Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/DiL9ZGEkTrEcjwsoLA8dlaYc8EA.roa
File: DiL9ZGEkTrEcjwsoLA8dlaYc8EA.roa (raw, json)
Hash identifier: FZw0Op3hTw6cN5Q3fLLrYLwlkdDH2JpfCN0clg9WkrU=
Subject key identifier: 0E:22:FD:64:61:24:4E:B1:1C:8F:0B:28:2C:0F:1D:95:A6:1C:F0:40
Certificate issuer: /CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Certificate serial: 018BC95363227251E0A5B8080A5F88453FA0
Authority key identifier: 4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/DiL9ZGEkTrEcjwsoLA8dlaYc8EA.roa
Signing time: Mon 13 Nov 2023 15:36:07 +0000
ROA not before: Mon 13 Nov 2023 15:36:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210820
IP address blocks: 2a13:ef80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:53:63:22:72:51:e0:a5:b8:08:0a:5f:88:45:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Validity
Not Before: Nov 13 15:36:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e22fd6461244eb11c8f0b282c0f1d95a61cf040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:bb:48:02:35:02:2f:b4:e0:8b:7c:d5:26:
e1:52:a4:83:18:11:63:e0:26:fe:63:98:f6:26:14:
02:e3:02:77:6c:d3:df:be:28:16:63:89:ea:48:fd:
95:9e:0a:d9:f3:43:05:07:74:eb:27:a3:5e:51:96:
26:6f:1b:12:22:7b:76:c5:ce:a8:f4:79:5c:aa:66:
27:c5:0b:b3:fb:68:b8:c5:62:04:10:94:eb:66:de:
0a:ad:d8:f0:76:a3:20:00:d3:55:a8:5e:00:44:e9:
55:69:e8:96:89:b4:f0:6b:e0:38:b3:63:ed:05:50:
84:73:3b:30:0f:e6:e7:e6:b2:1a:72:a9:9e:8b:85:
83:1b:75:fc:30:e8:60:e7:80:93:2d:ba:ad:03:6a:
71:0b:d6:8b:57:d4:74:ae:a3:f5:de:09:f5:ad:53:
0c:54:d4:69:7a:2a:a8:8b:e6:3f:c1:cb:5e:43:64:
c5:64:6f:d3:31:9d:55:18:3f:5c:9e:d5:6a:1c:99:
da:c7:80:0b:8b:fb:f9:32:2d:44:63:1e:b7:77:38:
f8:c5:4d:e1:0a:63:62:87:68:11:40:ef:2b:37:4c:
5e:32:f9:c7:6a:ac:13:d7:7f:ce:91:cd:f9:29:39:
ef:1b:23:23:42:5d:88:bd:4b:e6:dd:e8:ff:1d:0a:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:FD:64:61:24:4E:B1:1C:8F:0B:28:2C:0F:1D:95:A6:1C:F0:40
X509v3 Authority Key Identifier:
keyid:4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/DiL9ZGEkTrEcjwsoLA8dlaYc8EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/T1H4xdUIaFS2y_-sAaJkcGhCHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
65:42:2a:5b:a9:3f:4d:7d:fb:a3:3a:2c:18:ac:40:54:c9:cc:
ee:9a:e6:04:ec:fd:87:7d:76:e4:5e:32:9d:b6:a0:f3:f1:ca:
e4:a7:bd:9a:d5:59:06:50:64:71:f9:1d:8f:03:0f:06:8d:0f:
35:2e:9d:ff:e1:9d:3e:22:3a:53:26:f2:a2:df:01:b9:13:07:
5e:be:83:71:7f:75:df:42:51:0c:00:12:de:ba:fc:9e:43:b3:
5b:15:a9:e3:9e:a0:5d:a6:0e:65:89:97:a8:95:14:99:d2:fc:
6f:d3:9f:9d:5c:99:77:40:65:65:5d:03:df:6b:1e:14:f5:93:
25:3e:0a:4d:58:2c:61:65:0e:fa:fe:0c:e9:57:65:c3:7d:29:
a1:b1:69:d7:bb:02:49:6a:8f:93:ad:07:83:54:6f:22:04:6b:
66:56:ea:41:9d:41:06:28:94:aa:32:ab:3b:3f:08:44:64:ec:
68:36:44:62:ae:2f:24:fd:14:32:6d:fd:86:ab:68:ee:24:c5:
50:0a:1a:07:83:39:10:4c:a3:ff:30:69:05:9d:57:da:66:bb:
34:a1:c4:16:80:70:fe:51:ae:2d:6d:83:7c:cd:09:5a:fe:d6:
e9:6d:c4:ab:70:60:a3:de:83:7f:d3:05:73:80:4d:e1:2a:88:
52:79:ff:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYvJU2MiclHgpbgICl+IRT+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTFmOGM1ZDUwODY4NTRiNmNiZmZhYzAxYTI2NDcwNjg0
MjFlODEwHhcNMjMxMTEzMTUzNjA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTIyZmQ2NDYxMjQ0ZWIxMWM4ZjBiMjgyYzBmMWQ5NWE2MWNmMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpm7SAI1Ai+04It81SbhUqSDGBFj
4Cb+Y5j2JhQC4wJ3bNPfvigWY4nqSP2VngrZ80MFB3TrJ6NeUZYmbxsSInt2xc6o
9HlcqmYnxQuz+2i4xWIEEJTrZt4KrdjwdqMgANNVqF4AROlVaeiWibTwa+A4s2Pt
BVCEczswD+bn5rIacqmei4WDG3X8MOhg54CTLbqtA2pxC9aLV9R0rqP13gn1rVMM
VNRpeiqoi+Y/wcteQ2TFZG/TMZ1VGD9cntVqHJnax4ALi/v5Mi1EYx63dzj4xU3h
CmNih2gRQO8rN0xeMvnHaqwT13/Okc35KTnvGyMjQl2IvUvm3ej/HQq3twIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA4i/WRhJE6xHI8LKCwPHZWmHPBAMB8GA1UdIwQY
MBaAFE9R+MXVCGhUtsv/rAGiZHBoQh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFINHhkVUlhRlMyeV8tc0FhSmtjR2hDSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hN2VjNzktZmI5MC00ZTk5LWI5YmUt
OTVmNmRkYTFhMDFmLzEvRGlMOVpHRWtUckVjandzb0xBOGRsYVljOEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hN2VjNzktZmI5MC00ZTk5LWI5YmUtOTVmNmRkYTFhMDFm
LzEvVDFINHhkVUlhRlMyeV8tc0FhSmtjR2hDSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPvgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBlQipbqT9NffujOiwYrEBUyczumuYE7P2HfXbk
XjKdtqDz8crkp72a1VkGUGRx+R2PAw8GjQ81Lp3/4Z0+IjpTJvKi3wG5EwdevoNx
f3XfQlEMABLeuvyeQ7NbFanjnqBdpg5liZeolRSZ0vxv05+dXJl3QGVlXQPfax4U
9ZMlPgpNWCxhZQ76/gzpV2XDfSmhsWnXuwJJao+TrQeDVG8iBGtmVupBnUEGKJSq
Mqs7PwhEZOxoNkRiri8k/RQybf2Gq2juJMVQChoHgzkQTKP/MGkFnVfaZrs0ocQW
gHD+Ua4tbYN8zQla/tbpbcSrcGCj3oN/0wVzgE3hKohSef81
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:31 2025 by rpki-client