Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/EoO1E6UfH7g2EKyiX1j_QG6Glqo.roa
File: EoO1E6UfH7g2EKyiX1j_QG6Glqo.roa (raw, json)
Hash identifier: bg1j+VTS+8+xSo12+siugfdCkBtsGgoBv5Edl4WLu+4=
Subject key identifier: 12:83:B5:13:A5:1F:1F:B8:36:10:AC:A2:5F:58:FF:40:6E:86:96:AA
Certificate issuer: /CN=32998b4f88646f5e185bfc83776bbb05a69e6845
Certificate serial: 01856D016832B08CD7584FFCBC1AE0E56142
Authority key identifier: 32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/EoO1E6UfH7g2EKyiX1j_QG6Glqo.roa
Signing time: Sun 01 Jan 2023 11:04:46 +0000
ROA not before: Sun 01 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5543
IP address blocks: 2a12:6740::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:68:32:b0:8c:d7:58:4f:fc:bc:1a:e0:e5:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32998b4f88646f5e185bfc83776bbb05a69e6845
Validity
Not Before: Jan 1 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1283b513a51f1fb83610aca25f58ff406e8696aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:14:c4:cc:23:d1:d8:cb:0d:27:8f:d4:22:
d7:3f:b5:fc:c5:2d:49:51:4a:60:40:a2:46:d5:0d:
19:a8:80:09:66:2f:24:73:b4:fc:48:e8:bc:d5:7c:
d1:55:6b:c8:ca:18:33:31:03:4d:40:e6:2d:2f:e6:
4d:0a:31:d6:0a:99:1b:50:35:29:08:a6:dc:dc:84:
30:41:5c:26:ac:80:88:04:c2:49:cd:46:57:44:b0:
52:8e:f2:e0:2f:c8:6d:3f:65:2e:3b:f3:59:c2:c8:
42:b9:5b:7b:87:7f:cd:e3:db:7b:64:f7:27:3d:78:
3f:0e:9e:75:1e:e8:a0:5a:3f:5e:23:02:4d:8b:a5:
ea:cf:03:41:9d:bf:8d:5d:f1:ac:13:96:6c:69:45:
d3:41:9e:83:78:01:d9:18:d7:30:54:4a:2d:83:8b:
dc:6d:6a:61:9b:ac:c0:ee:1b:e3:3b:0c:b4:c8:43:
fc:8f:92:4d:9f:91:cb:8d:ba:7e:7c:88:cc:f2:33:
9a:7f:58:c9:25:c0:fd:f9:0b:09:73:83:da:85:88:
8b:0b:ce:fe:03:6a:84:4c:2f:6a:a3:42:65:d1:3c:
2e:4f:f3:a1:12:02:43:89:01:82:3d:ff:aa:90:5e:
f7:4f:dd:8f:fc:4d:ec:65:3c:5e:95:6a:8e:aa:e6:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:B5:13:A5:1F:1F:B8:36:10:AC:A2:5F:58:FF:40:6E:86:96:AA
X509v3 Authority Key Identifier:
keyid:32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/EoO1E6UfH7g2EKyiX1j_QG6Glqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6740::/32
Signature Algorithm: sha256WithRSAEncryption
4c:b6:f3:7f:5b:f1:9d:a5:43:5b:ce:6f:d2:1a:1c:eb:34:01:
51:8f:1f:ac:6a:f9:e4:ed:64:15:0e:53:f3:9b:4e:a4:d0:a2:
f0:f8:ec:a6:ed:2a:45:41:04:e3:a0:f1:3d:35:32:12:f9:f2:
5c:a2:17:f8:a7:5e:eb:8d:94:f0:39:53:21:1f:8a:5f:6d:0e:
8d:29:8c:d7:57:47:a9:dc:e9:1b:bc:a9:6b:ba:d2:d6:ff:e2:
79:21:ff:aa:f7:78:14:bb:61:0f:e3:6e:10:cb:e0:12:7a:1c:
47:1e:9d:8d:ab:57:7c:d3:f5:f8:0c:a0:64:5f:32:bc:08:f7:
e0:78:63:1b:16:c0:96:bb:7f:28:64:0e:24:73:2d:71:ed:70:
5d:d6:7e:bf:6a:ce:ba:e6:15:96:d4:8e:0c:11:b2:d2:c0:ae:
4f:68:c2:49:3b:db:a0:48:c9:7b:d4:25:c2:5b:91:31:7e:04:
be:fb:9a:25:a5:30:3b:d3:c3:e0:6c:51:91:89:d8:eb:a2:61:
4c:25:2a:0a:3c:50:84:12:1a:91:ef:41:24:d6:b5:b0:20:6f:
86:de:9c:30:0d:9f:1b:4e:f3:be:46:33:70:cb:81:71:a8:28:
0a:49:2d:9e:75:52:4a:8c:4f:74:1c:82:72:83:a4:13:6f:dc:
b7:eb:ec:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtAWgysIzXWE/8vBrg5WFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTk4YjRmODg2NDZmNWUxODViZmM4Mzc3NmJiYjA1YTY5
ZTY4NDUwHhcNMjMwMTAxMTEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjgzYjUxM2E1MWYxZmI4MzYxMGFjYTI1ZjU4ZmY0MDZlODY5NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruQUxMwj0djLDSeP1CLXP7X8xS1J
UUpgQKJG1Q0ZqIAJZi8kc7T8SOi81XzRVWvIyhgzMQNNQOYtL+ZNCjHWCpkbUDUp
CKbc3IQwQVwmrICIBMJJzUZXRLBSjvLgL8htP2UuO/NZwshCuVt7h3/N49t7ZPcn
PXg/Dp51HuigWj9eIwJNi6XqzwNBnb+NXfGsE5ZsaUXTQZ6DeAHZGNcwVEotg4vc
bWphm6zA7hvjOwy0yEP8j5JNn5HLjbp+fIjM8jOaf1jJJcD9+QsJc4PahYiLC87+
A2qETC9qo0Jl0TwuT/OhEgJDiQGCPf+qkF73T92P/E3sZTxelWqOquaryQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBKDtROlHx+4NhCsol9Y/0BuhpaqMB8GA1UdIwQY
MBaAFDKZi0+IZG9eGFv8g3druwWmnmhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBtTFQ0aGtiMTRZV195RGQydTdCYWFlYUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yM2NiOWEtMmRlMi00NDNkLTgwMTMt
MGI5MjkxZTE2MDE1LzEvRW9PMUU2VWZIN2cyRUt5aVgxal9RRzZHbHFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yM2NiOWEtMmRlMi00NDNkLTgwMTMtMGI5MjkxZTE2MDE1
LzEvTXBtTFQ0aGtiMTRZV195RGQydTdCYWFlYUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJnQDAN
BgkqhkiG9w0BAQsFAAOCAQEATLbzf1vxnaVDW85v0hoc6zQBUY8frGr55O1kFQ5T
85tOpNCi8Pjspu0qRUEE46DxPTUyEvnyXKIX+Kde642U8DlTIR+KX20OjSmM11dH
qdzpG7ypa7rS1v/ieSH/qvd4FLthD+NuEMvgEnocRx6djatXfNP1+AygZF8yvAj3
4HhjGxbAlrt/KGQOJHMtce1wXdZ+v2rOuuYVltSODBGy0sCuT2jCSTvboEjJe9Ql
wluRMX4EvvuaJaUwO9PD4GxRkYnY66JhTCUqCjxQhBIake9BJNa1sCBvht6cMA2f
G07zvkYzcMuBcagoCkktnnVSSoxPdByCcoOkE2/ct+vsnw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:06 2025 by rpki-client