6c:12:72:10:7f:c5:a8:b7:ba:d0:c5:1e:fe:d5:
97:0b:f2:98:30:ad:65:20:e1:12:fd:02:f0:c1:3e:7e:f2:dc:
b6:3a:bb:b6:39:77:72:df:bc:19:c5:2a:4a:18:dd:ca:b9:09:
38:51:f8:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYjts2WsRTSwjOm46KY8TK9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTAyYTI5YWMwNmI2NWU5MzJlMWJkOTdkN2ZjZjI5YzM3
MWNiM2QwHhcNMjMwNjI0MTM1ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2MxODYwM2ZlY2M1M2JjNzZjMGY5ODhhODdlMzJhOGE5YWVjOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH9EzHA7oTRdIrAnB0LX91bsT80H
ALDrDOoexbkUtYPxohZGGrMxCG4gxHcthi/xgOqfUFy/3dqvforg6y1lcTNpxqKP
ngAwf5FaVXTnDHyEngNRRC9kanopdlH1nXP3i6v+ADi3qprBeEvxqjouiWJBLcVN
SCo+cHh8m/WKELe63juECEveQ+1J/0PzsjyqWKuADcnWMz+g92DxZ/Wg8/Oq0Omb
Ymk7n9TmjGdD0GH/Uk2QxwdWecNxwzcdyRBz6sebjQkVN8Ki1CJjjswZlR3KQyON
cBAGnXswSpoDWO2xMwbXbrPyThroAv5EqeeWTc4LlhKBRSvnyoTTKuOvowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBfBhgP+zFO8dsD5iKh+MqiprsktMB8GA1UdIwQY
MBaAFFJQKimsBrZeky4b2X1/zynDccs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxBcUthd0d0bDZUTGh2WmZYX1BLY054eXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kMDMxMDktZTJkYy00YmM5LWJhMmUt
ZDY0OWUyMjcwOTdmLzEvRjhHR0FfN01VN3gyd1BtSXFINHlxS211eVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kMDMxMDktZTJkYy00YmM5LWJhMmUtZDY0OWUyMjcwOTdm
LzEvVWxBcUthd0d0bDZUTGh2WmZYX1BLY054eXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkrgAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAZRoI1mgpMrvbK8sGkUgjuWIbFRtzpe26HzIeT
S1KmehUHQxq15bHtzP8GGdUKzXvOzsWKyovjHJRBPUIhi+d8YqAaRoimIY/5eUy7
kvz9GVSgLx1p4Zc1fuSv5XvyB76JVJJrkFMaLfRxyS/0/WvG0wgbgNI0DA/eOYpU
4c+MGFcpiBZQeZqvNPLNLbMKdm5NCSxubjH+c1vs5ks0Ed6FrE6B9XQTi0gbMCRe
6NLbC/xGlGy7su+G46A1c9suWUVsqXJYOUo+064dbBJyEH/FqLe60MUe/tWXC/KY
MK1lIOES/QLwwT5+8ty2Oru2OXdy37wZxSpKGN3KuQk4Ufjo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org