Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/noYsTyROj-dDEzt4eZKghKJRwNA.roa
File: noYsTyROj-dDEzt4eZKghKJRwNA.roa (raw, json)
Hash identifier: avwHxNb3l8XcJ9U+LEmMq8JZx8EbsRLUsm7w6FvTSE4=
Subject key identifier: 9E:86:2C:4F:24:4E:8F:E7:43:13:3B:78:79:92:A0:84:A2:51:C0:D0
Certificate issuer: /CN=e66cf1f3904620aa773742915add0da8e63501b8
Certificate serial: 018EB4635BCE43BBD1CADDDA6B3BA07D309B
Authority key identifier: E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/noYsTyROj-dDEzt4eZKghKJRwNA.roa
Signing time: Sat 06 Apr 2024 17:09:54 +0000
ROA not before: Sat 06 Apr 2024 17:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a0b:4e00::/29 maxlen: 48
2a0b:4e04::/32 maxlen: 48
2a0b:4e04:3333::/48 maxlen: 48
2a0b:4e04:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:63:5b:ce:43:bb:d1:ca:dd:da:6b:3b:a0:7d:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66cf1f3904620aa773742915add0da8e63501b8
Validity
Not Before: Apr 6 17:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e862c4f244e8fe743133b787992a084a251c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:79:6e:f8:09:00:49:7f:62:a9:b6:1a:97:
cf:1f:18:dd:6a:6c:4e:a8:36:d3:34:68:3e:16:42:
1b:ba:1b:d7:32:5c:3d:df:dd:bd:04:79:9b:35:6e:
e3:b7:ba:ed:e1:0d:9c:75:3d:93:6d:84:2c:b6:df:
64:4f:c4:a4:e1:1a:8c:a5:20:7e:80:aa:ba:26:99:
c2:69:a0:8a:95:bd:17:65:b2:0a:08:bb:67:57:0e:
81:0f:b8:2d:47:b8:34:c4:7f:83:bd:85:c7:e1:73:
ac:c3:0d:fd:a8:52:ce:90:c4:39:87:a7:02:53:84:
3e:f0:c7:53:fb:3b:b8:fe:44:14:81:9f:64:6d:c0:
77:f9:a4:60:81:6d:2e:2e:26:36:19:6f:52:19:8b:
39:b4:cf:5b:6e:e2:38:8c:66:6d:3a:87:2b:ac:9e:
60:d8:f1:62:8b:f9:b9:d2:b6:bb:c0:28:cd:4f:0e:
7d:4f:38:9b:c9:46:11:da:f5:b8:47:ba:6f:2b:5a:
87:a1:c9:eb:f1:94:7c:bd:f0:c3:b9:ca:c3:ff:5d:
a8:84:75:ea:cf:1a:10:6e:85:83:a1:34:ad:af:e7:
8b:ee:ca:70:33:7d:bc:df:23:44:94:5c:93:44:e3:
31:56:3c:d9:46:ab:b3:14:1b:27:d1:0b:a0:48:86:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:2C:4F:24:4E:8F:E7:43:13:3B:78:79:92:A0:84:A2:51:C0:D0
X509v3 Authority Key Identifier:
keyid:E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/noYsTyROj-dDEzt4eZKghKJRwNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/5mzx85BGIKp3N0KRWt0NqOY1Abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:ed:00:05:ef:37:a5:99:f6:c2:86:54:05:94:2e:00:21:d8:
f1:17:68:a8:71:eb:8c:6f:40:ac:cc:d3:bb:2b:3d:00:bc:62:
