Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/cTwBryhRxwsbkrdeX4sXhmjIxPs.roa
File: cTwBryhRxwsbkrdeX4sXhmjIxPs.roa (raw, json)
Hash identifier: wIFGeQ6qBHwilg4zExjlqPVKZxKgvNkyNvBNV6xSpZ8=
Subject key identifier: 71:3C:01:AF:28:51:C7:0B:1B:92:B7:5E:5F:8B:17:86:68:C8:C4:FB
Certificate issuer: /CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Certificate serial: 0185704BE4909DD5C62E2F8A7C7C04AD806D
Authority key identifier: B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/cTwBryhRxwsbkrdeX4sXhmjIxPs.roa
Signing time: Mon 02 Jan 2023 02:24:59 +0000
ROA not before: Mon 02 Jan 2023 02:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207341
IP address blocks: 2001:678:c64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e4:90:9d:d5:c6:2e:2f:8a:7c:7c:04:ad:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Validity
Not Before: Jan 2 02:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=713c01af2851c70b1b92b75e5f8b178668c8c4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:b3:72:6a:8c:a8:00:2e:ca:0b:fc:ba:b1:
85:0e:ea:a7:7c:94:e6:5a:c5:7a:17:60:21:fb:d2:
e2:58:44:fc:bf:22:2a:f0:e6:49:ca:cc:ce:2d:9e:
48:a0:4e:4f:3a:ea:bd:b2:b5:2c:c6:2b:4f:6e:2a:
a6:71:7c:52:ae:db:4d:94:d7:1a:58:a5:41:e2:92:
7a:4f:07:a6:a4:46:48:e7:cb:9a:61:dd:c0:c0:d3:
d1:a7:38:7f:f8:1a:d1:6e:22:11:f8:ed:07:c2:74:
36:45:fa:05:4c:94:b8:32:7e:52:e4:d8:6b:1d:20:
61:42:1b:96:a8:c9:98:07:8c:d9:56:8f:40:b2:9f:
7e:ab:00:5e:7d:a4:29:b4:49:22:13:a7:60:b4:84:
f2:43:4a:a2:59:64:c8:e0:3a:dc:99:b2:9b:d1:65:
0a:f5:cd:02:d2:9b:c2:8f:61:c1:26:8c:7d:95:e7:
f1:e7:6b:40:63:ba:e4:26:55:58:5a:1b:fb:28:cc:
b7:be:10:8d:08:bc:1d:15:43:0d:c3:4a:32:1f:8b:
72:4b:fb:44:0c:44:10:50:74:af:8d:25:90:bc:dc:
6d:17:83:62:d4:7d:c8:65:56:03:95:8e:d7:96:e9:
c6:fd:54:76:ce:d0:72:5c:37:0b:71:ff:57:a4:da:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:01:AF:28:51:C7:0B:1B:92:B7:5E:5F:8B:17:86:68:C8:C4:FB
X509v3 Authority Key Identifier:
keyid:B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/cTwBryhRxwsbkrdeX4sXhmjIxPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:c8:a7:2d:9c:c1:f4:9f:f2:63:02:1e:f4:8a:60:09:79:c0:
35:1f:60:6e:c5:28:4c:48:59:72:70:a9:fc:a7:63:7a:a6:c4:
1c:66:3e:4c:71:6f:35:c1:78:e3:96:45:c8:28:c4:77:5b:67:
6b:35:ba:16:e8:33:81:0e:1d:4f:22:65:8b:84:c4:bf:93:b7:
5e:32:05:f1:ae:fa:36:6e:82:54:2a:60:94:e4:23:be:87:20:
0b:16:57:1f:aa:33:07:68:dd:bd:7b:d7:7b:a9:4c:81:a7:83:
d0:30:91:95:57:c3:57:ba:b9:5e:21:3b:9b:74:ef:f1:33:3d:
1e:49:a9:d6:d9:08:f3:58:2c:88:fb:f7:6c:c0:f4:e0:9f:04:
0a:2f:39:e0:85:3a:4f:1f:09:be:3e:58:5b:14:ac:65:01:ec:
c1:f4:da:bf:95:71:17:78:bc:9c:15:be:aa:a6:9b:4f:43:19:
4b:8e:c6:de:ba:67:a4:e5:10:b5:aa:4f:91:e5:e1:d6:80:1a:
8c:7d:f5:66:f7:e7:f2:f9:97:eb:cb:c9:3f:b9:15:d3:37:a7:
ce:da:7c:2c:c1:32:f7:ad:27:28:53:a6:73:27:19:81:23:34:
92:31:e4:e0:4f:28:fb:10:ec:28:ea:c4:5f:b9:96:98:e9:16:
f8:ad:9f:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVwS+SQndXGLi+KfHwErYBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmRkZjcwMWRkNzRiYTk5YWMxZjQ3YjY3NjdlZjQ0ZjFh
ODEwNzcwHhcNMjMwMTAyMDIyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTNjMDFhZjI4NTFjNzBiMWI5MmI3NWU1ZjhiMTc4NjY4YzhjNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqWzcmqMqAAuygv8urGFDuqnfJTm
WsV6F2Ah+9LiWET8vyIq8OZJyszOLZ5IoE5POuq9srUsxitPbiqmcXxSrttNlNca
WKVB4pJ6TwempEZI58uaYd3AwNPRpzh/+BrRbiIR+O0HwnQ2RfoFTJS4Mn5S5Nhr
HSBhQhuWqMmYB4zZVo9Asp9+qwBefaQptEkiE6dgtITyQ0qiWWTI4DrcmbKb0WUK
9c0C0pvCj2HBJox9lefx52tAY7rkJlVYWhv7KMy3vhCNCLwdFUMNw0oyH4tyS/tE
DEQQUHSvjSWQvNxtF4Ni1H3IZVYDlY7XlunG/VR2ztByXDcLcf9XpNoW3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHE8Aa8oUccLG5K3Xl+LF4ZoyMT7MB8GA1UdIwQY
MBaAFLP933Ad10upmsH0e2dn70TxqBB3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc18zZmNCM1hTNm1hd2ZSN1oyZnZSUEdvRUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MzRmNDgtNjc1NS00ZmVlLWJkNDYt
Mzc2NGJlZWFhMWIyLzEvY1R3QnJ5aFJ4d3Nia3JkZVg0c1hobWpJeFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MzRmNDgtNjc1NS00ZmVlLWJkNDYtMzc2NGJlZWFhMWIy
LzEvc18zZmNCM1hTNm1hd2ZSN1oyZnZSUEdvRUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAxk
MA0GCSqGSIb3DQEBCwUAA4IBAQDJyKctnMH0n/JjAh70imAJecA1H2BuxShMSFly
cKn8p2N6psQcZj5McW81wXjjlkXIKMR3W2drNboW6DOBDh1PImWLhMS/k7deMgXx
rvo2boJUKmCU5CO+hyALFlcfqjMHaN29e9d7qUyBp4PQMJGVV8NXurleITubdO/x
Mz0eSanW2QjzWCyI+/dswPTgnwQKLznghTpPHwm+PlhbFKxlAezB9Nq/lXEXeLyc
Fb6qpptPQxlLjsbeumek5RC1qk+R5eHWgBqMffVm9+fy+Zfry8k/uRXTN6fO2nws
wTL3rScoU6ZzJxmBIzSSMeTgTyj7EOwo6sRfuZaY6Rb4rZ/d
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:28 2025 by rpki-client