Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/AvVWvKPF0oL8R8Pejhrk8ORQfHM.roa
File: AvVWvKPF0oL8R8Pejhrk8ORQfHM.roa (raw, json)
Hash identifier: 0+ezRspj451pbh/m3f6aLd4KgT1yqlIiZvo0P/7mFfA=
Subject key identifier: 02:F5:56:BC:A3:C5:D2:82:FC:47:C3:DE:8E:1A:E4:F0:E4:50:7C:73
Certificate issuer: /CN=246d5c913452997968c721cca0c3ce0847c5c7db
Certificate serial: 0186026216EE3EE14D34E854A7DC63F803CA
Authority key identifier: 24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/AvVWvKPF0oL8R8Pejhrk8ORQfHM.roa
Signing time: Mon 30 Jan 2023 11:13:48 +0000
ROA not before: Mon 30 Jan 2023 11:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:62:16:ee:3e:e1:4d:34:e8:54:a7:dc:63:f8:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246d5c913452997968c721cca0c3ce0847c5c7db
Validity
Not Before: Jan 30 11:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02f556bca3c5d282fc47c3de8e1ae4f0e4507c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:90:2d:b6:96:dd:f2:45:a1:af:fb:4a:5d:
66:42:20:c7:26:ec:fb:e2:53:d3:17:68:0f:99:ba:
06:9f:41:b9:d9:a5:4f:1a:f4:d2:a8:ef:ed:69:a2:
7e:80:02:24:e8:48:99:2b:4a:0f:65:86:65:90:ad:
4d:47:cd:b3:87:e2:49:1c:02:a1:6e:47:0e:9d:4f:
bf:69:ef:90:fc:27:78:d6:ec:7e:19:e3:69:6a:0c:
3c:46:60:1a:ba:58:cc:59:dc:8a:eb:03:95:c5:b1:
ab:37:b3:b0:df:1e:ee:34:eb:58:48:c0:43:f0:ba:
c2:b7:a1:e3:15:2e:16:af:4e:b6:5a:6a:41:9f:ee:
cf:79:96:2b:04:a6:a1:fc:0f:f6:b2:a0:38:eb:d3:
1d:4c:77:52:2c:5e:ae:ef:17:14:a4:be:64:d8:04:
67:a6:69:89:bb:5c:9d:fd:92:31:9b:22:e0:19:15:
b4:ac:f5:c4:fc:86:aa:92:10:a8:f3:ed:15:26:37:
02:b5:5b:3e:29:7c:81:bf:5b:96:9f:f5:74:07:b0:
3e:bb:8b:97:ea:31:a2:94:1e:b8:fa:f9:b7:2f:15:
1b:56:51:35:85:cf:1c:9a:13:61:f2:87:ca:6c:5d:
a2:79:84:28:33:97:68:a3:4c:d4:28:2c:52:32:a2:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:56:BC:A3:C5:D2:82:FC:47:C3:DE:8E:1A:E4:F0:E4:50:7C:73
X509v3 Authority Key Identifier:
keyid:24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/AvVWvKPF0oL8R8Pejhrk8ORQfHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/JG1ckTRSmXloxyHMoMPOCEfFx9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:9c:9c:aa:d0:d2:60:85:23:6b:a0:c9:ee:b5:0f:05:74:25:
f9:b6:9d:99:60:02:e1:99:c9:43:d3:6b:d3:92:ec:7d:a2:80:
97:a0:b7:e5:9e:d6:e2:59:52:a9:20:9e:dd:f1:6c:a9:dd:cc:
40:cb:56:8f:e3:4f:15:5f:7d:50:0c:99:5e:f6:ac:42:ce:43:
