Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/XcwN0uiJmA74qfxs8nQXXW__pas.roa
File: XcwN0uiJmA74qfxs8nQXXW__pas.roa (raw, json)
Hash identifier: uKMVoSmr7SgwY5BmKDeiYKISEl90dtx0XmGFfGFSUnA=
Subject key identifier: 5D:CC:0D:D2:E8:89:98:0E:F8:A9:FC:6C:F2:74:17:5D:6F:FF:A5:AB
Certificate issuer: /CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Certificate serial: 01856F42B71CD413F29FDA04965CA3919927
Authority key identifier: E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/XcwN0uiJmA74qfxs8nQXXW__pas.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206064
IP address blocks: 2001:678:ce8::/48 maxlen: 48
2001:678:cf0::/48 maxlen: 48
2001:678:ce4::/48 maxlen: 48
2001:678:cec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b7:1c:d4:13:f2:9f:da:04:96:5c:a3:91:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dcc0dd2e889980ef8a9fc6cf274175d6fffa5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:b7:ce:28:fd:d2:7b:cb:7f:73:0e:7d:91:
6f:eb:0b:53:d5:6a:6f:2f:7f:72:b8:ea:b0:ff:32:
d4:02:a8:0e:aa:2c:77:14:77:48:75:cc:51:b1:0e:
d4:f9:64:ef:3e:a3:3e:d1:55:f3:77:5b:27:ac:de:
60:c9:ce:ad:04:8f:d9:83:f7:16:6c:37:00:61:12:
85:ea:8f:3f:03:74:82:65:3d:b5:6b:fb:05:8a:a8:
52:7b:e1:6e:83:d2:64:47:9f:68:b5:46:c4:54:dd:
2f:aa:c5:d1:91:52:1e:09:4c:c2:5d:ed:6b:31:f9:
67:ed:32:f7:ac:c0:f3:87:f3:ad:52:46:95:b7:80:
c1:df:b5:72:fd:43:b8:b6:c2:2e:6c:d8:14:c9:7e:
5f:63:bb:d9:ca:16:f8:26:08:3e:49:00:61:72:9f:
ca:97:e9:2a:2e:31:b9:e2:92:c0:5d:b4:81:88:46:
01:85:ea:04:54:20:2a:55:10:9f:07:7e:09:4c:e1:
9f:69:46:de:08:d4:e7:34:05:7a:07:cd:8c:09:9b:
70:69:12:ab:26:6d:b1:f5:ee:2f:24:bb:b1:49:6e:
0c:b0:fc:6c:e7:90:3a:f3:02:78:42:65:ca:f3:3c:
a1:d4:13:7e:ed:66:0d:e9:55:2f:75:f8:c6:f9:1a:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:0D:D2:E8:89:98:0E:F8:A9:FC:6C:F2:74:17:5D:6F:FF:A5:AB
X509v3 Authority Key Identifier:
keyid:E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/XcwN0uiJmA74qfxs8nQXXW__pas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/57j_Z9snazY196x4Uhp49w7ICHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ce4::/48
2001:678:ce8::/48
2001:678:cec::/48
2001:678:cf0::/48
Signature Algorithm: sha256WithRSAEncryption
61:a1:7e:59:8c:56:b3:05:41:01:2d:94:23:0c:ce:47:e2:3e:
5a:bd:46:67:5d:26:12:ff:d4:9e:7c:1c:cd:7a:12:6d:9e:ff:
f9:3a:87:c9:cb:37:0b:74:17:48:7c:d9:e4:49:b6:3b:3c:c9:
