Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa
File: DYb7doxSFvzrxw8ry4eHbeIL2eY.roa (raw, json)
Hash identifier: TIwgJnI6AtSdS/eXtUK8/knp0L2eGzGZQSBICrh5nhc=
Subject key identifier: 0D:86:FB:76:8C:52:16:FC:EB:C7:0F:2B:CB:87:87:6D:E2:0B:D9:E6
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 0186E438856A683EE790BC239C9DA204C89D
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa
Signing time: Wed 15 Mar 2023 07:42:34 +0000
ROA not before: Wed 15 Mar 2023 07:42:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:3706::/32 maxlen: 32
2a09:3703::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:38:85:6a:68:3e:e7:90:bc:23:9c:9d:a2:04:c8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Mar 15 07:42:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d86fb768c5216fcebc70f2bcb87876de20bd9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:c0:b7:14:f7:c0:74:44:0d:a8:66:59:55:
61:d6:67:96:0c:d2:e8:45:16:da:0e:4b:a3:0a:de:
13:49:d6:6c:86:66:2a:2b:cd:ca:a5:71:c5:ae:c9:
7e:3f:67:05:41:ca:45:e9:a4:79:1a:30:af:29:d8:
74:cc:87:32:ce:2a:8c:1c:5e:30:fa:40:1a:52:ee:
b4:80:02:9c:51:44:e2:f8:02:3b:dc:66:b3:9d:9e:
c1:16:ba:b1:14:1b:d5:b5:75:c6:9a:f9:e2:69:89:
3c:c2:93:94:1f:ab:30:01:71:5d:e1:6e:92:a8:44:
e0:71:91:5f:b5:65:10:25:cb:a7:79:81:10:af:8b:
77:51:17:df:72:42:59:cc:48:7d:ad:d9:db:3a:70:
05:c1:00:98:f8:61:19:b2:09:66:da:ce:44:4e:6e:
68:ab:c0:28:28:00:29:12:aa:d3:da:79:cd:86:da:
09:1e:14:4b:cc:93:bb:91:c5:fe:3a:ec:1f:2e:09:
f5:0e:11:ce:97:88:02:09:ae:44:b1:61:09:62:b3:
d4:5a:7f:b4:02:80:6d:d5:a8:07:0a:f7:d6:9c:06:
e0:ff:a3:9d:4b:01:d3:1e:c4:80:f0:10:96:86:5c:
09:04:55:35:1f:88:28:b5:4b:df:1f:34:e2:82:d0:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:FB:76:8C:52:16:FC:EB:C7:0F:2B:CB:87:87:6D:E2:0B:D9:E6
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/DYb7doxSFvzrxw8ry4eHbeIL2eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3703::/32
2a09:3706::/32
Signature Algorithm: sha256WithRSAEncryption
4d:1e:d6:da:54:36:fb:8e:50:9d:83:8f:97:16:5a:11:8e:e0:
2f:93:5f:2b:57:23:c3:72:40:f4:23:f3:c8:83:2c:03:48:ff:
53:80:46:5f:b7:a4:58:fa:f0:e3:1a:5a:95:ea:44:94:24:94:
6e:4a:07:dc:f9:14:85:41:1d:1c:c4:6f:0d:98:45:c1:0b:aa:
b4:72:a6:f2:fc:84:4d:47:81:c3:d7:48:98:be:a2:20:ab:b1:
c6:d9:fd:1e:ae:76:7a:85:f5:e3:33:aa:23:f2:87:f2:33:c9:
7f:9e:9f:f3:c3:0c:4e:b2:1e:02:45:22:11:04:bf:8d:fd:cc:
28:17:fc:bd:42:82:fd:c1:b4:9f:dd:2e:06:af:f7:e0:17:8d:
89:b0:a6:f7:4f:10:68:16:e5:39:18:90:13:e1:eb:51:57:f8:
12:80:99:26:9c:20:00:fc:f6:02:af:5e:1a:aa:3c:63:72:85:
c3:7e:14:d1:1c:75:43:1d:ce:2b:27:cf:85:00:2a:4e:09:cc:
8c:98:48:10:8a:87:b5:94:0e:91:05:d4:e5:9a:33:bb:d8:1e:
27:5e:3e:1f:e4:32:6c:82:33:3f:93:16:76:94:51:57:7d:33:
03:26:a7:0e:a0:9a:15:c3:21:73:f8:41:15:3b:c2:2c:d3:3c:
8a:1e:2f:01
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYbkOIVqaD7nkLwjnJ2iBMidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjMwMzE1MDc0MjM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDg2ZmI3NjhjNTIxNmZjZWJjNzBmMmJjYjg3ODc2ZGUyMGJkOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBPAtxT3wHREDahmWVVh1meWDNLo
RRbaDkujCt4TSdZshmYqK83KpXHFrsl+P2cFQcpF6aR5GjCvKdh0zIcyziqMHF4w
+kAaUu60gAKcUUTi+AI73GaznZ7BFrqxFBvVtXXGmvniaYk8wpOUH6swAXFd4W6S
qETgcZFftWUQJcuneYEQr4t3URffckJZzEh9rdnbOnAFwQCY+GEZsglm2s5ETm5o
q8AoKAApEqrT2nnNhtoJHhRLzJO7kcX+OuwfLgn1DhHOl4gCCa5EsWEJYrPUWn+0
AoBt1agHCvfWnAbg/6OdSwHTHsSA8BCWhlwJBFU1H4gotUvfHzTigtA0zQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA2G+3aMUhb868cPK8uHh23iC9nmMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvRFliN2RveFNGdnpyeHc4cnk0ZUhiZUlMMmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgk3AwMF
ACoJNwYwDQYJKoZIhvcNAQELBQADggEBAE0e1tpUNvuOUJ2Dj5cWWhGO4C+TXytX
I8NyQPQj88iDLANI/1OARl+3pFj68OMaWpXqRJQklG5KB9z5FIVBHRzEbw2YRcEL
qrRypvL8hE1HgcPXSJi+oiCrscbZ/R6udnqF9eMzqiPyh/IzyX+en/PDDE6yHgJF
IhEEv439zCgX/L1Cgv3BtJ/dLgav9+AXjYmwpvdPEGgW5TkYkBPh61FX+BKAmSac
IAD89gKvXhqqPGNyhcN+FNEcdUMdzisnz4UAKk4JzIyYSBCKh7WUDpEF1OWaM7vY
HidePh/kMmyCMz+TFnaUUVd9MwMmpw6gmhXDIXP4QRU7wizTPIoeLwE=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:23 2025 by rpki-client