Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/207549-df37-4155-9858-c46129360f8b/1/U9eoizdS0Bgqvwkl1WAk-WggoVw.roa
File: U9eoizdS0Bgqvwkl1WAk-WggoVw.roa (raw, json)
Hash identifier: HFeLmXhPyaHOQp7iYrU3eBkfCqUA2SEJazO9ts2qo6U=
Subject key identifier: 53:D7:A8:8B:37:52:D0:18:2A:BF:09:25:D5:60:24:F9:68:20:A1:5C
Certificate issuer: /CN=1a52e35eb8f8abafc39a9c723b46b6d3e7b21807
Certificate serial: 095E633A
Authority key identifier: 1A:52:E3:5E:B8:F8:AB:AF:C3:9A:9C:72:3B:46:B6:D3:E7:B2:18:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlLjXrj4q6_DmpxyO0a20-eyGAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/207549-df37-4155-9858-c46129360f8b/1/U9eoizdS0Bgqvwkl1WAk-WggoVw.roa
Signing time: Sat 01 Jan 2022 15:00:06 +0000
ROA not before: Sat 01 Jan 2022 15:00:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210283
IP address blocks: 2001:678:934::/48 maxlen: 48
2001:678:92c::/48 maxlen: 48
2001:678:924::/48 maxlen: 48
2001:67c:6d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157180730 (0x95e633a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a52e35eb8f8abafc39a9c723b46b6d3e7b21807
Validity
Not Before: Jan 1 15:00:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53d7a88b3752d0182abf0925d56024f96820a15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:c2:42:12:0c:6b:59:63:00:48:cd:6a:2b:
a2:fb:8e:d3:c4:80:ec:ee:2c:39:06:52:4d:07:78:
ae:1b:da:7e:1c:a9:b8:51:9e:95:9c:39:40:2e:e7:
fe:dc:8c:e2:de:a4:58:86:0c:29:c0:e4:d3:4e:09:
06:8d:94:f2:12:79:a0:3d:b7:64:16:f4:06:bf:d8:
e1:64:85:ed:3a:dc:8b:1f:a5:f1:64:e0:8c:76:84:
7c:68:92:17:56:cd:64:61:d3:d9:a9:32:07:fe:dd:
64:02:1a:7e:cd:79:0c:a0:63:6b:8a:a1:0e:38:4a:
b0:dc:3a:3b:8b:26:3d:75:f2:1c:01:95:23:69:47:
a7:f5:bf:e5:03:23:38:fe:2f:59:14:8f:5b:e9:e8:
74:09:32:a6:82:47:06:d6:ae:e3:df:fd:9c:10:d4:
47:97:bc:5b:91:3b:2c:55:1e:ab:59:0d:10:d5:94:
ce:c1:02:a1:22:ff:53:e7:d7:ac:cc:73:0d:33:28:
b8:08:db:ce:be:dc:7e:24:68:db:a9:bf:42:24:c9:
c5:2d:f4:89:61:f0:03:aa:a2:7a:74:dc:36:34:63:
8a:e0:64:fe:ef:61:17:29:9f:5c:b0:e4:db:22:45:
3a:55:41:61:02:03:c3:19:e4:85:56:6c:08:6a:67:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:A8:8B:37:52:D0:18:2A:BF:09:25:D5:60:24:F9:68:20:A1:5C
X509v3 Authority Key Identifier:
keyid:1A:52:E3:5E:B8:F8:AB:AF:C3:9A:9C:72:3B:46:B6:D3:E7:B2:18:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlLjXrj4q6_DmpxyO0a20-eyGAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/207549-df37-4155-9858-c46129360f8b/1/U9eoizdS0Bgqvwkl1WAk-WggoVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/207549-df37-4155-9858-c46129360f8b/1/GlLjXrj4q6_DmpxyO0a20-eyGAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:924::/48
