Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/dA-COfb9oAbWWYjG4n94tqUmndk.roa
File: dA-COfb9oAbWWYjG4n94tqUmndk.roa (raw, json)
Hash identifier: bQu6DwwG24mPe+FGcx1IdXSGYNMkUz3KHn0AMwrcJpI=
Subject key identifier: 74:0F:82:39:F6:FD:A0:06:D6:59:88:C6:E2:7F:78:B6:A5:26:9D:D9
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 018486AD2FBA6446DC2C3BDEABB6EDAD0AB4
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/dA-COfb9oAbWWYjG4n94tqUmndk.roa
Signing time: Thu 17 Nov 2022 17:40:07 +0000
ROA not before: Thu 17 Nov 2022 17:40:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ad:2f:ba:64:46:dc:2c:3b:de:ab:b6:ed:ad:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Nov 17 17:40:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=740f8239f6fda006d65988c6e27f78b6a5269dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:7a:cd:20:69:b7:83:15:f1:25:5d:01:90:
85:ba:d2:c4:f3:a2:06:ae:e9:ba:cc:57:ab:b9:8c:
8b:0a:7f:8f:c9:4f:51:84:65:b6:fc:ae:f4:af:cd:
c6:8a:1c:7f:0c:d1:b5:11:c4:fc:c8:de:24:af:a8:
4b:e4:37:7c:f7:74:a7:ab:22:6f:47:72:ba:83:cf:
51:6e:bc:9a:d2:3d:42:fa:45:ed:ac:47:0e:04:98:
cb:17:7c:9f:68:cd:8c:9b:01:6e:80:27:70:d7:c0:
db:25:c8:12:18:ca:ef:6c:9e:6d:e4:cc:0f:6d:b3:
71:dd:42:dd:33:e9:c8:08:5c:f9:91:9a:40:db:2c:
1c:5d:c9:c8:8a:e8:1f:5c:b2:15:b8:15:52:05:f5:
ae:3b:80:36:e2:0b:b7:16:67:4c:6c:ca:a6:7e:d8:
9b:22:9e:d4:bb:41:cb:c8:02:7c:30:22:65:0a:19:
71:fe:fb:31:58:7c:f9:67:82:04:c8:bd:ed:26:32:
02:c1:fe:0a:d6:76:3c:cc:00:b6:72:31:fe:58:bd:
7c:0f:dc:0a:f5:09:e0:51:c2:0d:f5:73:e4:b2:0b:
66:5c:8e:b0:76:15:c2:ab:dc:a6:4b:54:73:14:de:
b6:42:60:55:52:0e:37:cc:6d:b8:38:62:58:be:80:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:82:39:F6:FD:A0:06:D6:59:88:C6:E2:7F:78:B6:A5:26:9D:D9
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/dA-COfb9oAbWWYjG4n94tqUmndk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:140::/29
Signature Algorithm: sha256WithRSAEncryption
03:0b:9f:26:6a:65:e6:23:c3:ff:83:4f:2a:0f:79:db:2b:e4:
b9:54:a9:b9:22:2e:7b:7c:2a:08:32:10:46:56:fa:a6:16:bb:
a9:fe:81:a7:51:62:ec:76:85:49:16:52:ad:3a:4e:90:29:b4:
63:0b:e7:9b:69:8d:39:93:eb:26:82:0a:3c:9f:39:36:ca:1a:
5b:45:f4:e8:c3:1a:cc:3c:8f:82:e4:88:92:41:82:35:73:89:
a3:4a:69:4e:45:22:e2:9e:35:6b:d8:8c:45:6f:54:f9:3a:56:
43:bd:85:78:72:da:b8:32:92:d8:fe:99:b8:82:2e:9d:c5:25:
fc:9f:fa:66:80:91:68:85:2c:88:4a:56:8a:f8:06:aa:5a:0d:
96:5b:ba:ee:50:94:f9:b6:d1:d4:87:06:b5:be:87:0a:68:da:
29:57:07:af:da:7e:97:4d:d8:97:44:f4:65:bc:74:f2:05:fb:
33:f0:39:84:7f:88:bc:3f:fb:0f:ca:d3:a8:bb:90:50:5b:0e:
01:4e:a2:f2:76:ac:cd:1d:81:1d:4f:1d:9b:58:53:7d:4a:1b:
fc:1e:ae:33:c0:bf:74:8d:ef:c6:1e:45:0d:67:90:81:20:c8:
35:f7:9a:2f:c3:df:be:e3:60:c5:44:9b:eb:cc:0c:86:79:2c:
55:e6:37:e6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSGrS+6ZEbcLDveq7btrQq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ5ODI4OTI2ZmM2MWM3ZjZiNzdlOWEzZDhmZDAzNmU0
NjM4NDUwHhcNMjIxMTE3MTc0MDA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDBmODIzOWY2ZmRhMDA2ZDY1OTg4YzZlMjdmNzhiNmE1MjY5ZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXx6zSBpt4MV8SVdAZCFutLE86IG
rum6zFeruYyLCn+PyU9RhGW2/K70r83Gihx/DNG1EcT8yN4kr6hL5Dd893SnqyJv
R3K6g89Rbrya0j1C+kXtrEcOBJjLF3yfaM2MmwFugCdw18DbJcgSGMrvbJ5t5MwP
bbNx3ULdM+nICFz5kZpA2ywcXcnIiugfXLIVuBVSBfWuO4A24gu3FmdMbMqmftib
Ip7Uu0HLyAJ8MCJlChlx/vsxWHz5Z4IEyL3tJjICwf4K1nY8zAC2cjH+WL18D9wK
9QngUcIN9XPksgtmXI6wdhXCq9ymS1RzFN62QmBVUg43zG24OGJYvoAOQwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHQPgjn2/aAG1lmIxuJ/eLalJp3ZMB8GA1UdIwQY
MBaAFKLkmCiSb8Ycf2t36aPY/QNuRjhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VTWUtKSnZ4aHhfYTNmcG85ajlBMjVHT0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jZmZlN2ItNjk2Yy00YTE4LThjNDAt
NjQxYTM0OTk1NjViLzEvZEEtQ09mYjlvQWJXV1lqRzRuOTR0cVVtbmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jZmZlN2ItNjk2Yy00YTE4LThjNDAtNjQxYTM0OTk1NjVi
LzEvb3VTWUtKSnZ4aHhfYTNmcG85ajlBMjVHT0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIBQDAN
BgkqhkiG9w0BAQsFAAOCAQEAAwufJmpl5iPD/4NPKg952yvkuVSpuSIue3wqCDIQ
Rlb6pha7qf6Bp1Fi7HaFSRZSrTpOkCm0Ywvnm2mNOZPrJoIKPJ85NsoaW0X06MMa
zDyPguSIkkGCNXOJo0ppTkUi4p41a9iMRW9U+TpWQ72FeHLauDKS2P6ZuIIuncUl
/J/6ZoCRaIUsiEpWivgGqloNllu67lCU+bbR1IcGtb6HCmjaKVcHr9p+l03Yl0T0
Zbx08gX7M/A5hH+IvD/7D8rTqLuQUFsOAU6i8naszR2BHU8dm1hTfUob/B6uM8C/
dI3vxh5FDWeQgSDINfeaL8PfvuNgxUSb68wMhnksVeY35g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:05 2024 by rpki-client on console-ams.rpki-client.org