Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa
File: fShzjAcBmYMcGnvI7VUzrfXZCdY.roa (raw, json)
Hash identifier: BChLo9PPhJT0O35j6ZcAKEIQs+ZTSksPXHdp4m592BI=
Subject key identifier: 7D:28:73:8C:07:01:99:83:1C:1A:7B:C8:ED:55:33:AD:F5:D9:09:D6
Certificate issuer: /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial: 018627DA653DB293A27D9914344AA90DB5EB
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa
Signing time: Mon 06 Feb 2023 17:51:09 +0000
ROA not before: Mon 06 Feb 2023 17:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56762
IP address blocks: 2001:67c:81c::/48 maxlen: 48
2001:67c:b8c::/48 maxlen: 48
2001:67c:b90::/48 maxlen: 48
2001:67c:b88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:da:65:3d:b2:93:a2:7d:99:14:34:4a:a9:0d:b5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Validity
Not Before: Feb 6 17:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d28738c070199831c1a7bc8ed5533adf5d909d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:f5:3f:f3:8a:4c:54:a4:ab:f3:e8:6f:d8:
cd:09:71:aa:ae:75:27:c5:e3:b9:18:63:78:f8:0f:
4b:92:2a:6e:c6:18:f9:0e:f9:26:74:c5:c3:0f:f6:
2c:f6:9a:af:b0:06:8b:c9:4a:c7:e1:dc:84:28:7a:
da:a9:c1:b0:39:68:bf:2d:75:a2:a4:c9:06:02:dc:
a6:bf:17:cc:7d:15:25:0f:b0:09:e4:86:e8:17:82:
47:60:64:1c:54:7a:1c:ed:11:a7:16:ed:4f:6b:70:
99:88:eb:bf:0a:4b:53:84:48:1c:26:cf:11:92:aa:
0c:ff:bd:b2:39:7f:c8:0e:a0:a4:fd:ba:2b:8b:74:
c0:f6:8d:db:a5:a2:84:c8:f3:be:3c:17:18:01:a5:
0e:3e:03:a0:63:8c:3a:d3:c1:21:d9:7c:01:59:9c:
f3:8f:b6:45:ed:7c:13:74:dd:47:f8:f4:5f:1b:60:
f5:e8:70:1a:1a:3e:3a:d3:45:e7:07:e5:d2:22:98:
ea:07:b2:0d:70:cb:99:69:b5:7b:65:9a:1b:96:66:
1f:1b:77:54:20:32:93:61:d0:ef:ef:5e:d6:2f:87:
4c:a6:3c:d9:b6:2c:c6:32:0b:06:bd:db:d0:1f:72:
5b:e3:00:43:cd:ac:81:2a:bc:41:f5:ee:fa:fe:39:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:73:8C:07:01:99:83:1C:1A:7B:C8:ED:55:33:AD:F5:D9:09:D6
X509v3 Authority Key Identifier:
keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:81c::/48
2001:67c:b88::/48
2001:67c:b8c::/48
2001:67c:b90::/48
Signature Algorithm: sha256WithRSAEncryption
9f:83:f0:98:05:9f:0b:7a:80:b9:54:66:a4:e8:e4:92:7e:90:
60:90:22:5f:46:65:c4:22:40:74:e2:a5:5b:59:32:77:fd:b4:
18:56:04:5f:0c:59:c4:38:d5:b3:bd:e0:36:22:12:a3:97:96:
7a:b2:f9:5a:97:99:4e:f9:c9:ff:59:b0:e0:e4:94:b2:b1:f7:
7f:c7:77:6f:5d:b5:da:33:a5:f0:fe:b6:b3:67:24:f1:5f:7e:
ea:29:7c:a0:d5:51:49:18:0e:26:c6:0b:4d:7b:aa:ad:fc:78:
ac:88:94:21:74:df:4f:e6:05:75:49:34:a4:c2:3c:90:83:f8:
f1:34:15:bb:fa:5f:a3:48:04:e9:7c:2b:a6:30:16:68:1d:75:
e1:57:b4:77:df:a9:0a:8e:ab:f4:da:65:6e:dc:63:99:f3:87:
7d:35:e2:6e:fe:ac:87:62:96:00:2b:4b:62:88:bd:06:07:e7:
09:99:f9:86:47:d8:2a:7d:b3:43:bd:d8:25:8f:90:7f:f8:89:
80:d6:b5:36:16:b3:97:e1:3b:96:8b:92:be:ed:2a:73:3a:1e:
4d:61:fa:b2:37:65:82:5c:e8:ee:7f:96:e8:90:0d:37:17:b6:
2a:da:3e:ca:57:5e:8e:b3:21:24:15:25:e0:4f:6a:77:93:cf:
a8:3e:2e:51
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYYn2mU9spOifZkUNEqpDbXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDc1ZWNiMGY2ODBhNTZkMjBmNTgxYmJkY2U1MjFjZmI3
ZWI0NmQwHhcNMjMwMjA2MTc1MTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI4NzM4YzA3MDE5OTgzMWMxYTdiYzhlZDU1MzNhZGY1ZDkwOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZT1P/OKTFSkq/Pob9jNCXGqrnUn
xeO5GGN4+A9Lkipuxhj5DvkmdMXDD/Ys9pqvsAaLyUrH4dyEKHraqcGwOWi/LXWi
pMkGAtymvxfMfRUlD7AJ5IboF4JHYGQcVHoc7RGnFu1Pa3CZiOu/CktThEgcJs8R
kqoM/72yOX/IDqCk/bori3TA9o3bpaKEyPO+PBcYAaUOPgOgY4w608Eh2XwBWZzz
j7ZF7XwTdN1H+PRfG2D16HAaGj4600XnB+XSIpjqB7INcMuZabV7ZZoblmYfG3dU
IDKTYdDv717WL4dMpjzZtizGMgsGvdvQH3Jb4wBDzayBKrxB9e76/jl9TQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH0oc4wHAZmDHBp7yO1VM6312QnWMB8GA1UdIwQY
MBaAFNdHXssPaApW0g9YG73OUhz7frRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBkZXl3OW9DbGJTRDFnYnZjNVNIUHQtdEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMzNkZmYtODI3MC00ODk0LWJhOGEt
YmJmMmUzNzQzOGQ1LzEvZlNoempBY0JtWU1jR252STdWVXpyZlhaQ2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMzNkZmYtODI3MC00ODk0LWJhOGEtYmJmMmUzNzQzOGQ1
LzEvMTBkZXl3OW9DbGJTRDFnYnZjNVNIUHQtdEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfAgc
AwcAIAEGfAuIAwcAIAEGfAuMAwcAIAEGfAuQMA0GCSqGSIb3DQEBCwUAA4IBAQCf
g/CYBZ8LeoC5VGak6OSSfpBgkCJfRmXEIkB04qVbWTJ3/bQYVgRfDFnEONWzveA2
IhKjl5Z6svlal5lO+cn/WbDg5JSysfd/x3dvXbXaM6Xw/razZyTxX37qKXyg1VFJ
GA4mxgtNe6qt/HisiJQhdN9P5gV1STSkwjyQg/jxNBW7+l+jSATpfCumMBZoHXXh
V7R336kKjqv02mVu3GOZ84d9NeJu/qyHYpYAK0tiiL0GB+cJmfmGR9gqfbNDvdgl
j5B/+ImA1rU2FrOX4TuWi5K+7SpzOh5NYfqyN2WCXOjuf5bokA03F7Yq2j7KV16O
syEkFSXgT2p3k8+oPi5R
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:43 2025 by rpki-client