Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/OkadCjKWhxcXEZBPGB7G8hZtz60.roa
File: OkadCjKWhxcXEZBPGB7G8hZtz60.roa (raw, json)
Hash identifier: 6qfgQUylmNUrPQ5cjdwQKnjF7kjhOEnPPMTW4ubF8mI=
Subject key identifier: 3A:46:9D:0A:32:96:87:17:17:11:90:4F:18:1E:C6:F2:16:6D:CF:AD
Certificate issuer: /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial: 07DA1615
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/OkadCjKWhxcXEZBPGB7G8hZtz60.roa
Signing time: Mon 14 Feb 2022 12:57:36 +0000
ROA not before: Mon 14 Feb 2022 12:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 2a10:a9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131733013 (0x7da1615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
Validity
Not Before: Feb 14 12:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a469d0a329687171711904f181ec6f2166dcfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:69:af:75:6f:fc:e2:4b:fe:c7:0a:79:85:
6e:d5:39:69:d0:bc:cd:4c:3e:98:ef:90:d5:dc:c0:
6f:98:91:3b:b4:32:f4:56:18:c7:51:85:4f:79:ac:
3e:6c:d7:f2:08:92:17:73:9b:f8:57:8e:3f:55:de:
e0:27:28:16:34:cf:00:db:23:53:86:95:ac:2c:df:
33:c1:0e:43:48:c7:1f:1b:ed:38:5a:41:9a:5b:c7:
6d:27:a2:7e:02:56:8c:ee:fc:5d:58:6e:79:d5:cd:
30:fa:e7:dc:4c:2f:1e:e2:54:95:05:dd:f8:46:b7:
7a:8c:2e:c2:24:72:1e:57:d3:9e:ce:af:3c:f3:8f:
f7:7d:28:f4:b2:26:9b:ed:b4:aa:d9:89:3a:34:d2:
1d:95:e1:51:81:66:0e:32:7a:a8:0a:99:ae:19:67:
18:3f:b5:16:12:79:8f:20:bb:48:f7:62:0a:72:ee:
5f:d9:23:98:8f:0c:ea:f2:f2:f2:cb:be:ab:47:72:
1a:57:de:b5:c0:11:ee:fc:28:53:99:a8:b0:1d:53:
26:36:ab:b4:c8:76:03:9c:00:14:06:2a:65:98:04:
78:47:11:31:d6:47:4c:fc:fb:72:0c:9c:4a:44:dc:
a1:f7:df:9c:72:11:d1:3b:f4:72:36:6e:2f:e5:81:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:9D:0A:32:96:87:17:17:11:90:4F:18:1E:C6:F2:16:6D:CF:AD
X509v3 Authority Key Identifier:
keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/OkadCjKWhxcXEZBPGB7G8hZtz60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:cf:d3:4a:d4:9c:1e:a5:b5:3d:86:7b:5f:b6:24:f0:b7:bc:
e2:84:74:50:c4:b2:cb:11:7a:a4:ca:c9:01:4d:b1:a3:35:d8:
a8:3c:d0:7a:3f:be:32:a0:2d:4f:d9:85:8e:eb:59:19:40:ae:
65:f8:0b:df:a7:01:c3:48:67:c3:0b:86:47:da:e8:f1:7a:12:
5f:d8:68:38:f2:0a:d8:5b:97:c6:af:8a:da:65:00:9e:5e:06:
b6:72:0f:b5:af:b6:08:08:00:6d:07:03:13:25:2c:2d:83:9c:
56:04:54:6a:25:fa:2b:f8:d1:f8:bd:9d:93:2c:68:cf:94:57:
30:59:57:b0:56:87:1e:97:06:62:32:3c:4f:72:a7:57:ca:d9:
65:e7:06:b9:a4:70:01:ce:7f:0e:ed:64:f2:a7:b0:5b:0c:d0:
9e:2a:fc:64:13:ed:40:03:96:70:9b:a8:c9:d8:bc:ca:ea:dc:
e1:92:cf:7a:6d:01:bb:b3:b4:ce:f1:63:0b:e8:f2:b6:5c:5a:
c1:8f:45:97:57:1a:17:47:84:0c:f9:43:4f:3c:f5:31:d5:68:
54:5d:a2:7a:17:63:db:6f:d0:cc:a7:f2:8a:ba:a6:02:36:a8:
77:44:32:69:80:37:aa:32:ad:c6:bd:a6:80:44:2d:36:c4:bb:
18:47:4c:e4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEB9oWFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWYwYTU4N2FjYjMzMDYyNWUyMTE1OGVjNDBiNzEwYWYwZTIxNjdhMB4XDTIyMDIx
NDEyNTczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2E0NjlkMGEzMjk2
ODcxNzE3MTE5MDRmMTgxZWM2ZjIxNjZkY2ZhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQQaa91b/ziS/7HCnmFbtU5adC8zUw+mO+Q1dzAb5iRO7Qy
9FYYx1GFT3msPmzX8giSF3Ob+FeOP1Xe4CcoFjTPANsjU4aVrCzfM8EOQ0jHHxvt
OFpBmlvHbSeifgJWjO78XVhuedXNMPrn3EwvHuJUlQXd+Ea3eowuwiRyHlfTns6v
PPOP930o9LImm+20qtmJOjTSHZXhUYFmDjJ6qAqZrhlnGD+1FhJ5jyC7SPdiCnLu
X9kjmI8M6vLy8su+q0dyGlfetcAR7vwoU5mosB1TJjartMh2A5wAFAYqZZgEeEcR
MdZHTPz7cgycSkTcofffnHIR0Tv0cjZuL+WBgGMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQ6Rp0KMpaHFxcRkE8YHsbyFm3PrTAfBgNVHSMEGDAWgBRu8KWHrLMwYl4h
FY7EC3EK8OIWejAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2J2Q2xoNnl6TUdKZUlSV094QXR4Q3ZEaUZuby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYjQ3OTU4LTAzZDMtNDIwMS04ZGI4LWViZmE1MzEzYjNmMi8x
L09rYWRDaktXaHhjWEVaQlBHQjdHOGhadHo2MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YjQ3OTU4LTAzZDMtNDIwMS04ZGI4LWViZmE1MzEzYjNmMi8xL2J2Q2xoNnl6TUdK
ZUlSV094QXR4Q3ZEaUZuby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoQqcAwDQYJKoZIhvcNAQELBQAD
ggEBAA/P00rUnB6ltT2Ge1+2JPC3vOKEdFDEsssReqTKyQFNsaM12Kg80Ho/vjKg
LU/ZhY7rWRlArmX4C9+nAcNIZ8MLhkfa6PF6El/YaDjyCthbl8avitplAJ5eBrZy
D7WvtggIAG0HAxMlLC2DnFYEVGol+iv40fi9nZMsaM+UVzBZV7BWhx6XBmIyPE9y
p1fK2WXnBrmkcAHOfw7tZPKnsFsM0J4q/GQT7UADlnCbqMnYvMrq3OGSz3ptAbuz
tM7xYwvo8rZcWsGPRZdXGhdHhAz5Q0889THVaFRdonoXY9tv0Myn8oq6pgI2qHdE
MmmAN6oyrca9poBELTbEuxhHTOQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:02 2025 by rpki-client