53:39:5a:6f:26:52:bf:fb:ae:a3:65:b3:81:bc:b5:45:37:60:
86:0d:cf:a9:96:40:c9:9f:56:8f:9d:1a:ce:5b:31:c6:bb:3e:
d2:52:a7:9d:a4:1e:6b:bb:d5:8e:1e:9d:aa:a8:5e:4d:09:0c:
8c:6f:d3:ff:f0:4e:ad:23:a7:f5:b1:3f:17:99:1d:65:0b:c5:
31:73:fe:25:42:5d:6b:4f:8b:bb:4c:41:e2:dc:77:d3:4c:48:
10:9b:0d:b2:4f:cd:93:4b:14:0b:de:de:c2:d9:fd:28:a6:e2:
df:4d:ea:7c:62:d4:22:39:7f:7d:a9:67:36:7d:31:7f:aa:e3:
f6:cc:89:20:3c:85:9f:95:8e:cf:aa:a8:ef:45:d2:f4:e2:dd:
91:fe:e2:09:6b:10:fd:64:0e:1e:4d:a9:8a:b3:dd:a3:e5:e2:
0a:79:78:f6:07:f2:fe:0a:7f:8f:ff:e0:c8:c3:15:c4:a5:f0:
8b:e9:e2:5b:18:0d:b1:04:04:9c:a9:e2:18:85:63:11:df:9e:
14:ec:fc:5d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVvQrcc1BPyn9oEllyjkZknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YjhmZjY3ZGIyNzZiMzYzNWY3YWM3ODUyMWE3OGY3MGVj
ODA4NzAwHhcNMjMwMTAxMjEzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGNjMGRkMmU4ODk5ODBlZjhhOWZjNmNmMjc0MTc1ZDZmZmZhNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzm3zij90nvLf3MOfZFv6wtT1Wpv
L39yuOqw/zLUAqgOqix3FHdIdcxRsQ7U+WTvPqM+0VXzd1snrN5gyc6tBI/Zg/cW
bDcAYRKF6o8/A3SCZT21a/sFiqhSe+Fug9JkR59otUbEVN0vqsXRkVIeCUzCXe1r
Mfln7TL3rMDzh/OtUkaVt4DB37Vy/UO4tsIubNgUyX5fY7vZyhb4Jgg+SQBhcp/K
l+kqLjG54pLAXbSBiEYBheoEVCAqVRCfB34JTOGfaUbeCNTnNAV6B82MCZtwaRKr
Jm2x9e4vJLuxSW4MsPxs55A68wJ4QmXK8zyh1BN+7WYN6VUvdfjG+RrZxQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFF3MDdLoiZgO+Kn8bPJ0F11v/6WrMB8GA1UdIwQY
MBaAFOe4/2fbJ2s2NfeseFIaePcOyAhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTdqX1o5c25helkxOTZ4NFVocDQ5dzdJQ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ODYxMTUtNDE1My00N2YwLWJkODQt
MDQ4YjNhNjdhNzc0LzEvWGN3TjB1aUptQTc0cWZ4czhuUVhYV19fcGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ODYxMTUtNDE1My00N2YwLWJkODQtMDQ4YjNhNjdhNzc0
LzEvNTdqX1o5c25helkxOTZ4NFVocDQ5dzdJQ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAzk
AwcAIAEGeAzoAwcAIAEGeAzsAwcAIAEGeAzwMA0GCSqGSIb3DQEBCwUAA4IBAQBh
oX5ZjFazBUEBLZQjDM5H4j5avUZnXSYS/9SefBzNehJtnv/5OofJyzcLdBdIfNnk
SbY7PMlTOVpvJlK/+66jZbOBvLVFN2CGDc+plkDJn1aPnRrOWzHGuz7SUqedpB5r
u9WOHp2qqF5NCQyMb9P/8E6tI6f1sT8XmR1lC8Uxc/4lQl1rT4u7TEHi3HfTTEgQ
mw2yT82TSxQL3t7C2f0opuLfTep8YtQiOX99qWc2fTF/quP2zIkgPIWflY7Pqqjv
RdL04t2R/uIJaxD9ZA4eTamKs92j5eIKeXj2B/L+Cn+P/+DIwxXEpfCL6eJbGA2x
BAScqeIYhWMR354U7Pxd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org