Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8wCOFEPIN13MVPzVkkd24hnTLw.roa
File: r8wCOFEPIN13MVPzVkkd24hnTLw.roa (raw, json)
Hash identifier: u2wpjH2JnM+aMt6HOyW0v0PNbeZWdVFenwrfmcDgzvY=
Subject key identifier: AF:CC:02:38:51:0F:20:DD:77:31:53:F3:56:49:1D:DB:88:67:4C:BC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01915B7C5DA53F9DC5C8A46FE4FF805F3F23
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8wCOFEPIN13MVPzVkkd24hnTLw.roa
Signing time: Fri 16 Aug 2024 13:59:22 +0000
ROA not before: Fri 16 Aug 2024 13:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0d:8b40::/29 maxlen: 29
2a11:26c0::/29 maxlen: 29
2a11:2b40::/29 maxlen: 29
2a11:3580::/29 maxlen: 29
2a11:3d40::/29 maxlen: 29
2a11:4080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:7c:5d:a5:3f:9d:c5:c8:a4:6f:e4:ff:80:5f:3f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 16 13:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afcc0238510f20dd773153f356491ddb88674cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:13:ed:90:10:82:00:b5:d5:11:4b:6c:bf:
7b:39:32:8b:e4:20:38:72:f0:bc:61:0d:cf:24:08:
34:66:35:8b:99:45:5a:70:4a:d9:f0:3f:70:2c:f5:
29:31:cb:59:9a:38:c9:3d:b0:4b:fc:d6:4d:ab:e3:
9d:fb:c6:d5:a8:8a:d8:a0:c8:a5:b1:5f:4e:c4:ce:
af:b2:19:a9:c9:8a:54:6c:b8:c5:2d:6d:88:50:8a:
b0:8c:83:a0:4b:83:00:0c:ba:bc:14:c4:c2:9e:dc:
53:ac:8e:b8:ec:1d:97:a5:96:f4:bf:ae:a7:6e:3e:
f5:d0:d7:ce:ea:6c:6d:a6:52:85:de:49:37:bf:cb:
f8:35:51:09:47:c7:04:72:2e:88:ea:9f:ed:cc:31:
97:1a:d9:91:48:6b:9a:dc:82:8b:18:85:15:3b:a8:
cf:b4:07:32:96:04:a6:9e:58:4b:0f:5b:28:87:c7:
ea:45:de:ba:f1:aa:9e:bc:ee:85:30:49:70:ab:be:
f9:a3:01:61:6f:d1:84:b3:48:bc:46:94:6b:b5:ad:
60:8d:25:16:70:95:d1:80:7e:6f:9c:92:3f:cf:ae:
7e:90:95:66:12:f5:21:3a:f7:6c:9c:18:c5:02:a8:
7c:f2:85:04:80:d4:e1:cd:35:82:a3:52:4f:5e:f7:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:02:38:51:0F:20:DD:77:31:53:F3:56:49:1D:DB:88:67:4C:BC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/r8wCOFEPIN13MVPzVkkd24hnTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8b40::/29
2a11:26c0::/29
2a11:2b40::/29
2a11:3580::/29
2a11:3d40::/29
2a11:4080::/29
Signature Algorithm: sha256WithRSAEncryption
1d:96:55:e0:f6:cc:73:3b:5a:1b:40:9a:19:a5:f5:3f:19:85:
8a:02:17:ba:61:1b:24:5a:31:a9:20:56:45:c2:d9:ec:9d:ab:
d5:41:cb:8e:3f:a6:ae:c4:91:18:0a:1a:a2:dc:2a:13:cb:c7:
c1:73:cd:d6:9c:02:a5:b2:91:1e:c1:62:a0:ce:2c:a8:de:46:
2f:d1:24:65:27:65:3b:0b:14:c8:78:fd:24:92:e1:08:da:18:
b6:c5:cb:49:da:ba:b6:0a:f7:2e:8e:1f:22:b3:62:dc:f7:22:
34:be:48:58:f6:81:21:16:70:ca:90:62:60:8c:38:27:1a:90:
04:2f:84:e5:da:ee:3a:ee:90:d3:65:6b:ec:d9:cf:54:82:f5:
dd:d5:d7:a9:cd:26:51:be:d2:36:9f:55:f3:4a:e6:71:3d:cf:
49:82:e7:52:a0:fb:c1:df:56:d8:fe:9d:c1:5d:46:a1:04:e3:
4b:47:c2:04:6f:45:cc:ec:83:d9:fb:3e:84:07:79:7f:d9:22:
6e:b4:3b:d7:bd:18:15:ea:25:a3:0f:9a:ba:57:f9:66:97:09:
ae:e5:10:e7:f1:b4:a9:b7:5e:28:8b:78:64:99:98:2f:e8:d1:
97:e7:86:d5:c3:ef:77:36:56:e6:65:07:ce:47:56:63:49:a5:
87:b1:37:7b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZFbfF2lP53FyKRv5P+AXz8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwODE2MTM1OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmNjMDIzODUxMGYyMGRkNzczMTUzZjM1NjQ5MWRkYjg4Njc0Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c8T7ZAQggC11RFLbL97OTKL5CA4
cvC8YQ3PJAg0ZjWLmUVacErZ8D9wLPUpMctZmjjJPbBL/NZNq+Od+8bVqIrYoMil
sV9OxM6vshmpyYpUbLjFLW2IUIqwjIOgS4MADLq8FMTCntxTrI647B2XpZb0v66n
bj710NfO6mxtplKF3kk3v8v4NVEJR8cEci6I6p/tzDGXGtmRSGua3IKLGIUVO6jP
tAcylgSmnlhLD1soh8fqRd668aqevO6FMElwq775owFhb9GEs0i8RpRrta1gjSUW
cJXRgH5vnJI/z65+kJVmEvUhOvdsnBjFAqh88oUEgNThzTWCo1JPXvcRBwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFK/MAjhRDyDddzFT81ZJHduIZ0y8MB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvcjh3Q09GRVBJTjEzTVZQelZra2QyNGhuVEx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKg2LQAMF
AyoRJsADBQMqEStAAwUDKhE1gAMFAyoRPUADBQMqEUCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAdllXg9sxzO1obQJoZpfU/GYWKAhe6YRskWjGpIFZFwtnsnavVQcuOP6au
xJEYChqi3CoTy8fBc83WnAKlspEewWKgziyo3kYv0SRlJ2U7CxTIeP0kkuEI2hi2
xctJ2rq2Cvcujh8is2Lc9yI0vkhY9oEhFnDKkGJgjDgnGpAEL4Tl2u467pDTZWvs
2c9UgvXd1depzSZRvtI2n1XzSuZxPc9JgudSoPvB31bY/p3BXUahBONLR8IEb0XM
7IPZ+z6EB3l/2SJutDvXvRgV6iWjD5q6V/lmlwmu5RDn8bSpt14oi3hkmZgv6NGX
54bVw+93NlbmZQfOR1ZjSaWHsTd7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:37 2025 by rpki-client