Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/cFdiN4_vRz3wV5p9vA_VtgI1YG4.roa
File: cFdiN4_vRz3wV5p9vA_VtgI1YG4.roa (raw, json)
Hash identifier: lc5T0sIIUu3Uv+MPC3AscA0wCzjrS5HeVB2g6IxGbTk=
Subject key identifier: 70:57:62:37:8F:EF:47:3D:F0:57:9A:7D:BC:0F:D5:B6:02:35:60:6E
Certificate issuer: /CN=4ca8f56acf6c6ebb79eaac17a774158b8a435634
Certificate serial: 018079CB
Authority key identifier: 4C:A8:F5:6A:CF:6C:6E:BB:79:EA:AC:17:A7:74:15:8B:8A:43:56:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKj1as9sbrt56qwXp3QVi4pDVjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/cFdiN4_vRz3wV5p9vA_VtgI1YG4.roa
Signing time: Sat 01 Jan 2022 12:01:21 +0000
ROA not before: Sat 01 Jan 2022 12:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213027
IP address blocks: 2001:678:f78::/48 maxlen: 48
2001:678:f70::/48 maxlen: 48
2001:678:f7c::/48 maxlen: 48
2001:678:f74::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25197003 (0x18079cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca8f56acf6c6ebb79eaac17a774158b8a435634
Validity
Not Before: Jan 1 12:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=705762378fef473df0579a7dbc0fd5b60235606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:06:42:72:3b:4e:23:55:3e:3c:3e:55:ef:
b6:e0:90:09:3b:c6:28:12:28:e6:ce:5f:75:3f:4a:
0b:23:40:fc:12:a3:06:5d:8b:e6:dc:8a:07:ff:f6:
9a:e4:37:a8:02:60:38:be:bc:3d:7f:04:ee:44:c6:
b4:4e:55:6b:8a:7c:76:91:e0:c8:5f:a5:42:96:a3:
0c:2b:e2:76:60:85:5e:95:11:d1:93:6b:23:9a:8f:
d5:a9:2e:54:25:0c:18:0f:12:4e:51:ba:0a:69:9f:
7d:0c:62:02:51:b8:6a:c6:a2:29:85:32:66:31:23:
d2:72:a9:65:19:95:42:40:0e:3a:e1:ce:f4:25:72:
4e:82:0a:91:08:97:18:31:df:9e:64:62:54:63:9c:
fd:1c:1c:c3:d1:66:42:c1:43:40:40:e7:f4:da:6b:
ba:b4:02:2d:25:9e:8b:67:6e:46:60:aa:a1:48:07:
f5:b6:86:56:c1:09:ed:9f:fb:c5:88:e5:de:3a:ad:
74:35:22:42:8f:41:ef:ac:7f:b4:53:e6:26:9b:3e:
dd:cc:7f:72:8d:6f:9b:02:88:9e:3b:19:20:84:2a:
bc:ee:60:1b:a5:cd:25:7d:3f:af:1f:24:63:63:1d:
46:dd:da:07:e8:94:f1:55:4f:ad:1b:3b:3d:2f:60:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:62:37:8F:EF:47:3D:F0:57:9A:7D:BC:0F:D5:B6:02:35:60:6E
X509v3 Authority Key Identifier:
keyid:4C:A8:F5:6A:CF:6C:6E:BB:79:EA:AC:17:A7:74:15:8B:8A:43:56:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKj1as9sbrt56qwXp3QVi4pDVjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/cFdiN4_vRz3wV5p9vA_VtgI1YG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/TKj1as9sbrt56qwXp3QVi4pDVjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f70::/48
2001:678:f74::/48
2001:678:f78::/48
2001:678:f7c::/48