2001:678:92c::/48
2001:678:934::/48
2001:67c:6d0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:30:93:db:4c:83:90:01:9c:75:a9:59:f6:6b:45:0c:c4:aa:
71:d7:b4:f8:af:cb:ce:c1:cd:f0:69:68:99:b8:91:23:b6:65:
25:1b:de:1f:f3:ad:f0:93:d1:08:4c:20:6b:d8:32:df:41:ad:
f4:88:16:64:c9:5f:ab:a8:c9:d9:e6:cc:2f:af:4b:a8:6a:ef:
ed:e1:32:11:6a:28:1d:79:92:fd:f1:58:84:ef:fc:34:6a:c1:
f4:20:fb:0d:1a:da:7e:42:b6:41:72:8b:ef:7a:b8:81:8a:01:
35:83:10:97:08:8b:0b:f9:99:e0:3f:8e:0b:9c:32:af:b2:bb:
58:26:b7:50:11:06:b3:f3:c6:00:98:4f:b7:06:66:f8:ce:af:
7c:a7:bd:db:64:54:00:5f:e9:2a:85:79:96:e7:cd:c2:57:cf:
5f:f5:a2:b5:78:f7:c0:23:64:3c:76:73:ab:b8:89:0f:b2:2b:
bf:e0:b9:4f:78:55:5c:c0:5f:b7:f6:34:30:93:b4:bd:58:db:
e6:99:c6:b2:ca:dc:44:40:d9:55:1d:ef:29:fb:05:67:f2:43:
55:b0:bc:d5:e5:37:f3:f9:e3:37:cb:9b:c9:a6:df:7b:b1:54:
08:54:46:ca:f0:b8:67:f1:95:62:e6:0c:e4:82:b5:74:92:6c:
a5:8c:e6:ba
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIECV5jOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTUyZTM1ZWI4ZjhhYmFmYzM5YTljNzIzYjQ2YjZkM2U3YjIxODA3MB4XDTIyMDEw
MTE1MDAwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTNkN2E4OGIzNzUy
ZDAxODJhYmYwOTI1ZDU2MDI0Zjk2ODIwYTE1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANg8wkISDGtZYwBIzWorovuO08SA7O4sOQZSTQd4rhvafhyp
uFGelZw5QC7n/tyM4t6kWIYMKcDk004JBo2U8hJ5oD23ZBb0Br/Y4WSF7Trcix+l
8WTgjHaEfGiSF1bNZGHT2akyB/7dZAIafs15DKBja4qhDjhKsNw6O4smPXXyHAGV
I2lHp/W/5QMjOP4vWRSPW+nodAkypoJHBtau49/9nBDUR5e8W5E7LFUeq1kNENWU
zsECoSL/U+fXrMxzDTMouAjbzr7cfiRo26m/QiTJxS30iWHwA6qienTcNjRjiuBk
/u9hFymfXLDk2yJFOlVBYQIDwxnkhVZsCGpnZL8CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRT16iLN1LQGCq/CSXVYCT5aCChXDAfBgNVHSMEGDAWgBQaUuNeuPirr8Oa
nHI7RrbT57IYBzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dsTGpYcmo0cTZfRG1weHlPMGEyMC1leUdBYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDYvMjA3NTQ5LWRmMzctNDE1NS05ODU4LWM0NjEyOTM2MGY4Yi8x
L1U5ZW9pemRTMEJncXZ3a2wxV0FrLVdnZ29Wdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYv
MjA3NTQ5LWRmMzctNDE1NS05ODU4LWM0NjEyOTM2MGY4Yi8xL0dsTGpYcmo0cTZf
RG1weHlPMGEyMC1leUdBYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAIwJAMHACABBngJJAMHACABBngJLAMHACAB
BngJNAMHACABBnwG0DANBgkqhkiG9w0BAQsFAAOCAQEAfzCT20yDkAGcdalZ9mtF
DMSqcde0+K/LzsHN8GlombiRI7ZlJRveH/Ot8JPRCEwga9gy30Gt9IgWZMlfq6jJ
2ebML69LqGrv7eEyEWooHXmS/fFYhO/8NGrB9CD7DRrafkK2QXKL73q4gYoBNYMQ
lwiLC/mZ4D+OC5wyr7K7WCa3UBEGs/PGAJhPtwZm+M6vfKe922RUAF/pKoV5lufN
wlfPX/WitXj3wCNkPHZzq7iJD7Irv+C5T3hVXMBft/Y0MJO0vVjb5pnGssrcREDZ
VR3vKfsFZ/JDVbC81eU38/njN8ubyabfe7FUCFRGyvC4Z/GVYuYM5IK1dJJspYzm
ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:39 2024 by rpki-client on console-ams.rpki-client.org