64:63:ef:ce:d3:2f:2b:58:0e:24:fa:10:c2:9f:e7:e3:c8:28:
32:3d:e7:2a:49:61:77:d9:9f:92:d5:6c:ff:16:20:e9:d6:9e:
93:99:4b:82:fb:7e:86:cd:ce:77:4c:e6:0a:38:26:1f:5e:2c:
17:ae:1a:37:69:89:ec:b7:33:ea:50:d1:dc:5a:7e:1a:0f:3f:
32:ef:c6:ea:6b:4b:88:18:3e:05:e4:82:9a:e4:1a:8f:e0:5a:
3f:d5:98:28:63:bd:aa:96:2d:46:27:d1:27:28:31:07:d1:8d:
54:0d:8c:05:5d:41:81:f2:35:5a:91:f4:c7:29:e3:cd:45:41:
8a:21:2b:bf:7e:df:26:95:d3:54:12:6d:09:b3:8b:f6:0f:30:
1f:02:b9:4d:a2:a3:66:16:7d:83:3a:0a:e3:42:a2:4a:29:54:
60:33:92:de:b8:9d:12:89:b4:c3:43:40:5a:42:b0:05:0e:06:
35:7d:01:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYYCYhbuPuFNNOhUp9xj+APKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmQ1YzkxMzQ1Mjk5Nzk2OGM3MjFjY2EwYzNjZTA4NDdj
NWM3ZGIwHhcNMjMwMTMwMTExMzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmY1NTZiY2EzYzVkMjgyZmM0N2MzZGU4ZTFhZTRmMGU0NTA3YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6CQLbaW3fJFoa/7Sl1mQiDHJuz7
4lPTF2gPmboGn0G52aVPGvTSqO/taaJ+gAIk6EiZK0oPZYZlkK1NR82zh+JJHAKh
bkcOnU+/ae+Q/Cd41ux+GeNpagw8RmAauljMWdyK6wOVxbGrN7Ow3x7uNOtYSMBD
8LrCt6HjFS4Wr062WmpBn+7PeZYrBKah/A/2sqA469MdTHdSLF6u7xcUpL5k2ARn
pmmJu1yd/ZIxmyLgGRW0rPXE/IaqkhCo8+0VJjcCtVs+KXyBv1uWn/V0B7A+u4uX
6jGilB64+vm3LxUbVlE1hc8cmhNh8ofKbF2ieYQoM5doo0zUKCxSMqIBLwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFAL1VryjxdKC/EfD3o4a5PDkUHxzMB8GA1UdIwQY
MBaAFCRtXJE0Upl5aMchzKDDzghHxcfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkcxY2tUUlNtWGxveHlITW9NUE9DRWZGeDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mMGNhNTEtMzYxOS00MjVkLTg4YzUt
YzUwMTgzY2U0MmUzLzEvQXZWV3ZLUEYwb0w4UjhQZWpocms4T1JRZkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mMGNhNTEtMzYxOS00MjVkLTg4YzUtYzUwMTgzY2U0MmUz
LzEvSkcxY2tUUlNtWGxveHlITW9NUE9DRWZGeDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqETwB
AwUCKhE8ADANBgkqhkiG9w0BAQsFAAOCAQEAVJycqtDSYIUja6DJ7rUPBXQl+bad
mWAC4ZnJQ9Nr05LsfaKAl6C35Z7W4llSqSCe3fFsqd3MQMtWj+NPFV99UAyZXvas
Qs5DZGPvztMvK1gOJPoQwp/n48goMj3nKklhd9mfktVs/xYg6daek5lLgvt+hs3O
d0zmCjgmH14sF64aN2mJ7Lcz6lDR3Fp+Gg8/Mu/G6mtLiBg+BeSCmuQaj+BaP9WY
KGO9qpYtRifRJygxB9GNVA2MBV1BgfI1WpH0xynjzUVBiiErv37fJpXTVBJtCbOL
9g8wHwK5TaKjZhZ9gzoK40KiSilUYDOS3ridEom0w0NAWkKwBQ4GNX0BJg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:39:15 2025 by rpki-client