Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa
File: JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa (raw, json)
Hash identifier: l2uZFgQjtW/uHkOn3XiELxEIclKc3wO6oXrwIajeTpw=
Subject key identifier: 26:74:98:92:24:B2:C7:E4:B3:01:B2:26:DD:C1:A9:ED:C3:B6:06:22
Certificate issuer: /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial: 018CC4253BE15B729062AA25FE87508C4B3C
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56762
IP address blocks: 2001:67c:81c::/48 maxlen: 48
2001:67c:b8c::/48 maxlen: 48
2001:67c:b90::/48 maxlen: 48
2001:67c:b88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3b:e1:5b:72:90:62:aa:25:fe:87:50:8c:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2674989224b2c7e4b301b226ddc1a9edc3b60622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:6c:28:92:66:0a:37:e3:a2:e4:6f:9a:fb:
13:ca:4c:f0:c9:98:ff:28:fe:e0:7e:ad:9e:2b:ab:
fc:b4:31:12:2c:64:92:5a:5c:e2:cb:d9:e9:9c:a5:
87:3e:a6:1a:62:be:fd:03:84:83:6d:a0:77:89:5b:
30:f7:b7:1e:45:72:a5:b9:dd:e1:18:cf:f1:ce:ae:
ba:62:24:d1:94:63:3c:f1:9b:ba:b7:42:da:5b:aa:
2f:60:9c:bd:30:2f:1a:f8:e0:21:f1:a5:6c:51:99:
1b:e6:4b:99:e6:ff:95:da:1f:c0:77:73:d1:2b:4e:
4e:ad:43:b2:66:37:65:f5:1a:1e:41:e5:cd:b3:0c:
c5:8e:e9:b3:4c:1a:c4:3e:80:2f:8e:9f:27:d9:0f:
37:76:69:85:e6:31:e4:60:1e:fc:eb:b4:6d:a8:62:
09:cf:6a:b8:28:ac:8a:09:50:13:28:28:f2:e1:17:
61:46:04:82:84:2d:cb:6e:a0:55:df:43:b5:ce:0c:
fc:a8:9c:ef:3e:57:02:8a:12:99:94:74:b4:9b:49:
6f:00:5e:7b:10:81:5c:51:9a:b9:82:ed:a9:81:be:
e0:49:7f:68:d7:59:f1:37:96:39:7e:5a:d1:54:97:
f6:23:76:a6:af:70:40:de:dd:d4:72:92:86:d8:02:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:74:98:92:24:B2:C7:E4:B3:01:B2:26:DD:C1:A9:ED:C3:B6:06:22
X509v3 Authority Key Identifier:
keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:81c::/48
2001:67c:b88::/48
2001:67c:b8c::/48
2001:67c:b90::/48
Signature Algorithm: sha256WithRSAEncryption
20:ec:18:b1:6c:ba:4e:d1:46:74:77:81:4f:33:da:e9:c4:2c:
63:5e:0b:4a:a0:ca:f2:bb:a2:2c:66:bd:ce:7a:b8:49:40:ff:
4d:aa:80:94:e6:83:eb:3f:b5:09:9d:a8:05:69:49:f3:e5:17:
58:65:22:25:28:ac:dd:d5:cd:63:65:b5:24:7f:2c:39:93:78:
88:17:6b:3d:88:6c:fe:53:99:e5:7e:cb:41:4a:a3:db:c2:49:
11:6d:9b:f8:e8:87:63:b9:c1:16:9b:f6:9a:7d:cf:89:b2:32:
aa:cd:8b:14:a1:ca:e3:ad:92:97:13:a0:52:f4:23:9e:a6:5a:
55:eb:07:62:ba:08:55:50:c9:22:37:a0:ee:3a:3f:51:2a:b1:
f3:e1:e9:42:b5:48:e8:af:54:b1:f0:1d:3f:a9:a5:4a:04:3a:
80:64:d7:77:3d:3b:38:75:78:98:62:88:ef:44:dc:b4:e4:6c:
5e:5e:15:15:4c:f4:08:d9:0f:5f:85:69:4c:36:b3:b8:cc:b3:
98:46:fd:8c:26:c1:e7:e5:f8:80:f4:ee:e6:2b:fb:e2:12:fc:
0e:a6:3b:4c:93:cf:31:e7:9f:92:2f:61:f2:7e:64:60:22:bd:
d0:fd:5d:4e:f9:0c:28:98:e1:47:d7:04:0b:3b:c6:fa:0e:09:
de:26:31:95
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzEJTvhW3KQYqol/odQjEs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDc1ZWNiMGY2ODBhNTZkMjBmNTgxYmJkY2U1MjFjZmI3
ZWI0NmQwHhcNMjQwMTAxMDgzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjc0OTg5MjI0YjJjN2U0YjMwMWIyMjZkZGMxYTllZGMzYjYwNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWFsKJJmCjfjouRvmvsTykzwyZj/
KP7gfq2eK6v8tDESLGSSWlziy9npnKWHPqYaYr79A4SDbaB3iVsw97ceRXKlud3h
GM/xzq66YiTRlGM88Zu6t0LaW6ovYJy9MC8a+OAh8aVsUZkb5kuZ5v+V2h/Ad3PR
K05OrUOyZjdl9RoeQeXNswzFjumzTBrEPoAvjp8n2Q83dmmF5jHkYB7867RtqGIJ
z2q4KKyKCVATKCjy4RdhRgSChC3LbqBV30O1zgz8qJzvPlcCihKZlHS0m0lvAF57
EIFcUZq5gu2pgb7gSX9o11nxN5Y5flrRVJf2I3amr3BA3t3UcpKG2AJ5fwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCZ0mJIkssfkswGyJt3Bqe3DtgYiMB8GA1UdIwQY
MBaAFNdHXssPaApW0g9YG73OUhz7frRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBkZXl3OW9DbGJTRDFnYnZjNVNIUHQtdEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMzNkZmYtODI3MC00ODk0LWJhOGEt
YmJmMmUzNzQzOGQ1LzEvSm5TWWtpU3l4LVN6QWJJbTNjR3A3Y08yQmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMzNkZmYtODI3MC00ODk0LWJhOGEtYmJmMmUzNzQzOGQ1
LzEvMTBkZXl3OW9DbGJTRDFnYnZjNVNIUHQtdEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfAgc
AwcAIAEGfAuIAwcAIAEGfAuMAwcAIAEGfAuQMA0GCSqGSIb3DQEBCwUAA4IBAQAg
7BixbLpO0UZ0d4FPM9rpxCxjXgtKoMryu6IsZr3OerhJQP9NqoCU5oPrP7UJnagF
aUnz5RdYZSIlKKzd1c1jZbUkfyw5k3iIF2s9iGz+U5nlfstBSqPbwkkRbZv46Idj
ucEWm/aafc+JsjKqzYsUocrjrZKXE6BS9COeplpV6wdiughVUMkiN6DuOj9RKrHz
4elCtUjor1Sx8B0/qaVKBDqAZNd3PTs4dXiYYojvRNy05GxeXhUVTPQI2Q9fhWlM
NrO4zLOYRv2MJsHn5fiA9O7mK/viEvwOpjtMk88x55+SL2HyfmRgIr3Q/V1O+Qwo
mOFH1wQLO8b6DgneJjGV
Generated at Sun Feb 11 06:34:52 2024 by rpki-client on console-ams.rpki-client.org