Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/8neLI-ezU85H4pa5K5u4Kk9o5TA.roa
File: 8neLI-ezU85H4pa5K5u4Kk9o5TA.roa (raw, json)
Hash identifier: /3ZtQ6ErJ2RaAMyL4CFSYGnV3o9f1gA32yFx+xFlGR8=
Subject key identifier: F2:77:8B:23:E7:B3:53:CE:47:E2:96:B9:2B:9B:B8:2A:4F:68:E5:30
Certificate issuer: /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial: 01888BD54ED73357367FE402B994D7926E80
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/8neLI-ezU85H4pa5K5u4Kk9o5TA.roa
Signing time: Mon 05 Jun 2023 13:53:12 +0000
ROA not before: Mon 05 Jun 2023 13:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60939
IP address blocks: 2a13:c800::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:d5:4e:d7:33:57:36:7f:e4:02:b9:94:d7:92:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Validity
Not Before: Jun 5 13:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2778b23e7b353ce47e296b92b9bb82a4f68e530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:8d:80:22:d3:0a:35:59:4f:a2:4f:7d:a6:
21:e4:40:a0:50:6c:c0:a3:ec:b7:04:79:d7:31:1d:
db:c7:23:4a:b2:f0:0e:8d:0b:ad:ae:6e:2e:c9:32:
4a:c9:ee:ef:a7:11:07:ca:77:e5:80:3d:7f:af:44:
91:c5:84:8a:3c:f2:63:fe:4b:ca:ee:35:1c:65:26:
c8:4a:33:e5:30:89:60:51:43:88:63:f0:48:28:32:
77:ab:f2:f6:ab:9f:5e:ec:c3:1d:e0:4f:57:7c:19:
e8:e1:64:24:23:e2:2b:24:d6:7b:eb:66:94:8e:0a:
7f:c2:31:7e:01:e6:3a:03:8e:ee:63:f4:52:b9:20:
9e:0c:b7:07:18:9a:80:55:d0:fd:3b:66:e0:d7:2e:
82:3a:a3:e5:ef:5a:43:f4:4a:01:05:a1:b0:e8:9f:
b0:d4:13:37:33:a3:5e:a0:5d:b0:c9:40:bb:49:83:
51:64:bc:a7:e5:82:a3:77:34:06:5a:c0:b6:1a:ae:
8b:9f:1f:0d:8d:9e:84:36:11:7c:34:f1:8c:f5:6e:
42:07:a7:6d:74:b2:85:73:4f:4b:5b:4f:e0:1e:ac:
02:9e:b1:2c:24:e5:c6:e6:60:0a:ce:f4:88:67:e3:
31:b9:da:b3:ab:27:bd:25:f6:43:01:a9:11:16:ba:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:8B:23:E7:B3:53:CE:47:E2:96:B9:2B:9B:B8:2A:4F:68:E5:30
X509v3 Authority Key Identifier:
keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/8neLI-ezU85H4pa5K5u4Kk9o5TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
1a:d2:61:cf:58:df:7b:38:11:f0:40:c8:bd:0f:b0:4f:81:08:
de:17:6d:91:90:96:64:6f:7e:c0:b5:bb:9b:76:11:00:49:00:
bb:b8:b3:08:78:34:0e:30:9a:bf:ec:c0:5d:22:91:d6:a1:3d:
9a:e8:d8:4b:4e:5c:a4:e1:f4:78:f5:21:71:f1:76:59:29:11:
27:ac:f6:6a:c9:4b:f3:51:2c:ac:57:a8:95:95:10:df:c9:0c:
d8:18:07:17:cb:66:c0:03:d3:d5:79:b1:f6:c6:e7:45:cb:3c:
44:5f:b8:e0:d2:b8:d3:88:82:ce:e5:ab:02:74:3e:c2:d0:5d:
38:e4:68:f0:13:a5:c5:4c:71:6d:cc:55:cd:3e:82:01:a3:78:
95:41:d8:fa:70:1f:bc:60:9b:b9:55:80:b0:c0:bd:44:14:00:
37:d6:0a:59:15:ca:f5:76:97:fb:9e:84:83:a1:b4:d3:c1:ae:
4a:12:9c:32:3a:9d:e4:72:f9:55:d8:09:bd:f5:2b:38:7d:bf:
e8:bf:b1:32:f0:ec:47:6b:b7:a5:69:68:63:61:de:9d:61:2c:
6e:17:45:d1:db:4a:91:6a:d7:66:89:04:40:5e:b7:b5:c4:91:
6b:8e:f6:75:73:c3:0b:57:8e:9e:a8:cc:56:47:db:6c:9a:e7:
15:65:7f:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYiL1U7XM1c2f+QCuZTXkm6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODFjMjZlZmQ3NjcxZjI3MmRjNGZlN2Q0M2VjYzk5OGE1
YzBjZjIwHhcNMjMwNjA1MTM1MzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjc3OGIyM2U3YjM1M2NlNDdlMjk2YjkyYjliYjgyYTRmNjhlNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZqNgCLTCjVZT6JPfaYh5ECgUGzA
o+y3BHnXMR3bxyNKsvAOjQutrm4uyTJKye7vpxEHynflgD1/r0SRxYSKPPJj/kvK
7jUcZSbISjPlMIlgUUOIY/BIKDJ3q/L2q59e7MMd4E9XfBno4WQkI+IrJNZ762aU
jgp/wjF+AeY6A47uY/RSuSCeDLcHGJqAVdD9O2bg1y6COqPl71pD9EoBBaGw6J+w
1BM3M6NeoF2wyUC7SYNRZLyn5YKjdzQGWsC2Gq6Lnx8NjZ6ENhF8NPGM9W5CB6dt
dLKFc09LW0/gHqwCnrEsJOXG5mAKzvSIZ+Mxudqzqye9JfZDAakRFrp10QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPJ3iyPns1POR+KWuSubuCpPaOUwMB8GA1UdIwQY
MBaAFAiBwm79dnHyctxP59Q+zJmKXAzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lIQ2J2MTJjZkp5M0VfbjFEN01tWXBjRFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82NDVmYjYtOGVkZi00YTc1LWJiYzEt
YWUxM2VlZjRmMTJlLzEvOG5lTEktZXpVODVINHBhNUs1dTRLazlvNVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82NDVmYjYtOGVkZi00YTc1LWJiYzEtYWUxM2VlZjRmMTJl
LzEvQ0lIQ2J2MTJjZkp5M0VfbjFEN01tWXBjRFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPIADAN
BgkqhkiG9w0BAQsFAAOCAQEAGtJhz1jfezgR8EDIvQ+wT4EI3hdtkZCWZG9+wLW7
m3YRAEkAu7izCHg0DjCav+zAXSKR1qE9mujYS05cpOH0ePUhcfF2WSkRJ6z2aslL
81EsrFeolZUQ38kM2BgHF8tmwAPT1Xmx9sbnRcs8RF+44NK404iCzuWrAnQ+wtBd
OORo8BOlxUxxbcxVzT6CAaN4lUHY+nAfvGCbuVWAsMC9RBQAN9YKWRXK9XaX+56E
g6G008GuShKcMjqd5HL5VdgJvfUrOH2/6L+xMvDsR2u3pWloY2HenWEsbhdF0dtK
kWrXZokEQF63tcSRa472dXPDC1eOnqjMVkfbbJrnFWV/gQ==
-----END CERTIFICATE-----
Generated at Thu Aug 17 07:39:11 2023 by rpki-client on console-ams.rpki-client.org