31:fe:72:35:2f:86:3c:02:bd:b9:2b:6f:65:2f:f0:c9:31:ca:
fa:17:2a:b2:b2:bd:2d:85:ec:fa:56:11:0d:7d:8f:26:57:97:
e7:ec:ca:19:18:b3:dc:6e:bf:4f:3b:0f:a5:0f:ac:b9:63:1e:
17:c7:a1:0e:8b:02:a8:e0:6f:ce:6b:11:ee:d3:0e:af:79:2c:
c7:5a:4a:ad:4f:b2:3b:fc:13:d2:62:a5:c1:71:68:6b:5c:76:
00:dc:8f:27:04:7e:17:dd:60:9f:ea:03:40:81:71:18:76:7b:
66:de:fd:7a:26:5a:df:31:05:f8:f1:1f:4e:1f:56:06:85:05:
5a:f0:6a:fb:05:07:06:1d:f3:12:29:22:52:bb:1f:ef:5e:9d:
98:bc:63:f4:12:e9:96:46:70:2a:3d:57:3c:7c:33:17:b9:9a:
11:ed:1e:98:fa:59:6e:22:38:99:c9:3c:64:a3:36:e9:9a:39:
34:e7:13:64:b0:d3:e7:64:d2:ad:d5:58:b0:bb:c0:3f:17:e9:
a4:de:26:f3:20:93:6b:8a:92:6e:73:95:e4:36:3f:b6:6b:50:
8b:01:42:22
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY60Y1vOQ7vRyt3aazugfTCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NmNmMWYzOTA0NjIwYWE3NzM3NDI5MTVhZGQwZGE4ZTYz
NTAxYjgwHhcNMjQwNDA2MTcwOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg2MmM0ZjI0NGU4ZmU3NDMxMzNiNzg3OTkyYTA4NGEyNTFjMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFx5bvgJAEl/Yqm2GpfPHxjdamxO
qDbTNGg+FkIbuhvXMlw93929BHmbNW7jt7rt4Q2cdT2TbYQstt9kT8Sk4RqMpSB+
gKq6JpnCaaCKlb0XZbIKCLtnVw6BD7gtR7g0xH+DvYXH4XOsww39qFLOkMQ5h6cC
U4Q+8MdT+zu4/kQUgZ9kbcB3+aRggW0uLiY2GW9SGYs5tM9bbuI4jGZtOocrrJ5g
2PFii/m50ra7wCjNTw59TzibyUYR2vW4R7pvK1qHocnr8ZR8vfDDucrD/12ohHXq
zxoQboWDoTStr+eL7spwM3283yNElFyTROMxVjzZRquzFBsn0QugSIawNwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ6GLE8kTo/nQxM7eHmSoISiUcDQMB8GA1UdIwQY
MBaAFOZs8fOQRiCqdzdCkVrdDajmNQG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW16eDg1QkdJS3AzTjBLUld0ME5xT1kxQWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMzI0MTEtMWU0My00MTJiLTgyZmUt
MjNlYjNkYTU1NmZjLzEvbm9Zc1R5Uk9qLWRERXp0NGVaS2doS0pSd05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMzI0MTEtMWU0My00MTJiLTgyZmUtMjNlYjNkYTU1NmZj
LzEvNW16eDg1QkdJS3AzTjBLUld0ME5xT1kxQWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtOADAN
BgkqhkiG9w0BAQsFAAOCAQEAiu0ABe83pZn2woZUBZQuACHY8RdoqHHrjG9ArMzT
uys9ALxiMf5yNS+GPAK9uStvZS/wyTHK+hcqsrK9LYXs+lYRDX2PJleX5+zKGRiz
3G6/TzsPpQ+suWMeF8ehDosCqOBvzmsR7tMOr3ksx1pKrU+yO/wT0mKlwXFoa1x2
ANyPJwR+F91gn+oDQIFxGHZ7Zt79eiZa3zEF+PEfTh9WBoUFWvBq+wUHBh3zEiki
Ursf716dmLxj9BLplkZwKj1XPHwzF7maEe0emPpZbiI4mck8ZKM26Zo5NOcTZLDT
52TSrdVYsLvAPxfppN4m8yCTa4qSbnOV5DY/tmtQiwFCIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org