Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/Ctg3RieOiXt6FD2T3kMaObuBzAA.roa
File: Ctg3RieOiXt6FD2T3kMaObuBzAA.roa (raw, json)
Hash identifier: PWO4Z5hasyRb0a5T/HkylhTzmpRwBkC9Dj02QNDxqs0=
Subject key identifier: 0A:D8:37:46:27:8E:89:7B:7A:14:3D:93:DE:43:1A:39:BB:81:CC:00
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 01856D9D04162C1009B17FB647D301EC66F5
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/Ctg3RieOiXt6FD2T3kMaObuBzAA.roa
Signing time: Sun 01 Jan 2023 13:54:44 +0000
ROA not before: Sun 01 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:04:16:2c:10:09:b1:7f:b6:47:d3:01:ec:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Jan 1 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ad83746278e897b7a143d93de431a39bb81cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:bb:2d:a9:15:e1:88:7b:a1:96:ff:5d:84:
fa:55:27:23:e7:ea:0d:69:df:15:89:67:3d:bc:23:
75:5d:f5:42:30:50:b9:de:79:e9:d7:62:98:38:7f:
20:0c:1f:74:15:3c:48:7e:b4:54:97:78:b0:8b:f6:
f6:e6:61:06:75:67:ea:0e:88:54:6f:6e:47:3d:6b:
8b:9e:df:a8:81:ad:f0:26:d0:f8:59:0f:f3:10:a6:
d8:70:fa:01:a1:05:6f:37:05:8a:f5:44:03:2a:4d:
69:ac:29:c0:23:82:f9:d4:d2:f6:e5:35:3d:82:d2:
a7:f2:62:a2:e0:26:cf:9c:09:b2:1c:66:ae:4b:5a:
9c:f8:58:ff:ea:4b:93:b4:86:74:67:a6:93:be:96:
cf:57:01:d4:dd:11:cd:31:ec:df:b9:fa:65:e7:3b:
2b:cf:83:b3:03:08:9f:a6:e6:db:20:2c:ea:cf:bb:
ff:86:ce:2c:12:96:47:63:90:25:3c:98:36:01:7b:
1d:f2:dc:9b:e4:71:0f:c9:61:07:90:78:7a:f9:7c:
8b:a3:50:22:b4:4e:f2:68:67:60:c1:c3:50:04:bd:
d4:38:06:a6:e6:43:87:36:f0:33:a9:eb:17:c8:53:
06:18:ea:71:19:43:e1:3b:f6:ed:63:6f:6d:d6:dd:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:37:46:27:8E:89:7B:7A:14:3D:93:DE:43:1A:39:BB:81:CC:00
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/Ctg3RieOiXt6FD2T3kMaObuBzAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:240::/29
Signature Algorithm: sha256WithRSAEncryption
29:29:f8:e7:6f:2e:e7:40:9e:05:f9:48:7b:ed:1c:35:3f:2b:
27:91:43:92:06:a5:de:19:2a:ea:26:e3:a3:f4:ff:c5:8a:c4:
f2:dd:04:09:51:b2:f8:b3:d1:b1:da:4d:a4:92:8c:95:4e:c3:
0e:b0:d5:e6:6c:e3:98:df:fc:45:52:ed:5b:0d:c2:01:97:0b:
36:7d:2c:38:94:98:3b:cf:28:a1:12:33:37:7f:7b:5f:0e:fd:
cb:e6:9a:33:67:df:a3:c9:bf:e9:f2:b8:de:b3:76:84:1e:a3:
b9:63:f1:c7:98:b5:60:2e:98:53:ab:df:9f:c6:bb:a2:99:6d:
de:29:ea:99:85:96:9b:ee:b5:dc:5a:3b:b7:ed:cc:78:02:02:
ae:a7:9a:eb:b3:b0:2e:bb:a6:c0:a9:3c:d0:7e:63:e1:b9:2a:
66:8f:af:50:62:95:84:6a:e5:e6:66:b0:48:56:0e:56:c7:de:
ef:02:15:5e:63:0e:23:82:98:7e:34:e5:7d:d7:95:c3:12:61:
5e:1d:db:2f:b1:45:5a:ed:66:b9:95:4a:4c:40:7b:36:6d:e0:
77:3c:ce:b4:32:0c:2d:b0:64:3a:64:dd:86:d8:8e:0f:09:ac:
57:a7:fb:16:4e:e5:c4:5a:d0:9d:4a:dc:5d:b2:7c:7d:f2:76:
ff:cb:fd:9a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtnQQWLBAJsX+2R9MB7Gb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDYwNmVkZGJjZWM3YTU3MjExOTQxYTY3Y2M3MjliNDI5
MTVjNWUwHhcNMjMwMTAxMTM1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWQ4Mzc0NjI3OGU4OTdiN2ExNDNkOTNkZTQzMWEzOWJiODFjYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk+7LakV4Yh7oZb/XYT6VScj5+oN
ad8ViWc9vCN1XfVCMFC53nnp12KYOH8gDB90FTxIfrRUl3iwi/b25mEGdWfqDohU
b25HPWuLnt+oga3wJtD4WQ/zEKbYcPoBoQVvNwWK9UQDKk1prCnAI4L51NL25TU9
gtKn8mKi4CbPnAmyHGauS1qc+Fj/6kuTtIZ0Z6aTvpbPVwHU3RHNMezfufpl5zsr
z4OzAwifpubbICzqz7v/hs4sEpZHY5AlPJg2AXsd8tyb5HEPyWEHkHh6+XyLo1Ai
tE7yaGdgwcNQBL3UOAam5kOHNvAzqesXyFMGGOpxGUPhO/btY29t1t3tywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFArYN0Ynjol7ehQ9k95DGjm7gcwAMB8GA1UdIwQY
MBaAFHIGBu3bzselchGUGmfMcptCkVxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUt
OTlmNTQ5MWM0NDQ3LzEvQ3RnM1JpZU9pWHQ2RkQyVDNrTWFPYnVCekFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUtOTlmNTQ5MWM0NDQ3
LzEvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhICQDAN
BgkqhkiG9w0BAQsFAAOCAQEAKSn4528u50CeBflIe+0cNT8rJ5FDkgal3hkq6ibj
o/T/xYrE8t0ECVGy+LPRsdpNpJKMlU7DDrDV5mzjmN/8RVLtWw3CAZcLNn0sOJSY
O88ooRIzN397Xw79y+aaM2ffo8m/6fK43rN2hB6juWPxx5i1YC6YU6vfn8a7oplt
3inqmYWWm+613Fo7t+3MeAICrqea67OwLrumwKk80H5j4bkqZo+vUGKVhGrl5maw
SFYOVsfe7wIVXmMOI4KYfjTlfdeVwxJhXh3bL7FFWu1muZVKTEB7Nm3gdzzOtDIM
LbBkOmTdhtiODwmsV6f7Fk7lxFrQnUrcXbJ8ffJ2/8v9mg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:32:57 2025 by rpki-client