Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/TIIvdY5WkEuG4EnWR1LefiED-DI.roa
File: TIIvdY5WkEuG4EnWR1LefiED-DI.roa (raw, json)
Hash identifier: SIYna3Y3wkx7ABWHIQVKTAoe6t8by0DDfKLs5FC8YMk=
Subject key identifier: 4C:82:2F:75:8E:56:90:4B:86:E0:49:D6:47:52:DE:7E:21:03:F8:32
Certificate issuer: /CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Certificate serial: 018572CCCCD8F1E6B04758ECAFB15B8B71A1
Authority key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/TIIvdY5WkEuG4EnWR1LefiED-DI.roa
Signing time: Mon 02 Jan 2023 14:05:02 +0000
ROA not before: Mon 02 Jan 2023 14:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a0a:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:cc:d8:f1:e6:b0:47:58:ec:af:b1:5b:8b:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Validity
Not Before: Jan 2 14:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c822f758e56904b86e049d64752de7e2103f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:3a:2f:df:bf:00:cd:58:7e:11:e2:54:0b:
c0:37:cd:10:98:8c:60:2a:54:aa:b3:0c:76:1b:cd:
40:0b:27:f4:53:c2:60:86:b3:6d:f9:01:3b:a4:55:
7e:d8:40:1c:c8:ac:4c:23:33:75:33:dc:db:d9:b9:
62:39:2e:4c:99:45:da:0d:35:ea:27:e7:6d:f1:ba:
06:5b:f0:c9:5d:14:0b:76:b9:b7:c2:30:7f:39:2b:
b5:e8:4f:da:2d:ab:42:b5:7b:6d:34:c9:aa:2e:56:
73:e3:61:78:eb:99:41:d2:cb:01:77:c7:a6:9e:1d:
c8:95:f6:97:0d:20:8c:0e:d1:d9:85:df:a4:46:29:
69:47:d1:23:1c:45:b5:73:90:b7:57:0f:e4:92:d2:
e0:46:af:fb:b3:82:23:1b:95:d4:6f:9a:d9:45:d9:
76:57:ac:fa:9c:cb:76:56:88:79:f1:21:8d:05:d0:
9f:53:3d:2a:bb:e8:e6:40:e6:19:e4:5b:56:96:40:
1f:53:07:12:88:c2:90:73:b1:9d:64:15:aa:8c:af:
43:46:23:cd:1c:ba:f4:31:93:1e:8d:4c:b1:cb:01:
24:8b:4f:05:9e:0c:a3:c3:4f:7b:96:d2:04:37:cf:
23:c2:80:15:36:39:54:14:90:28:8b:b2:da:78:2b:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:82:2F:75:8E:56:90:4B:86:E0:49:D6:47:52:DE:7E:21:03:F8:32
X509v3 Authority Key Identifier:
keyid:D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/TIIvdY5WkEuG4EnWR1LefiED-DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
63:5f:2b:ae:74:09:98:d0:2c:03:d7:53:fe:4d:02:76:2d:7c:
4f:6c:23:8d:b8:c3:66:2c:7e:4b:02:6b:ef:ea:33:24:e4:25:
f2:a6:37:bb:22:84:43:47:12:34:70:f1:63:53:ce:73:30:b1:
23:94:da:f8:46:32:86:4a:03:2c:fa:f0:4a:a6:2e:0e:51:95:
95:b3:80:49:c3:17:8e:17:ea:e3:6e:07:4c:9d:e8:09:ee:db:
26:82:17:41:09:ef:17:12:c6:82:e0:bf:f1:71:78:b4:3f:ae:
a9:6d:2d:b2:3e:e3:89:e7:0d:e6:c1:31:d4:8f:c1:c1:d4:bd:
62:b2:32:1e:c2:96:72:35:95:f5:58:35:c6:6e:90:d8:e8:31:
f5:3b:d5:a4:c0:6f:14:53:ea:61:46:78:3b:0c:24:41:5b:12:
81:00:c3:f2:c1:00:e9:46:23:ae:92:9d:21:b2:67:28:2f:6b:
70:3f:7f:47:1a:4a:9a:7a:cc:7c:7a:d7:2f:e1:fc:74:5f:20:
a8:10:ff:76:aa:0f:85:2f:88:32:4a:30:0e:f6:9e:d2:da:26:
2a:cc:49:68:72:e5:67:13:f7:01:ca:ce:c4:20:bd:1f:bd:3d:
b4:37:6f:d2:05:8d:a5:82:96:a8:58:34:5a:0c:3a:5b:4c:5a:
ef:fd:37:58
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyzMzY8eawR1jsr7Fbi3GhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2ZlYmZkNTM3ZTMyMGNiYmVjMmI0ZTIyNjc3YjlhZTY2
ZjYwNGUwHhcNMjMwMTAyMTQwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzgyMmY3NThlNTY5MDRiODZlMDQ5ZDY0NzUyZGU3ZTIxMDNmODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfE6L9+/AM1YfhHiVAvAN80QmIxg
KlSqswx2G81ACyf0U8JghrNt+QE7pFV+2EAcyKxMIzN1M9zb2bliOS5MmUXaDTXq
J+dt8boGW/DJXRQLdrm3wjB/OSu16E/aLatCtXttNMmqLlZz42F465lB0ssBd8em
nh3IlfaXDSCMDtHZhd+kRilpR9EjHEW1c5C3Vw/kktLgRq/7s4IjG5XUb5rZRdl2
V6z6nMt2Voh58SGNBdCfUz0qu+jmQOYZ5FtWlkAfUwcSiMKQc7GdZBWqjK9DRiPN
HLr0MZMejUyxywEki08Fngyjw097ltIEN88jwoAVNjlUFJAoi7LaeCvdvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEyCL3WOVpBLhuBJ1kdS3n4hA/gyMB8GA1UdIwQY
MBaAFNA/6/1TfjIMu+wrTiJne5rmb2BOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERfcl9WTi1NZ3k3N0N0T0ltZDdtdVp2WUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hMTE1NjctMjU5ZS00ZDFiLWJmY2It
MjgxZmFkZTI4MzRiLzEvVElJdmRZNVdrRXVHNEVuV1IxTGVmaUVELURJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hMTE1NjctMjU5ZS00ZDFiLWJmY2ItMjgxZmFkZTI4MzRi
LzEvMERfcl9WTi1NZ3k3N0N0T0ltZDdtdVp2WUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrNQDAN
BgkqhkiG9w0BAQsFAAOCAQEAY18rrnQJmNAsA9dT/k0Cdi18T2wjjbjDZix+SwJr
7+ozJOQl8qY3uyKEQ0cSNHDxY1POczCxI5Ta+EYyhkoDLPrwSqYuDlGVlbOAScMX
jhfq424HTJ3oCe7bJoIXQQnvFxLGguC/8XF4tD+uqW0tsj7jiecN5sEx1I/BwdS9
YrIyHsKWcjWV9Vg1xm6Q2Ogx9TvVpMBvFFPqYUZ4OwwkQVsSgQDD8sEA6UYjrpKd
IbJnKC9rcD9/RxpKmnrMfHrXL+H8dF8gqBD/dqoPhS+IMkowDvae0tomKsxJaHLl
ZxP3AcrOxCC9H709tDdv0gWNpYKWqFg0Wgw6W0xa7/03WA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:09:03 2025 by rpki-client