Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/sw60zeO-w-oYge7GFXSV6k0RbK0.roa
File: sw60zeO-w-oYge7GFXSV6k0RbK0.roa (raw, json)
Hash identifier: But6OQQgXHC4BwkX087vMfrij8WWQ70gkflr3K3hJ3k=
Subject key identifier: B3:0E:B4:CD:E3:BE:C3:EA:18:81:EE:C6:15:74:95:EA:4D:11:6C:AD
Certificate issuer: /CN=54ee981b1e37c1c49764d92d72344c80793b7fbe
Certificate serial: 04CAFBBC
Authority key identifier: 54:EE:98:1B:1E:37:C1:C4:97:64:D9:2D:72:34:4C:80:79:3B:7F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VO6YGx43wcSXZNktcjRMgHk7f74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/sw60zeO-w-oYge7GFXSV6k0RbK0.roa
Signing time: Sat 01 Jan 2022 01:01:47 +0000
ROA not before: Sat 01 Jan 2022 01:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213020
IP address blocks: 2001:678:dcc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80411580 (0x4cafbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ee981b1e37c1c49764d92d72344c80793b7fbe
Validity
Not Before: Jan 1 01:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b30eb4cde3bec3ea1881eec6157495ea4d116cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:49:a2:ff:9a:15:1b:7a:cd:38:c4:77:c6:
e6:08:be:95:5c:53:8b:a5:04:13:fa:78:87:cd:b3:
72:12:ea:2f:3d:7a:5a:30:ed:2b:fc:df:9b:eb:cd:
56:32:e5:6c:49:96:47:a9:88:6a:17:fa:69:76:bb:
0d:1a:3f:a7:b6:34:a1:1b:21:48:73:8b:12:28:49:
57:41:83:4c:06:91:21:d5:fc:ea:bf:7e:e4:5d:7f:
c3:77:20:64:8e:c8:47:dd:56:e4:a7:88:e2:34:25:
3f:3f:ac:dc:cf:e9:64:7a:6d:34:4f:00:17:b8:02:
9e:05:53:fc:a5:84:84:b2:5c:51:0a:cd:b0:89:fe:
85:2d:74:83:88:7e:e4:21:45:ca:58:bd:0b:28:9b:
7a:72:25:62:db:f7:02:35:0f:4e:ad:de:b1:c8:bf:
f8:30:d3:4d:f5:55:ee:92:22:07:63:cd:f0:dc:d0:
b4:45:9f:c4:4d:73:d1:b4:51:63:cd:c4:ad:3d:32:
88:10:d5:81:42:36:78:e5:c6:05:60:ff:13:73:60:
fd:0b:f1:75:ec:b9:94:79:2f:fd:df:b0:41:b6:de:
3b:e2:c6:95:05:22:82:6a:6a:c1:08:f4:d3:03:da:
c3:7f:7c:fe:d5:09:8c:08:8c:0a:4c:c2:52:c0:d0:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:B4:CD:E3:BE:C3:EA:18:81:EE:C6:15:74:95:EA:4D:11:6C:AD
X509v3 Authority Key Identifier:
keyid:54:EE:98:1B:1E:37:C1:C4:97:64:D9:2D:72:34:4C:80:79:3B:7F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO6YGx43wcSXZNktcjRMgHk7f74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/sw60zeO-w-oYge7GFXSV6k0RbK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/VO6YGx43wcSXZNktcjRMgHk7f74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dcc::/48
Signature Algorithm: sha256WithRSAEncryption
