Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/UcAGAdefc_A6o-CznNwiy4hOGZA.roa
File: UcAGAdefc_A6o-CznNwiy4hOGZA.roa (raw, json)
Hash identifier: ktCsIrGNBW1cRGdk+g21g0br6ZE2kBBnOT0XF+i/hvo=
Subject key identifier: 51:C0:06:01:D7:9F:73:F0:3A:A3:E0:B3:9C:DC:22:CB:88:4E:19:90
Certificate issuer: /CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Certificate serial: 018691FAC09660F0F2D2511EAE4CC5635716
Authority key identifier: D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/UcAGAdefc_A6o-CznNwiy4hOGZA.roa
Signing time: Mon 27 Feb 2023 08:26:14 +0000
ROA not before: Mon 27 Feb 2023 08:26:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49778
IP address blocks: 2a13:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:fa:c0:96:60:f0:f2:d2:51:1e:ae:4c:c5:63:57:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Validity
Not Before: Feb 27 08:26:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c00601d79f73f03aa3e0b39cdc22cb884e1990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:6e:a5:88:7f:b1:5d:42:ce:0e:a8:ca:87:
f1:b1:8a:7b:b9:65:4b:e1:0b:ed:51:45:60:ab:05:
3b:f9:c1:83:80:f2:ec:21:45:24:a3:f4:57:af:60:
78:62:67:5f:49:9b:c8:8c:3a:ce:c6:17:b3:95:12:
9e:0f:13:94:13:38:31:79:27:c9:d8:3b:0a:bf:c1:
82:7f:d1:03:6c:82:dc:3b:93:88:c4:7a:a3:5f:82:
b5:8f:18:81:0b:56:c7:8e:c9:cd:c1:74:52:20:31:
b6:1d:a8:b1:ce:29:6f:6c:15:36:9d:62:ad:8d:a5:
eb:5b:86:2a:36:64:6f:95:bd:f8:4f:ec:7d:8f:af:
89:ad:e7:85:96:d4:63:4f:42:30:bf:2c:98:35:09:
8e:e2:47:66:b3:14:18:80:bf:29:1a:55:88:78:8b:
62:ce:5a:63:ef:88:d4:e1:ae:a7:14:0c:80:27:28:
d9:a1:3c:9e:c9:7a:18:c1:0a:4f:73:4a:f3:77:f3:
4f:9c:c6:fb:b1:59:9b:2c:da:46:be:36:52:28:0d:
30:9c:17:51:e2:98:a9:86:9d:df:39:b3:d0:56:ac:
d1:0f:80:c1:45:3d:63:3c:94:8b:8f:00:17:70:8c:
df:3c:38:39:1f:47:2a:90:fa:72:ce:1a:10:de:3e:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:06:01:D7:9F:73:F0:3A:A3:E0:B3:9C:DC:22:CB:88:4E:19:90
X509v3 Authority Key Identifier:
keyid:D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/UcAGAdefc_A6o-CznNwiy4hOGZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
99:a6:64:4c:37:f3:c0:09:21:22:ef:fa:07:29:77:2e:70:27:
70:bc:04:f0:d4:37:e3:87:f3:87:3d:47:c2:cd:56:d5:9e:71:
55:b8:45:52:54:bf:be:70:cf:86:c0:82:61:36:80:c8:c2:bd:
be:c3:70:db:08:39:a2:24:66:8c:0d:70:b4:15:a2:ff:e6:84:
da:1f:8b:d9:67:1e:e8:c0:05:ba:10:a9:6c:12:d4:5f:68:81:
32:13:3f:5b:f8:5e:6f:a5:7f:43:88:0c:ee:89:4f:6b:74:9b:
94:2f:e3:47:5a:7f:a7:95:33:ff:57:52:4e:88:d1:6a:67:62:
f7:0c:62:16:98:34:92:b9:ce:6c:5f:76:17:b1:b5:a2:f4:91:
ff:bb:43:2f:51:de:bb:c5:f5:9c:89:a8:85:fe:6b:f5:6e:25:
16:f9:70:c1:0b:cf:ac:76:85:83:90:59:e3:23:80:33:a5:94:
3c:c4:bf:df:8e:7d:56:8a:0b:46:74:8e:4c:7a:b4:39:ef:f0:
32:af:01:89:db:df:00:45:53:5a:09:0d:49:51:af:99:89:40:
62:a8:b4:c3:8f:42:bd:1f:5a:6a:29:22:c4:43:0c:ca:4a:6c:
69:73:59:75:49:6c:e1:bf:6c:a8:f0:67:49:fd:4b:16:c4:57:
d6:9e:3f:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYaR+sCWYPDy0lEerkzFY1cWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTcyMzdkYzRkMTcyNTZjMjQyY2UzN2RhNzFlMDNjNzBk
ZDc5NzEwHhcNMjMwMjI3MDgyNjE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWMwMDYwMWQ3OWY3M2YwM2FhM2UwYjM5Y2RjMjJjYjg4NGUxOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwlupYh/sV1Czg6oyofxsYp7uWVL
4QvtUUVgqwU7+cGDgPLsIUUko/RXr2B4YmdfSZvIjDrOxhezlRKeDxOUEzgxeSfJ
2DsKv8GCf9EDbILcO5OIxHqjX4K1jxiBC1bHjsnNwXRSIDG2HaixzilvbBU2nWKt
jaXrW4YqNmRvlb34T+x9j6+JreeFltRjT0IwvyyYNQmO4kdmsxQYgL8pGlWIeIti
zlpj74jU4a6nFAyAJyjZoTyeyXoYwQpPc0rzd/NPnMb7sVmbLNpGvjZSKA0wnBdR
4piphp3fObPQVqzRD4DBRT1jPJSLjwAXcIzfPDg5H0cqkPpyzhoQ3j5boQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFHABgHXn3PwOqPgs5zcIsuIThmQMB8GA1UdIwQY
MBaAFNDnI33E0XJWwkLON9px4Dxw3XlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9jamZjVFJjbGJDUXM0MzJuSGdQSERkZVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZTUwYmItNTEzYy00YmM4LTlmMjIt
Y2FmYmI2MGIzZDU2LzEvVWNBR0FkZWZjX0E2by1Dem5Od2l5NGhPR1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zZTUwYmItNTEzYy00YmM4LTlmMjItY2FmYmI2MGIzZDU2
LzEvME9jamZjVFJjbGJDUXM0MzJuSGdQSERkZVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhN+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAmaZkTDfzwAkhIu/6Byl3LnAncLwE8NQ344fzhz1H
ws1W1Z5xVbhFUlS/vnDPhsCCYTaAyMK9vsNw2wg5oiRmjA1wtBWi/+aE2h+L2Wce
6MAFuhCpbBLUX2iBMhM/W/heb6V/Q4gM7olPa3SblC/jR1p/p5Uz/1dSTojRamdi
9wxiFpg0krnObF92F7G1ovSR/7tDL1Heu8X1nImohf5r9W4lFvlwwQvPrHaFg5BZ
4yOAM6WUPMS/3459VooLRnSOTHq0Oe/wMq8BidvfAEVTWgkNSVGvmYlAYqi0w49C
vR9aaikixEMMykpsaXNZdUls4b9sqPBnSf1LFsRX1p4/ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org