Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/TSoVb7pty69ImAF-mULu3YYlx74.roa
File: TSoVb7pty69ImAF-mULu3YYlx74.roa (raw, json)
Hash identifier: CtgvUoaVL0/GFw2QxjR3Bo6vstiyY0v+wSAANkilxbk=
Subject key identifier: 4D:2A:15:6F:BA:6D:CB:AF:48:98:01:7E:99:42:EE:DD:86:25:C7:BE
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 02907128
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/TSoVb7pty69ImAF-mULu3YYlx74.roa
Signing time: Wed 15 Jun 2022 12:04:47 +0000
ROA not before: Wed 15 Jun 2022 12:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a0f:89c0::/29 maxlen: 29
2a10:3e84::/30 maxlen: 30
2a0f:63c0::/29 maxlen: 29
2a07:f240::/29 maxlen: 32
2a10:a9c0::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 30
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43020584 (0x2907128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jun 15 12:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2a156fba6dcbaf4898017e9942eedd8625c7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:46:47:b3:d5:1a:53:bf:8e:5a:34:91:11:
d1:69:5e:c9:c1:1b:77:8d:76:32:61:1d:0f:f6:a0:
9b:11:91:fc:80:bb:6f:3f:f6:ca:da:bd:90:cc:88:
35:a8:d5:af:38:06:2e:03:c4:bc:77:c7:8f:93:c9:
aa:67:7e:5e:c1:01:39:69:db:9b:39:b3:f7:f5:27:
a7:7c:f4:fe:1f:ac:fd:7f:08:4a:ab:78:3b:3a:5a:
84:c2:b0:2f:6c:69:33:fb:81:42:22:b4:e4:3d:5e:
37:8a:8c:44:15:36:69:0c:9d:cd:a1:1f:ab:7a:cd:
22:d6:03:3e:a8:dd:7b:0f:21:23:6a:1d:05:bb:df:
da:95:9e:ce:a4:fe:09:f1:0f:82:f7:1f:fc:35:e8:
08:64:fe:d1:7a:3e:a9:6c:71:58:13:f8:8d:f0:88:
29:72:95:dc:7b:75:57:c6:c1:4a:9e:57:56:e7:d5:
ab:0d:81:ea:37:2a:1b:5b:88:d5:e0:2e:c4:14:e1:
b5:18:8a:fc:d3:be:02:4b:f8:e0:d2:03:70:d0:08:
90:2c:ac:dc:e3:2a:eb:9f:6f:a6:5f:da:fb:9e:9f:
84:ec:20:e3:93:b7:14:35:20:f0:2d:b8:8c:58:e7:
67:bf:08:d1:60:11:2e:ce:44:1f:4f:dc:75:72:58:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:15:6F:BA:6D:CB:AF:48:98:01:7E:99:42:EE:DD:86:25:C7:BE
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/TSoVb7pty69ImAF-mULu3YYlx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:33:be:22:66:24:87:fa:08:14:3f:ad:47:74:34:9a:3f:97:
c3:7d:7d:10:56:1e:bf:08:8d:b4:7e:de:36:a4:50:4a:f6:1d:
34:11:61:66:89:29:c2:e9:36:ab:dc:98:71:87:06:4e:09:3c:
e7:b3:56:70:be:9f:d5:db:73:81:a6:67:92:45:8e:d0:92:01:
9c:b3:4e:e8:ff:f3:e5:b3:d9:c7:0e:31:4a:db:be:d6:b7:42:
45:75:10:7b:5b:37:f6:fe:d4:d5:07:03:23:3d:c2:71:9f:98:
c0:b5:57:b6:6b:10:92:79:7f:3a:1b:97:37:cc:c6:43:41:49:
6e:37:06:ea:5c:75:98:5f:e5:4f:c7:68:21:c6:1a:70:16:9c:
53:22:65:88:44:43:f8:2c:fe:e4:cd:94:fe:c0:4e:c2:f0:21:
90:76:c2:d4:91:70:4d:9c:39:5c:63:e8:6b:fe:5a:2e:78:62:
32:a8:cf:15:3e:0c:b5:a7:c1:7b:46:56:31:a0:3c:71:c6:1e:
b6:4c:a7:e5:05:10:89:ec:95:51:77:fc:09:de:0f:e4:76:12:
08:f2:1e:24:cf:3a:74:77:c9:a7:be:db:ef:48:07:0d:50:be:
9f:8d:69:91:29:58:b9:5b:15:6a:c9:55:dd:c5:96:25:28:8e:
fb:f9:91:22
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIEApBxKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzU1YjFjYTM3MjQyNTVkNjBhMGExZWYyOTU3MjdkZjA4ZTNiMTRjMB4XDTIyMDYx
NTEyMDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQyYTE1NmZiYTZk
Y2JhZjQ4OTgwMTdlOTk0MmVlZGQ4NjI1YzdiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMChRkez1RpTv45aNJER0WleycEbd412MmEdD/agmxGR/IC7
bz/2ytq9kMyINajVrzgGLgPEvHfHj5PJqmd+XsEBOWnbmzmz9/Unp3z0/h+s/X8I
Sqt4OzpahMKwL2xpM/uBQiK05D1eN4qMRBU2aQydzaEfq3rNItYDPqjdew8hI2od
Bbvf2pWezqT+CfEPgvcf/DXoCGT+0Xo+qWxxWBP4jfCIKXKV3Ht1V8bBSp5XVufV
qw2B6jcqG1uI1eAuxBThtRiK/NO+Akv44NIDcNAIkCys3OMq659vpl/a+56fhOwg
45O3FDUg8C24jFjnZ78I0WARLs5EH0/cdXJYGRUCAwEAAaOCAjQwggIwMB0GA1Ud
DgQWBBRNKhVvum3Lr0iYAX6ZQu7dhiXHvjAfBgNVHSMEGDAWgBS8VbHKNyQlXWCg
oe8pVyffCOOxTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZGV3h5amNrSlYxZ29LSHZLVmNuM3dqanNVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8x
L1RTb1ZiN3B0eTY5SW1BRi1tVUx1M1lZbHg3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8xL3ZGV3h5amNrSlYx
Z29LSHZLVmNuM3dqanNVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBK
BggrBgEFBQcBBwEB/wQ7MDkwNwQCAAIwMQMFAyoH8kADBQMqC6TAAwUDKg9jwAMF
AyoPicADBQMqD5vAAwUCKhA+hAMFAyoQqcAwDQYJKoZIhvcNAQELBQADggEBADcz
viJmJIf6CBQ/rUd0NJo/l8N9fRBWHr8IjbR+3jakUEr2HTQRYWaJKcLpNqvcmHGH
Bk4JPOezVnC+n9Xbc4GmZ5JFjtCSAZyzTuj/8+Wz2ccOMUrbvta3QkV1EHtbN/b+
1NUHAyM9wnGfmMC1V7ZrEJJ5fzoblzfMxkNBSW43BupcdZhf5U/HaCHGGnAWnFMi
ZYhEQ/gs/uTNlP7ATsLwIZB2wtSRcE2cOVxj6Gv+Wi54YjKozxU+DLWnwXtGVjGg
PHHGHrZMp+UFEInslVF3/AneD+R2EgjyHiTPOnR3yae+2+9IBw1Qvp+NaZEpWLlb
FWrJVd3FliUojvv5kSI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org