28:3f:37:23:d3:af:cb:87:24:bb:f7:62:fb:68:78:5e:9e:5c:
2f:a7:4d:2f:a4:8b:44:5c:f1:ec:3e:c2:78:26:a8:03:44:07:
b2:00:32:fd:67:53:34:a2:94:8d:e5:c2:2f:75:ef:d8:f5:41:
ff:6a:9d:ad:49:a8:6c:5b:c4:ba:9c:3b:20:a0:cf:b8:0d:54:
2b:64:57:8c:f7:bd:7b:ca:e8:72:57:15:bd:ec:f6:d3:e1:bd:
57:64:e8:a8:97:76:57:a6:c6:b9:50:c1:7f:24:ff:4e:0c:c8:
4e:34:24:60:ae:05:fc:d3:46:d7:1b:7a:6b:8f:f5:25:bf:0f:
25:a4:bc:51:46:2c:00:94:f6:81:1f:ca:61:2d:f7:ce:e0:12:
3c:e9:5e:01:cc:0a:91:c1:77:da:56:47:e4:af:bd:38:fb:5a:
b2:f6:68:3c:c5:4a:84:aa:c7:d6:ed:1e:be:b4:4c:93:23:c9:
7c:8d:a9:5f:30:e5:2c:33:ba:7b:dc:ae:43:1d:2d:99:1a:a8:
8f:7f:55:b1:2d:e0:73:b4:fc:b8:96:95:fb:69:57:e1:cb:7e:
85:49:77:8b:25:37:b4:c8:02:16:b5:b4:f3:d6:65:73:77:ab:
4e:f5:9d:a5:06:6b:b8:1b:1f:e0:b0:6d:38:fb:7e:fe:12:88:
89:65:9c:a2
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBMr7vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGVlOTgxYjFlMzdjMWM0OTc2NGQ5MmQ3MjM0NGM4MDc5M2I3ZmJlMB4XDTIyMDEw
MTAxMDE0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMwZWI0Y2RlM2Jl
YzNlYTE4ODFlZWM2MTU3NDk1ZWE0ZDExNmNhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9mSaL/mhUbes04xHfG5gi+lVxTi6UEE/p4h82zchLqLz16
WjDtK/zfm+vNVjLlbEmWR6mIahf6aXa7DRo/p7Y0oRshSHOLEihJV0GDTAaRIdX8
6r9+5F1/w3cgZI7IR91W5KeI4jQlPz+s3M/pZHptNE8AF7gCngVT/KWEhLJcUQrN
sIn+hS10g4h+5CFFyli9CyibenIlYtv3AjUPTq3esci/+DDTTfVV7pIiB2PN8NzQ
tEWfxE1z0bRRY83ErT0yiBDVgUI2eOXGBWD/E3Ng/Qvxdey5lHkv/d+wQbbeO+LG
lQUigmpqwQj00wPaw398/tUJjAiMCkzCUsDQMF0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSzDrTN477D6hiB7sYVdJXqTRFsrTAfBgNVHSMEGDAWgBRU7pgbHjfBxJdk
2S1yNEyAeTt/vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZPNllHeDQzd2NTWFpOa3RjalJNZ0hrN2Y3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGUvODNhNDIxLWVkOTAtNGJmOS1iODdjLTlhNWRkZWRhMDg1OS8x
L3N3NjB6ZU8tdy1vWWdlN0dGWFNWNmswUmJLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUv
ODNhNDIxLWVkOTAtNGJmOS1iODdjLTlhNWRkZWRhMDg1OS8xL1ZPNllHeDQzd2NT
WFpOa3RjalJNZ0hrN2Y3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngNzDANBgkqhkiG9w0BAQsF
AAOCAQEAKD83I9Ovy4cku/di+2h4Xp5cL6dNL6SLRFzx7D7CeCaoA0QHsgAy/WdT
NKKUjeXCL3Xv2PVB/2qdrUmobFvEupw7IKDPuA1UK2RXjPe9e8roclcVvez20+G9
V2ToqJd2V6bGuVDBfyT/TgzITjQkYK4F/NNG1xt6a4/1Jb8PJaS8UUYsAJT2gR/K
YS33zuASPOleAcwKkcF32lZH5K+9OPtasvZoPMVKhKrH1u0evrRMkyPJfI2pXzDl
LDO6e9yuQx0tmRqoj39VsS3gc7T8uJaV+2lX4ct+hUl3iyU3tMgCFrW089Zlc3er
TvWdpQZruBsf4LBtOPt+/hKIiWWcog==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:05 2025 by rpki-client