Signature Algorithm: sha256WithRSAEncryption
72:43:5a:18:a0:61:47:e1:9c:aa:b5:5a:65:2b:2c:45:33:d1:
e3:29:73:f5:c5:af:10:6e:fb:6e:15:22:7a:a6:4a:27:48:87:
b8:0e:75:e5:cc:45:76:0b:ac:45:98:b5:3a:1e:1b:c8:2d:62:
cc:29:5d:73:ea:d2:5f:53:b9:72:5c:27:58:ac:b9:c6:be:f2:
c2:e5:f1:ec:24:c6:f0:25:8f:52:e3:33:c2:0c:aa:91:66:e4:
00:b8:0f:97:b3:e8:96:03:dc:3f:6e:fb:3f:d6:c3:0c:4b:e7:
cd:35:0e:42:45:88:d7:32:b1:9d:98:81:28:96:17:86:44:02:
1c:a2:c1:41:4a:a8:f2:6a:60:b0:f5:17:21:68:0b:32:00:e4:
c9:be:01:88:81:d5:00:77:17:63:5f:79:72:87:0b:d3:75:5a:
5d:37:68:96:64:54:4c:17:be:91:c2:7e:91:e4:cb:8e:d7:70:
b7:66:ba:3c:1c:3d:af:68:2a:8c:18:c4:cb:0a:da:44:7d:6e:
1b:f5:af:17:da:d2:8c:6a:50:99:79:fc:ca:27:c4:27:62:79:
99:1c:e6:fe:3c:f8:a4:0d:fb:88:67:40:7f:45:7a:88:c6:21:
c3:0c:fb:bc:0b:5d:fb:21:5a:4a:67:70:de:04:c8:19:a9:5e:
c2:56:01:50
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEAYB5yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2E4ZjU2YWNmNmM2ZWJiNzllYWFjMTdhNzc0MTU4YjhhNDM1NjM0MB4XDTIyMDEw
MTEyMDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA1NzYyMzc4ZmVm
NDczZGYwNTc5YTdkYmMwZmQ1YjYwMjM1NjA2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxdBkJyO04jVT48PlXvtuCQCTvGKBIo5s5fdT9KCyNA/BKj
Bl2L5tyKB//2muQ3qAJgOL68PX8E7kTGtE5Va4p8dpHgyF+lQpajDCvidmCFXpUR
0ZNrI5qP1akuVCUMGA8STlG6CmmffQxiAlG4asaiKYUyZjEj0nKpZRmVQkAOOuHO
9CVyToIKkQiXGDHfnmRiVGOc/Rwcw9FmQsFDQEDn9NprurQCLSWei2duRmCqoUgH
9baGVsEJ7Z/7xYjl3jqtdDUiQo9B76x/tFPmJps+3cx/co1vmwKInjsZIIQqvO5g
G6XNJX0/rx8kY2MdRt3aB+iU8VVPrRs7PS9g/IcCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRwV2I3j+9HPfBXmn28D9W2AjVgbjAfBgNVHSMEGDAWgBRMqPVqz2xuu3nq
rBendBWLikNWNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RLajFhczlzYnJ0NTZxd1hwM1FWaTRwRFZqUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvYjcyYjcxLTM3OTktNDA5Zi05OTY3LWU0Y2ZiMzc3MDZiYS8x
L2NGZGlONF92Unozd1Y1cDl2QV9WdGdJMVlHNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
YjcyYjcxLTM3OTktNDA5Zi05OTY3LWU0Y2ZiMzc3MDZiYS8xL1RLajFhczlzYnJ0
NTZxd1hwM1FWaTRwRFZqUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAIwJAMHACABBngPcAMHACABBngPdAMHACAB
BngPeAMHACABBngPfDANBgkqhkiG9w0BAQsFAAOCAQEAckNaGKBhR+GcqrVaZSss
RTPR4ylz9cWvEG77bhUieqZKJ0iHuA515cxFdgusRZi1Oh4byC1izCldc+rSX1O5
clwnWKy5xr7ywuXx7CTG8CWPUuMzwgyqkWbkALgPl7PolgPcP277P9bDDEvnzTUO
QkWI1zKxnZiBKJYXhkQCHKLBQUqo8mpgsPUXIWgLMgDkyb4BiIHVAHcXY195cocL
03VaXTdolmRUTBe+kcJ+keTLjtdwt2a6PBw9r2gqjBjEywraRH1uG/WvF9rSjGpQ
mXn8yifEJ2J5mRzm/jz4pA37iGdAf0V6iMYhwwz7vAtd+yFaSmdw3gTIGalewlYB
UA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:39 2025 by rpki-client