Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/G4UM6C6S9U5zxi8EoBCvfp8yujM.roa
File: G4UM6C6S9U5zxi8EoBCvfp8yujM.roa (raw, json)
Hash identifier: 2kb4oqVBK/5gcyUecfhrFmEResy83/xkYZvlC7vwScs=
Subject key identifier: 1B:85:0C:E8:2E:92:F5:4E:73:C6:2F:04:A0:10:AF:7E:9F:32:BA:33
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 02933DB1
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/G4UM6C6S9U5zxi8EoBCvfp8yujM.roa
Signing time: Wed 15 Jun 2022 12:09:44 +0000
ROA not before: Wed 15 Jun 2022 12:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 2a10:3e84::/30 maxlen: 30
2a07:f240::/29 maxlen: 32
2a0f:9bc0::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43204017 (0x2933db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jun 15 12:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b850ce82e92f54e73c62f04a010af7e9f32ba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:90:53:d2:a6:92:bb:d5:5d:27:d4:f3:d0:
28:71:11:86:51:a4:46:02:e5:11:06:cf:17:8f:2c:
c2:1f:33:f7:42:31:9e:ec:b9:08:1f:e0:fc:af:c2:
1a:75:7c:4d:20:bf:39:65:72:16:81:22:9f:58:6d:
07:fa:fa:7d:b9:e9:30:b2:09:de:b4:66:94:c1:c8:
c9:74:f0:1f:c7:06:04:ed:f8:da:18:5e:d9:2b:48:
07:f3:5c:14:35:a6:77:f8:eb:21:14:d6:59:b5:08:
cc:f5:2e:35:14:49:a9:86:11:96:5a:bf:c4:ce:a2:
f0:ba:ef:a4:9b:f2:1b:be:9a:75:97:f7:7e:ad:31:
0b:ff:55:79:3f:66:cb:74:6d:6b:8d:60:45:b7:3c:
5a:20:51:87:69:7a:80:94:4b:0d:87:21:6f:f3:f8:
d6:30:ca:57:9b:17:0c:5e:f2:ce:7d:a4:22:7c:34:
31:d0:74:ac:66:1b:3d:ca:3a:96:30:45:69:28:8e:
d7:d2:a5:d5:a0:e0:01:88:e3:17:ca:36:81:f6:13:
6d:94:07:db:43:11:44:11:7a:78:a5:19:c4:6a:7c:
44:c1:a8:e8:6f:e2:bc:96:7f:68:8b:e1:e7:f2:e8:
94:16:69:a3:3a:d0:23:ee:97:ed:bd:57:99:21:83:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:0C:E8:2E:92:F5:4E:73:C6:2F:04:A0:10:AF:7E:9F:32:BA:33
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/G4UM6C6S9U5zxi8EoBCvfp8yujM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0f:9bc0::/29
2a10:3e84::/30
Signature Algorithm: sha256WithRSAEncryption
1c:46:60:d4:d3:b6:96:fe:6f:a1:c6:c2:5e:0c:c7:35:da:cb:
90:d0:81:cd:40:3e:af:58:f5:ce:b3:d7:b9:ed:d1:23:36:96:
36:a3:1b:74:06:a0:6b:43:ff:5b:85:25:e8:a1:87:a6:e6:02:
52:a9:1a:ad:30:b6:24:ca:dc:07:4f:ac:08:89:d8:79:c0:89:
1d:45:01:d2:8c:84:d9:69:a5:31:6b:61:41:fe:f8:cc:1d:15:
ff:64:a6:42:c4:dd:2c:68:34:53:ad:8b:48:60:53:b8:c6:e1:
68:b3:36:8e:c1:7b:2f:e1:11:f0:03:9c:a4:d5:ce:3a:29:e8:
23:10:3f:45:5e:9e:aa:13:5e:5f:0c:6b:33:18:28:d8:2f:fd:
10:3b:53:af:95:f6:c3:00:6f:7c:33:c3:ad:34:46:07:88:14:
e1:48:50:cf:ca:dc:d6:37:e6:d1:cf:3b:f8:f8:ae:71:a2:6d:
68:f1:e2:b1:7b:a0:07:a4:43:71:e7:5e:b1:6e:7f:ab:fd:23:
1f:a3:36:5c:b9:78:87:11:18:b0:c5:23:87:d3:98:a0:32:7a:
ec:a4:4b:62:6f:de:f5:a7:fd:72:2d:66:0a:ee:e7:1b:8a:9e:
39:0b:bc:65:2f:f5:06:57:69:f9:c7:c9:71:1b:cd:5a:e8:e4:
89:6b:de:de
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEApM9sTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzU1YjFjYTM3MjQyNTVkNjBhMGExZWYyOTU3MjdkZjA4ZTNiMTRjMB4XDTIyMDYx
NTEyMDk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI4NTBjZTgyZTky
ZjU0ZTczYzYyZjA0YTAxMGFmN2U5ZjMyYmEzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJp2kFPSppK71V0n1PPQKHERhlGkRgLlEQbPF48swh8z90Ix
nuy5CB/g/K/CGnV8TSC/OWVyFoEin1htB/r6fbnpMLIJ3rRmlMHIyXTwH8cGBO34
2hhe2StIB/NcFDWmd/jrIRTWWbUIzPUuNRRJqYYRllq/xM6i8LrvpJvyG76adZf3
fq0xC/9VeT9my3Rta41gRbc8WiBRh2l6gJRLDYchb/P41jDKV5sXDF7yzn2kInw0
MdB0rGYbPco6ljBFaSiO19Kl1aDgAYjjF8o2gfYTbZQH20MRRBF6eKUZxGp8RMGo
6G/ivJZ/aIvh5/LolBZpozrQI+6X7b1XmSGD6fsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQbhQzoLpL1TnPGLwSgEK9+nzK6MzAfBgNVHSMEGDAWgBS8VbHKNyQlXWCg
oe8pVyffCOOxTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZGV3h5amNrSlYxZ29LSHZLVmNuM3dqanNVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8x
L0c0VU02QzZTOVU1enhpOEVvQkN2ZnA4eXVqTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8xL3ZGV3h5amNrSlYx
Z29LSHZLVmNuM3dqanNVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wGwQCAAIwFQMFAyoH8kADBQMqD5vAAwUCKhA+hDAN
BgkqhkiG9w0BAQsFAAOCAQEAHEZg1NO2lv5vocbCXgzHNdrLkNCBzUA+r1j1zrPX
ue3RIzaWNqMbdAaga0P/W4Ul6KGHpuYCUqkarTC2JMrcB0+sCInYecCJHUUB0oyE
2WmlMWthQf74zB0V/2SmQsTdLGg0U62LSGBTuMbhaLM2jsF7L+ER8AOcpNXOOino
IxA/RV6eqhNeXwxrMxgo2C/9EDtTr5X2wwBvfDPDrTRGB4gU4UhQz8rc1jfm0c87
+PiucaJtaPHisXugB6RDcedesW5/q/0jH6M2XLl4hxEYsMUjh9OYoDJ67KRLYm/e
9af9ci1mCu7nG4qeOQu8ZS/1Bldp+cfJcRvNWujkiWve3g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:49 2025 by rpki-client