Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/Wy83Jd4E21DzAg4Yzn2ZeTu08Lg.roa
File: Wy83Jd4E21DzAg4Yzn2ZeTu08Lg.roa (raw, json)
Hash identifier: wC40EfzYut36gRxmpiLQbe+K4jihNknrzwWo0PjX8NE=
Subject key identifier: 5B:2F:37:25:DE:04:DB:50:F3:02:0E:18:CE:7D:99:79:3B:B4:F0:B8
Certificate issuer: /CN=650309a6c618c718bd369f561fff0dccbf320b48
Certificate serial: 01856FD51E0E98177D5017FF33B19614810C
Authority key identifier: 65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/Wy83Jd4E21DzAg4Yzn2ZeTu08Lg.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205593
IP address blocks: 2001:678:e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1e:0e:98:17:7d:50:17:ff:33:b1:96:14:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650309a6c618c718bd369f561fff0dccbf320b48
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2f3725de04db50f3020e18ce7d99793bb4f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:b6:4e:fb:2a:45:b6:62:0d:53:35:bb:65:
3f:51:10:35:b5:4a:f3:1b:02:8c:01:96:30:5a:4c:
33:c7:08:45:7f:ea:2c:01:bb:6f:4f:0c:29:a3:59:
cf:ca:0c:13:80:91:94:33:32:28:65:c6:56:18:c2:
83:9c:82:2d:45:bb:36:d7:f0:87:cb:1d:f6:bb:11:
b8:8e:5f:2c:31:27:34:87:c0:33:68:39:3a:4d:2b:
1b:e9:ca:88:d2:be:d4:28:f9:e7:17:1f:22:af:f7:
11:17:89:d2:90:ce:96:e8:ce:e7:06:b0:3a:5e:7d:
be:bc:89:3a:c5:b7:74:9b:27:5d:d7:6b:61:2a:cc:
b3:25:e8:61:43:b4:85:ab:04:3f:cb:4d:e4:91:9c:
ab:43:09:b1:64:01:33:e5:34:f7:07:12:96:5b:e9:
26:a8:92:24:20:32:bf:7d:3a:e3:0f:e1:08:c9:9c:
4a:eb:b8:69:73:e1:55:c0:6c:49:61:65:9b:18:e3:
22:00:3c:b7:f4:1c:a6:08:34:81:db:8f:bd:ec:20:
a0:c0:6f:ec:91:11:b5:61:06:e7:09:35:15:aa:e6:
d2:58:2b:15:57:bc:60:e0:8b:ba:91:bf:4a:c7:45:
29:35:94:52:5c:95:c2:d4:e3:be:a0:33:c7:ab:2e:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:37:25:DE:04:DB:50:F3:02:0E:18:CE:7D:99:79:3B:B4:F0:B8
X509v3 Authority Key Identifier:
keyid:65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/Wy83Jd4E21DzAg4Yzn2ZeTu08Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e40::/48
Signature Algorithm: sha256WithRSAEncryption
53:50:5e:f6:72:be:8f:da:8a:fa:84:0e:f7:b0:88:8b:bb:24:
35:f5:55:b2:09:ba:73:ec:db:ca:6a:c1:16:83:79:e9:2c:3b:
c0:cf:4d:36:2b:7b:f7:55:54:11:da:2b:88:1b:09:38:02:09:
8d:54:ff:b9:bf:0a:c7:22:83:77:c6:58:28:bb:d6:63:99:8a:
0f:fa:b4:41:ce:ca:8d:f4:7c:6f:8f:b8:aa:42:6b:ce:89:a5:
0e:de:c8:25:fa:21:ec:0c:86:dd:5e:58:73:ce:3c:e0:ef:61:
79:cf:62:1f:bd:b5:65:40:aa:57:38:b6:31:83:60:dd:a0:d4:
3d:8d:a1:5c:a1:1e:5e:8f:e5:4a:83:74:c2:02:33:cf:e1:44:
2e:c9:f3:20:14:1f:59:ba:58:c2:62:3d:7f:17:78:ca:2e:83:
70:65:76:c1:07:31:9c:6d:fb:76:06:f0:71:28:3d:43:77:71:
d7:88:a7:7b:d8:ed:61:b3:a2:e5:43:90:9d:df:46:00:53:61:
3b:1f:83:4a:94:8f:5f:94:85:12:c1:7e:5b:63:f8:1a:ee:f4:
dd:2f:25:a9:2c:59:aa:2a:ef:65:b3:ee:80:0f:25:a0:d8:12:
c6:fe:a5:ec:eb:95:a7:f1:57:7a:39:b2:1d:51:58:0d:b3:80:
dd:ba:e6:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVv1R4OmBd9UBf/M7GWFIEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDMwOWE2YzYxOGM3MThiZDM2OWY1NjFmZmYwZGNjYmYz
MjBiNDgwHhcNMjMwMTAyMDAxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjJmMzcyNWRlMDRkYjUwZjMwMjBlMThjZTdkOTk3OTNiYjRmMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth+2TvsqRbZiDVM1u2U/URA1tUrz
GwKMAZYwWkwzxwhFf+osAbtvTwwpo1nPygwTgJGUMzIoZcZWGMKDnIItRbs21/CH
yx32uxG4jl8sMSc0h8AzaDk6TSsb6cqI0r7UKPnnFx8ir/cRF4nSkM6W6M7nBrA6
Xn2+vIk6xbd0mydd12thKsyzJehhQ7SFqwQ/y03kkZyrQwmxZAEz5TT3BxKWW+km
qJIkIDK/fTrjD+EIyZxK67hpc+FVwGxJYWWbGOMiADy39BymCDSB24+97CCgwG/s
kRG1YQbnCTUVqubSWCsVV7xg4Iu6kb9Kx0UpNZRSXJXC1OO+oDPHqy4ojQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFsvNyXeBNtQ8wIOGM59mXk7tPC4MB8GA1UdIwQY
MBaAFGUDCabGGMcYvTafVh//Dcy/MgtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFNSnBzWVl4eGk5TnA5V0hfOE56TDh5QzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hYjY4ZTUtMTRjOS00MTIzLTgyMjYt
ZmUyNmQ0MWNlN2NiLzEvV3k4M0pkNEUyMUR6QWc0WXpuMlplVHUwOExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hYjY4ZTUtMTRjOS00MTIzLTgyMjYtZmUyNmQ0MWNlN2Ni
LzEvWlFNSnBzWVl4eGk5TnA5V0hfOE56TDh5QzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5A
MA0GCSqGSIb3DQEBCwUAA4IBAQBTUF72cr6P2or6hA73sIiLuyQ19VWyCbpz7NvK
asEWg3npLDvAz002K3v3VVQR2iuIGwk4AgmNVP+5vwrHIoN3xlgou9ZjmYoP+rRB
zsqN9Hxvj7iqQmvOiaUO3sgl+iHsDIbdXlhzzjzg72F5z2IfvbVlQKpXOLYxg2Dd
oNQ9jaFcoR5ej+VKg3TCAjPP4UQuyfMgFB9ZuljCYj1/F3jKLoNwZXbBBzGcbft2
BvBxKD1Dd3HXiKd72O1hs6LlQ5Cd30YAU2E7H4NKlI9flIUSwX5bY/ga7vTdLyWp
LFmqKu9ls+6ADyWg2BLG/qXs65Wn8Vd6ObIdUVgNs4Dduubo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org