Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/ZHfQSDmJ3-5easPuXqru4MUxmvQ.roa
File: ZHfQSDmJ3-5easPuXqru4MUxmvQ.roa (raw, json)
Hash identifier: Pkerk6wPqAzzKYrSDuJiRU9w5LAUwd5FjkAo1lGMXVQ=
Subject key identifier: 64:77:D0:48:39:89:DF:EE:5E:6A:C3:EE:5E:AA:EE:E0:C5:31:9A:F4
Certificate issuer: /CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Certificate serial: 018571152406224336051D7159D826D3A986
Authority key identifier: CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/ZHfQSDmJ3-5easPuXqru4MUxmvQ.roa
Signing time: Mon 02 Jan 2023 06:04:48 +0000
ROA not before: Mon 02 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:d040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:24:06:22:43:36:05:1d:71:59:d8:26:d3:a9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Validity
Not Before: Jan 2 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6477d0483989dfee5e6ac3ee5eaaeee0c5319af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:4c:8a:16:8e:09:a0:49:da:9a:e9:1f:d7:
92:b2:9b:d1:7b:2c:22:73:0b:93:37:33:39:cf:ed:
99:39:9e:7a:9d:3b:23:91:55:9e:a8:65:d1:ca:e4:
05:88:ba:95:0f:ee:84:af:d9:ff:14:d7:8d:93:21:
77:10:85:90:66:3f:a3:d7:58:72:87:d1:50:c1:79:
33:fb:aa:df:d7:4c:dc:76:f5:9f:c9:78:cb:d5:b6:
eb:a7:a4:a5:fc:9c:1b:51:27:82:6f:57:db:fc:fa:
32:b6:8f:bd:2e:87:1d:b0:2c:57:25:e5:31:98:ae:
03:73:64:93:72:79:44:de:bf:36:70:9f:42:9b:7a:
ff:1f:b6:af:7c:20:42:70:23:69:18:7d:21:d0:c5:
90:9a:14:66:60:6f:fd:ee:0a:be:d7:e9:de:0f:2d:
90:b4:6a:8f:b9:1b:f3:ae:0a:bd:7d:ac:dd:19:47:
28:17:00:ae:30:31:89:ff:c9:45:cb:89:38:69:6b:
c5:63:c2:9f:dc:65:68:82:f6:84:66:52:6d:db:c3:
3d:fd:90:18:2f:07:1b:f0:9d:8c:a7:7c:7e:3d:b1:
7c:ea:9e:e4:e9:5e:4a:4c:9c:c3:99:59:08:52:52:
64:ba:02:74:63:08:c9:b3:28:99:d1:b2:67:9c:7c:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:D0:48:39:89:DF:EE:5E:6A:C3:EE:5E:AA:EE:E0:C5:31:9A:F4
X509v3 Authority Key Identifier:
keyid:CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/ZHfQSDmJ3-5easPuXqru4MUxmvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d040::/29
Signature Algorithm: sha256WithRSAEncryption
1b:56:b0:13:de:81:14:6f:f3:58:8d:62:5e:5e:dc:7c:c5:6e:
d6:2c:24:0b:70:91:48:c1:da:07:f8:25:07:a6:36:83:fd:7d:
be:c2:24:7f:bc:61:53:0f:4b:a5:37:e9:7b:d5:80:be:77:f8:
08:b3:8e:f8:b3:14:b8:1a:6c:f5:ab:cb:a0:fe:fd:b8:fe:d6:
c4:cb:b1:c5:86:df:5e:bd:2b:08:fe:3b:62:fb:57:ea:92:4e:
cb:8e:3b:75:83:85:f5:37:31:90:74:ef:c9:12:9d:2e:a0:67:
53:9b:ec:e5:fe:a0:5f:e9:ce:79:18:be:01:9e:12:20:a2:7f:
dd:bd:a9:29:65:16:c8:2a:60:40:48:32:57:74:45:1b:31:33:
7f:04:88:01:89:5c:ee:8a:df:f0:21:52:ce:aa:ee:1e:f8:1a:
2e:fd:ca:da:69:90:d5:d2:c6:2d:dc:9a:9e:ef:f9:66:21:91:
fe:9e:62:6b:58:62:62:ff:15:1f:4c:e7:d6:33:8c:41:c4:66:
55:13:79:5e:20:93:cc:5e:92:12:d8:f7:04:6a:e4:f0:b7:13:
7f:53:64:e6:d1:e3:94:8c:49:3a:8a:92:d4:9b:5f:05:83:fa:
84:ff:d2:a1:89:1a:a4:d8:58:ee:a7:23:6f:16:61:b1:df:e9:
5f:24:49:cd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxFSQGIkM2BR1xWdgm06mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmIyMThmNmQzY2YwZGIwMDUxY2ExNmExZTUyZDUwYzZj
YjJiMTgwHhcNMjMwMTAyMDYwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDc3ZDA0ODM5ODlkZmVlNWU2YWMzZWU1ZWFhZWVlMGM1MzE5YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1VMihaOCaBJ2prpH9eSspvReywi
cwuTNzM5z+2ZOZ56nTsjkVWeqGXRyuQFiLqVD+6Er9n/FNeNkyF3EIWQZj+j11hy
h9FQwXkz+6rf10zcdvWfyXjL1bbrp6Sl/JwbUSeCb1fb/Poyto+9LocdsCxXJeUx
mK4Dc2STcnlE3r82cJ9Cm3r/H7avfCBCcCNpGH0h0MWQmhRmYG/97gq+1+neDy2Q
tGqPuRvzrgq9fazdGUcoFwCuMDGJ/8lFy4k4aWvFY8Kf3GVogvaEZlJt28M9/ZAY
Lwcb8J2Mp3x+PbF86p7k6V5KTJzDmVkIUlJkugJ0YwjJsyiZ0bJnnHzCqwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGR30Eg5id/uXmrD7l6q7uDFMZr0MB8GA1UdIwQY
MBaAFMtrIY9tPPDbAFHKFqHlLVDGyysYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJzaGoyMDg4TnNBVWNvV29lVXRVTWJMS3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YTNiMWUtMjVmNS00NGFjLWExZmIt
ZDlkMWYxNGE4YjhjLzEvWkhmUVNEbUozLTVlYXNQdVhxcnU0TVV4bXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YTNiMWUtMjVmNS00NGFjLWExZmItZDlkMWYxNGE4Yjhj
LzEveTJzaGoyMDg4TnNBVWNvV29lVXRVTWJMS3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAG1awE96BFG/zWI1iXl7cfMVu1iwkC3CRSMHaB/gl
B6Y2g/19vsIkf7xhUw9LpTfpe9WAvnf4CLOO+LMUuBps9avLoP79uP7WxMuxxYbf
Xr0rCP47YvtX6pJOy447dYOF9TcxkHTvyRKdLqBnU5vs5f6gX+nOeRi+AZ4SIKJ/
3b2pKWUWyCpgQEgyV3RFGzEzfwSIAYlc7orf8CFSzqruHvgaLv3K2mmQ1dLGLdya
nu/5ZiGR/p5ia1hiYv8VH0zn1jOMQcRmVRN5XiCTzF6SEtj3BGrk8LcTf1Nk5tHj
lIxJOoqS1JtfBYP6hP/SoYkapNhY7qcjbxZhsd/pXyRJzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org