Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/BFa36kzKWe75dlF2YZtB49rXRec.roa
File: BFa36kzKWe75dlF2YZtB49rXRec.roa (raw, json)
Hash identifier: uCSkxzgNN6tGU2YHGItsLUXcjorRV90i1Xewq0HUngA=
Subject key identifier: 04:56:B7:EA:4C:CA:59:EE:F9:76:51:76:61:9B:41:E3:DA:D7:45:E7
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 073C2061
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/BFa36kzKWe75dlF2YZtB49rXRec.roa
Signing time: Sat 01 Jan 2022 01:53:21 +0000
ROA not before: Sat 01 Jan 2022 01:53:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204982
IP address blocks: 2a0e:3bc0:fa00::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121380961 (0x73c2061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 1 01:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0456b7ea4cca59eef9765176619b41e3dad745e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:48:b0:6a:43:94:00:0d:bc:46:d7:99:1a:
78:53:6a:51:a3:79:b0:9b:10:82:de:7a:e4:ec:82:
35:25:e2:20:d6:34:23:23:e7:e5:61:6f:60:b9:df:
5d:76:a7:64:fa:d9:cc:7b:56:61:89:57:86:8f:4a:
23:70:e7:49:8a:5a:9a:82:68:5f:c6:93:dc:74:9e:
85:e7:4f:4f:d0:03:3b:30:0f:b4:94:32:f3:00:41:
e3:bd:27:a9:d8:76:da:3b:4b:22:d0:fc:34:cb:74:
15:54:57:6a:81:e4:73:ff:4b:eb:3c:ea:ed:2d:30:
92:82:6d:cd:84:a7:85:8b:6c:ef:d2:e5:57:13:0c:
ff:41:15:53:e8:a0:36:13:af:07:e2:e1:d6:17:e3:
cd:35:a9:9f:ee:f6:bb:7b:50:d4:b3:aa:07:da:8f:
2b:e9:fc:f6:a0:59:5f:93:89:61:8a:4a:08:e3:bf:
6f:ef:04:55:6c:99:99:47:52:8c:30:45:1d:cb:14:
9a:28:0d:6c:02:d9:90:93:95:5a:87:d8:bc:5f:2d:
da:5b:de:b2:85:81:cf:94:2d:4e:81:d9:1e:9f:80:
d3:0f:c6:fb:4f:8f:8d:78:41:3e:83:76:53:cd:8f:
49:4a:a1:e3:01:eb:b2:89:5f:ca:aa:65:c5:89:36:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:B7:EA:4C:CA:59:EE:F9:76:51:76:61:9B:41:E3:DA:D7:45:E7
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/BFa36kzKWe75dlF2YZtB49rXRec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:fa00::/42
Signature Algorithm: sha256WithRSAEncryption
6a:eb:03:f3:7e:41:9a:80:a0:b7:e6:07:50:5d:36:7e:92:77:
de:76:25:e0:6e:c0:07:c7:c9:dd:cd:be:a2:de:92:2e:91:af:
01:61:82:8a:1a:5e:30:43:d9:14:6a:59:7e:44:9e:05:7d:77:
1d:17:1c:f5:e0:dc:db:d6:ac:fb:43:8d:58:ee:2e:8e:b8:19:
24:4b:3f:9b:bf:14:1a:fe:18:9b:be:06:3c:0c:a6:8a:09:9b:
93:ae:49:68:bb:3a:90:16:24:70:24:3d:4b:3c:34:8e:ed:a9:
9a:5c:ee:90:a6:23:8f:2c:26:91:ab:b1:eb:1c:b2:97:d4:53:
b7:b9:48:41:e4:65:d6:5d:00:02:48:bb:a0:91:e1:b9:d7:61:
c5:ca:ab:e5:96:ee:8d:26:8e:01:ce:51:58:e1:d3:ac:f0:cc:
eb:ba:4f:f6:c8:a8:e9:bc:5d:1f:16:16:3e:a2:8d:56:0d:34:
04:fc:ef:9a:f9:b0:a8:d8:7a:14:ff:01:5d:2b:83:6c:6e:62:
d7:21:d8:2e:08:cf:90:9b:94:9d:82:18:5e:08:d0:dd:f0:51:
67:ae:4c:ee:43:f6:ea:93:b2:b5:78:8b:10:35:02:28:76:64:
b9:2b:2b:30:08:c3:dd:84:4a:9f:71:d8:35:52:2d:c8:e0:4e:
55:7a:76:1e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBzwgYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZGI4NTNiODYxOTczZmM1MDZlNjQ3MTRjY2E3OTZkMTVjY2FjZTUxMB4XDTIyMDEw
MTAxNTMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQ1NmI3ZWE0Y2Nh
NTllZWY5NzY1MTc2NjE5YjQxZTNkYWQ3NDVlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJQXSLBqQ5QADbxG15kaeFNqUaN5sJsQgt565OyCNSXiINY0
IyPn5WFvYLnfXXanZPrZzHtWYYlXho9KI3DnSYpamoJoX8aT3HSehedPT9ADOzAP
tJQy8wBB470nqdh22jtLItD8NMt0FVRXaoHkc/9L6zzq7S0wkoJtzYSnhYts79Ll
VxMM/0EVU+igNhOvB+Lh1hfjzTWpn+72u3tQ1LOqB9qPK+n89qBZX5OJYYpKCOO/
b+8EVWyZmUdSjDBFHcsUmigNbALZkJOVWofYvF8t2lvesoWBz5QtToHZHp+A0w/G
+0+PjXhBPoN2U82PSUqh4wHrsolfyqplxYk26J8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQEVrfqTMpZ7vl2UXZhm0Hj2tdF5zAfBgNVHSMEGDAWgBQduFO4YZc/xQbm
RxTMp5bRXMrOUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hiaFR1R0dYUDhVRzVrY1V6S2VXMFZ6S3psRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvYzFiNTQ4LTUzNDQtNDgzMy1hZWMyLWYyYTNmYjBlNzBkMy8x
L0JGYTM2a3pLV2U3NWRsRjJZWnRCNDlyWFJlYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
YzFiNTQ4LTUzNDQtNDgzMy1hZWMyLWYyYTNmYjBlNzBkMy8xL0hiaFR1R0dYUDhV
RzVrY1V6S2VXMFZ6S3psRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioOO8D6ADANBgkqhkiG9w0BAQsF
AAOCAQEAausD835BmoCgt+YHUF02fpJ33nYl4G7AB8fJ3c2+ot6SLpGvAWGCihpe
MEPZFGpZfkSeBX13HRcc9eDc29as+0ONWO4ujrgZJEs/m78UGv4Ym74GPAymigmb
k65JaLs6kBYkcCQ9Szw0ju2pmlzukKYjjywmkaux6xyyl9RTt7lIQeRl1l0AAki7
oJHhuddhxcqr5ZbujSaOAc5RWOHTrPDM67pP9sio6bxdHxYWPqKNVg00BPzvmvmw
qNh6FP8BXSuDbG5i1yHYLgjPkJuUnYIYXgjQ3fBRZ65M7kP26pOytXiLEDUCKHZk
uSsrMAjD3YRKn3HYNVItyOBOVXp2Hg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:49 2025 by rpki-client