Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa
File: sgy09WErQyAvZfvfk8VodaL2-Ic.roa (raw, json)
Hash identifier: kTv0rBq0bFE36CK0jri2kmu89zDjREwEhRBIrhLOF+4=
Subject key identifier: B2:0C:B4:F5:61:2B:43:20:2F:65:FB:DF:93:C5:68:75:A2:F6:F8:87
Certificate issuer: /CN=723cf97094519a75a3238181076057033b11e884
Certificate serial: 0138D244
Authority key identifier: 72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa
Signing time: Sat 01 Jan 2022 10:57:22 +0000
ROA not before: Sat 01 Jan 2022 10:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:9480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20501060 (0x138d244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723cf97094519a75a3238181076057033b11e884
Validity
Not Before: Jan 1 10:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b20cb4f5612b43202f65fbdf93c56875a2f6f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:91:3a:24:8d:1c:b9:34:a9:72:4a:fd:f9:
b7:ce:3a:2a:8b:bb:12:4b:40:c7:50:7f:1e:e5:36:
39:f3:da:22:fc:4d:87:ed:1c:38:35:a5:ce:e0:c9:
dd:f0:6c:e2:53:2e:31:03:39:9e:eb:75:15:65:ed:
fe:90:83:17:36:7d:02:2f:5c:ce:83:1c:71:47:ed:
fa:80:04:0e:55:72:d5:ae:1f:ba:64:3f:88:60:5b:
0d:7e:27:92:a8:4d:b2:3d:01:29:1c:3e:a3:ab:be:
63:c3:dc:b6:ba:ec:0f:3c:08:9f:1c:18:74:86:55:
a0:8e:e3:7e:26:ee:6c:90:a3:93:b6:c2:62:3e:c2:
91:56:4c:36:00:fe:4b:69:cb:f0:fe:e2:18:04:33:
60:2c:cf:de:99:09:f1:14:da:9e:52:b1:96:cf:20:
7c:82:27:fe:51:82:84:2d:cd:ae:e9:93:b9:e5:06:
db:ef:77:56:a1:91:f9:0d:2a:36:13:12:24:8c:77:
77:47:f3:78:47:9d:75:84:f5:ff:a8:64:88:a1:86:
aa:f6:fc:71:5f:93:1f:bf:19:15:1e:66:95:47:65:
36:4c:dc:6b:02:d1:ab:e3:ad:46:2f:10:27:b2:25:
c8:04:fa:c3:06:3b:a4:0b:f8:ea:4f:55:dd:7b:c8:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0C:B4:F5:61:2B:43:20:2F:65:FB:DF:93:C5:68:75:A2:F6:F8:87
X509v3 Authority Key Identifier:
keyid:72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9480::/29
Signature Algorithm: sha256WithRSAEncryption
7f:8b:84:99:2e:79:49:50:fe:2d:03:f7:57:d8:0b:9e:3b:e0:
e1:4f:76:f7:31:40:ba:65:f1:00:79:4e:13:ab:93:2f:d8:58:
e9:62:32:5b:b0:72:e9:e9:68:6f:b1:83:95:78:10:b2:60:4c:
4a:df:6e:ad:b1:37:e3:8e:f0:6c:b3:9c:b6:eb:d1:e5:96:56:
85:fd:ea:40:7e:b4:0b:00:8b:4a:94:90:0c:c1:f6:a5:71:85:
d5:5c:d4:67:b5:27:1a:91:62:f2:60:b5:6e:06:f7:c1:62:60:
26:0c:d8:81:70:e5:5f:5b:08:25:31:47:aa:77:79:e1:f6:bc:
19:cc:40:cc:1b:8d:79:40:b3:dc:a3:99:3d:27:b2:2a:04:f1:
9e:3b:70:78:8e:cc:27:1a:0e:27:28:fb:25:b4:f0:0d:e9:b3:
37:40:86:c7:eb:94:64:c4:d7:a2:6e:67:96:f5:1f:b8:70:1d:
d7:f8:ee:be:1b:dc:f2:97:4c:93:a4:02:92:0c:6d:a5:79:c8:
5a:97:90:7c:c0:5f:28:66:26:76:62:9e:dd:38:87:5a:88:19:
74:3f:99:32:aa:49:3d:06:cc:28:6b:77:09:3f:cc:0d:8c:6d:
5d:33:8f:ea:83:a2:ee:c0:ba:b4:6c:33:71:db:d8:1e:65:cd:
07:9d:98:00
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEATjSRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjNjZjk3MDk0NTE5YTc1YTMyMzgxODEwNzYwNTcwMzNiMTFlODg0MB4XDTIyMDEw
MTEwNTcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjIwY2I0ZjU2MTJi
NDMyMDJmNjVmYmRmOTNjNTY4NzVhMmY2Zjg4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcikTokjRy5NKlySv35t846Kou7EktAx1B/HuU2OfPaIvxN
h+0cODWlzuDJ3fBs4lMuMQM5nut1FWXt/pCDFzZ9Ai9czoMccUft+oAEDlVy1a4f
umQ/iGBbDX4nkqhNsj0BKRw+o6u+Y8PctrrsDzwInxwYdIZVoI7jfibubJCjk7bC
Yj7CkVZMNgD+S2nL8P7iGAQzYCzP3pkJ8RTanlKxls8gfIIn/lGChC3NrumTueUG
2+93VqGR+Q0qNhMSJIx3d0fzeEeddYT1/6hkiKGGqvb8cV+TH78ZFR5mlUdlNkzc
awLRq+OtRi8QJ7IlyAT6wwY7pAv46k9V3XvISYkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSyDLT1YStDIC9l+9+TxWh1ovb4hzAfBgNVHSMEGDAWgBRyPPlwlFGadaMj
gYEHYFcDOxHohDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NqejVjSlJSbW5Xakk0R0JCMkJYQXpzUjZJUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvMjc5YmJjLTU4NDAtNGEyMC1iZjdkLTFjOWEzMjUyMzI0NC8x
L3NneTA5V0VyUXlBdlpmdmZrOFZvZGFMMi1JYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
Mjc5YmJjLTU4NDAtNGEyMC1iZjdkLTFjOWEzMjUyMzI0NC8xL2NqejVjSlJSbW5X
akk0R0JCMkJYQXpzUjZJUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoRlIAwDQYJKoZIhvcNAQELBQAD
ggEBAH+LhJkueUlQ/i0D91fYC5474OFPdvcxQLpl8QB5ThOrky/YWOliMluwcunp
aG+xg5V4ELJgTErfbq2xN+OO8GyznLbr0eWWVoX96kB+tAsAi0qUkAzB9qVxhdVc
1Ge1JxqRYvJgtW4G98FiYCYM2IFw5V9bCCUxR6p3eeH2vBnMQMwbjXlAs9yjmT0n
sioE8Z47cHiOzCcaDico+yW08A3pszdAhsfrlGTE16JuZ5b1H7hwHdf47r4b3PKX
TJOkApIMbaV5yFqXkHzAXyhmJnZint04h1qIGXQ/mTKqST0GzChrdwk/zA2MbV0z
j+qDou7AurRsM3Hb2B5lzQedmAA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:19 2024 by rpki-client on console-ams.rpki-client.org