Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/dMh53W0K_UKG2ojvJaWdQ2CxE7I.roa
File: dMh53W0K_UKG2ojvJaWdQ2CxE7I.roa (raw, json)
Hash identifier: AXmHOfOp8tEiwjKGhc3dACeSXEg7Ug3GQHufKnqKh8w=
Subject key identifier: 74:C8:79:DD:6D:0A:FD:42:86:DA:88:EF:25:A5:9D:43:60:B1:13:B2
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01849B9122CA1DF47629E658D0B048B6EF81
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/dMh53W0K_UKG2ojvJaWdQ2CxE7I.roa
Signing time: Mon 21 Nov 2022 19:01:30 +0000
ROA not before: Mon 21 Nov 2022 19:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:3706::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:91:22:ca:1d:f4:76:29:e6:58:d0:b0:48:b6:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Nov 21 19:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74c879dd6d0afd4286da88ef25a59d4360b113b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:ca:c8:bb:bf:f4:cb:09:1f:a9:75:7a:36:
67:55:54:2f:56:d9:71:6c:81:b7:b7:27:f3:ae:87:
12:24:5d:89:a7:91:d3:4c:51:86:1b:9e:5c:76:ff:
3d:77:21:ec:b9:bd:1e:8b:22:62:99:ad:29:89:89:
4e:7c:26:27:a4:93:ab:7d:b5:07:f5:ed:9f:36:9d:
a6:7f:1b:ca:20:3a:89:f0:ba:f8:17:fe:84:de:0d:
c7:84:1b:08:f5:23:cf:ed:85:cb:cf:0f:a2:73:20:
50:6f:be:55:e9:b0:0c:84:ff:23:de:b3:bc:f3:17:
8e:7b:b8:66:73:82:87:cc:a6:53:f4:69:6b:db:59:
eb:e1:9d:05:78:b9:80:03:39:f9:32:19:e9:e6:2c:
a1:08:d7:e1:3e:af:97:7b:17:70:8f:1b:ab:99:86:
b1:1d:7b:ad:eb:e6:48:ff:92:7c:db:10:73:d7:14:
67:46:c5:19:74:5d:0a:66:d8:ea:6b:04:80:f8:59:
78:77:a6:77:b4:2a:94:be:c7:e1:a3:6a:f9:eb:7e:
bd:6e:e5:6c:c7:3f:9d:5c:f6:8a:05:3f:10:aa:dc:
2c:3d:ec:a3:46:c5:cd:a8:9e:89:cd:eb:51:48:01:
49:4f:d1:be:31:4e:75:76:44:97:20:3d:f4:6b:96:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:79:DD:6D:0A:FD:42:86:DA:88:EF:25:A5:9D:43:60:B1:13:B2
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/dMh53W0K_UKG2ojvJaWdQ2CxE7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3706::/32
Signature Algorithm: sha256WithRSAEncryption
7f:9a:72:75:4d:1d:e4:65:e1:da:b8:59:b2:1a:c1:61:02:90:
3e:6b:1f:07:42:a3:38:f2:8d:95:43:d0:57:28:3c:af:1f:06:
15:f7:1d:39:df:f3:35:30:2d:28:bb:6b:57:4a:c1:8e:9b:a3:
d7:b9:73:05:7d:68:60:74:23:89:b9:75:2d:e9:fc:cb:4d:a6:
a6:7d:96:12:8b:1c:5c:4c:bf:c1:a3:84:ff:4a:1c:9e:15:a3:
22:2e:f4:65:71:be:fa:9b:83:d2:b7:ce:47:36:96:b6:42:b8:
08:9a:ba:46:e0:37:07:63:ea:58:64:fd:dc:48:f1:6d:23:96:
6e:f0:55:a3:d7:b3:5e:70:8e:83:fd:bf:eb:67:8c:8a:9a:46:
7c:3b:1b:fc:e0:ac:20:07:35:87:16:80:10:77:04:7c:29:5f:
2e:c0:83:ed:e5:d9:fa:fd:ae:55:0d:77:85:3f:71:75:e1:8a:
21:93:59:1e:2d:bd:80:0a:2b:f4:78:da:d1:74:8f:43:ba:6f:
1d:55:17:98:48:45:78:12:8d:d3:de:9c:e8:7a:7f:8a:f4:1d:
5e:95:25:2a:32:ee:49:76:78:a9:09:c3:36:f6:bb:b2:de:f1:
d1:d4:a9:dc:6b:70:d5:f5:55:84:a6:48:5c:45:48:22:a5:d6:
ee:72:ae:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSbkSLKHfR2KeZY0LBItu+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjIxMTIxMTkwMTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGM4NzlkZDZkMGFmZDQyODZkYTg4ZWYyNWE1OWQ0MzYwYjExM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LvKyLu/9MsJH6l1ejZnVVQvVtlx
bIG3tyfzrocSJF2Jp5HTTFGGG55cdv89dyHsub0eiyJima0piYlOfCYnpJOrfbUH
9e2fNp2mfxvKIDqJ8Lr4F/6E3g3HhBsI9SPP7YXLzw+icyBQb75V6bAMhP8j3rO8
8xeOe7hmc4KHzKZT9Glr21nr4Z0FeLmAAzn5Mhnp5iyhCNfhPq+XexdwjxurmYax
HXut6+ZI/5J82xBz1xRnRsUZdF0KZtjqawSA+Fl4d6Z3tCqUvsfho2r56369buVs
xz+dXPaKBT8QqtwsPeyjRsXNqJ6JzetRSAFJT9G+MU51dkSXID30a5ac0QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHTIed1tCv1ChtqI7yWlnUNgsROyMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvZE1oNTNXMEtfVUtHMm9qdkphV2RRMkN4RTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgk3BjAN
BgkqhkiG9w0BAQsFAAOCAQEAf5pydU0d5GXh2rhZshrBYQKQPmsfB0KjOPKNlUPQ
Vyg8rx8GFfcdOd/zNTAtKLtrV0rBjpuj17lzBX1oYHQjibl1Len8y02mpn2WEosc
XEy/waOE/0ocnhWjIi70ZXG++puD0rfORzaWtkK4CJq6RuA3B2PqWGT93EjxbSOW
bvBVo9ezXnCOg/2/62eMippGfDsb/OCsIAc1hxaAEHcEfClfLsCD7eXZ+v2uVQ13
hT9xdeGKIZNZHi29gAor9Hja0XSPQ7pvHVUXmEhFeBKN096c6Hp/ivQdXpUlKjLu
SXZ4qQnDNva7st7x0dSp3Gtw1fVVhKZIXEVIIqXW7nKuBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org