Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/2Gldca8sWdtB0ZLqY9JZU7-jMpg.roa
File: 2Gldca8sWdtB0ZLqY9JZU7-jMpg.roa (raw, json)
Hash identifier: kN+SRpx2c3+ncXH1nwvlYikjyBwTekuHLZIKJuoagkc=
Subject key identifier: D8:69:5D:71:AF:2C:59:DB:41:D1:92:EA:63:D2:59:53:BF:A3:32:98
Certificate issuer: /CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Certificate serial: 0DD3A669
Authority key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/2Gldca8sWdtB0ZLqY9JZU7-jMpg.roa
Signing time: Thu 14 Apr 2022 09:30:32 +0000
ROA not before: Thu 14 Apr 2022 09:30:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 162.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231974505 (0xdd3a669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Validity
Not Before: Apr 14 09:30:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8695d71af2c59db41d192ea63d25953bfa33298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:c7:60:92:60:bc:bd:8c:4d:41:7e:c9:cc:
38:5f:14:2d:33:92:08:c2:ff:76:ec:2a:24:fb:98:
47:72:08:9d:a4:54:d8:38:3f:63:ac:c9:2b:9f:94:
f0:97:1e:60:38:e6:9c:67:81:dc:8b:41:31:56:2d:
e8:cb:9a:6f:cd:00:8e:57:97:39:79:70:92:d8:a2:
1a:09:87:b4:f9:d1:d5:ba:d7:fa:75:b8:fc:d2:f3:
d7:c8:d8:1b:b3:5f:3d:73:32:1a:e1:e2:ea:56:54:
0f:7d:41:b4:ae:2d:54:c0:db:17:79:4a:76:29:f0:
a5:20:f1:e6:dc:63:d0:d7:bc:fc:c7:e0:ab:fb:98:
cf:d3:22:2b:31:83:d0:eb:2e:33:f1:d1:b5:49:b2:
f2:64:fa:4d:88:1d:4d:9b:ea:b6:5b:f8:d3:ab:c6:
a5:21:ae:92:10:67:08:42:25:c7:b0:40:92:0c:34:
6f:aa:b9:af:8d:5b:a2:c8:c5:a5:0e:fd:98:a8:c9:
bd:b4:f5:05:f0:01:b4:f0:9a:ee:d8:11:7f:01:fa:
b9:77:31:a5:ac:ff:48:b7:a4:a3:6a:ec:48:28:77:
54:b2:23:d7:38:96:27:07:68:b5:ed:5f:3d:6f:fa:
da:db:c2:13:ea:59:63:b4:35:29:44:25:8c:b8:07:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:5D:71:AF:2C:59:DB:41:D1:92:EA:63:D2:59:53:BF:A3:32:98
X509v3 Authority Key Identifier:
keyid:21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/2Gldca8sWdtB0ZLqY9JZU7-jMpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:62:c0:63:f3:c8:6e:a5:2c:12:14:49:2b:27:e1:de:d6:28:
34:3a:33:16:87:a9:2f:e9:d7:8a:88:bc:90:6b:a3:6f:d8:6e:
82:56:07:f3:55:e0:b8:b1:9c:3e:e6:68:3e:fd:39:f1:0b:48:
35:33:3e:5c:8d:20:65:9e:94:14:16:68:c6:d7:32:ce:e4:df:
cb:f6:58:07:78:dc:c6:31:e2:02:3b:ec:78:99:21:ee:f8:95:
98:34:ac:50:df:77:b1:3f:83:7c:30:7d:15:8c:34:93:71:24:
43:b6:a8:f1:4d:a5:a9:47:ca:14:5e:45:2a:b0:5e:24:44:38:
48:0c:ce:59:b5:6d:d7:d8:50:9c:3f:42:d1:3b:b8:69:0f:21:
b0:e8:18:b2:af:1b:ea:55:37:01:53:02:94:d5:ea:cf:9a:f3:
6d:b0:c1:a6:c3:e7:c8:70:86:71:3a:17:fe:94:13:9a:24:ea:
a4:04:35:cf:b8:86:68:32:02:12:bd:e3:c7:b8:69:2b:3e:14:
69:2c:93:e0:99:35:9f:84:ef:54:66:d9:5f:c1:d2:36:0c:df:
09:91:d1:db:49:3a:20:f7:a5:bc:57:04:cc:51:19:dd:e8:60:
02:9a:b3:68:67:67:b7:97:b1:c3:78:1a:fd:99:d8:66:4e:5a:
b7:4e:6c:8f
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEDdOmaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTNmMjFkMTU1MWQyNzc1ZTdiMDY0MzgyYjgxMjJhZDRmYzU4NWY3MB4XDTIyMDQx
NDA5MzAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg2OTVkNzFhZjJj
NTlkYjQxZDE5MmVhNjNkMjU5NTNiZmEzMzI5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvux2CSYLy9jE1BfsnMOF8ULTOSCML/duwqJPuYR3IInaRU
2Dg/Y6zJK5+U8JceYDjmnGeB3ItBMVYt6Muab80AjleXOXlwktiiGgmHtPnR1brX
+nW4/NLz18jYG7NfPXMyGuHi6lZUD31BtK4tVMDbF3lKdinwpSDx5txj0Ne8/Mfg
q/uYz9MiKzGD0OsuM/HRtUmy8mT6TYgdTZvqtlv406vGpSGukhBnCEIlx7BAkgw0
b6q5r41bosjFpQ79mKjJvbT1BfABtPCa7tgRfwH6uXcxpaz/SLeko2rsSCh3VLIj
1ziWJwdote1fPW/62tvCE+pZY7Q1KUQljLgHBwMCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBTYaV1xryxZ20HRkupj0llTv6MymDAfBgNVHSMEGDAWgBQhPyHRVR0ndeew
ZDgrgSKtT8WF9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUOGgwVlVkSjNYbnNHUTRLNEVpclVfRmhmYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvOGEwZGI4LTZhZDktNDhjYy05ODcxLWQwYjdlZWRlYjdlOS8x
LzJHbGRjYThzV2R0QjBaTHFZOUpaVTctak1wZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
OGEwZGI4LTZhZDktNDhjYy05ODcxLWQwYjdlZWRlYjdlOS8xL0lUOGgwVlVkSjNY
bnNHUTRLNEVpclVfRmhmYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKImMA0GCSqGSIb3DQEBCwUAA4IB
AQBDYsBj88hupSwSFEkrJ+He1ig0OjMWh6kv6deKiLyQa6Nv2G6CVgfzVeC4sZw+
5mg+/TnxC0g1Mz5cjSBlnpQUFmjG1zLO5N/L9lgHeNzGMeICO+x4mSHu+JWYNKxQ
33exP4N8MH0VjDSTcSRDtqjxTaWpR8oUXkUqsF4kRDhIDM5ZtW3X2FCcP0LRO7hp
DyGw6BiyrxvqVTcBUwKU1erPmvNtsMGmw+fIcIZxOhf+lBOaJOqkBDXPuIZoMgIS
vePHuGkrPhRpLJPgmTWfhO9UZtlfwdI2DN8JkdHbSTog96W8VwTMURnd6GACmrNo
Z2e3l7HDeBr9mdhmTlq3TmyP
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:56 2025 by rpki-client