Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/nKlg0ONF6EnOfM2YDvfSwtJ_j00.roa
File: nKlg0ONF6EnOfM2YDvfSwtJ_j00.roa (raw, json)
Hash identifier: GsGP0Vtt4jNy/EfLMTci7NlimJu3cpl1vbIWqjXjyNk=
Subject key identifier: 9C:A9:60:D0:E3:45:E8:49:CE:7C:CD:98:0E:F7:D2:C2:D2:7F:8F:4D
Certificate issuer: /CN=a84b25ab25770a358da5f5fb427072b0a2e24582
Certificate serial: 0966DD51
Authority key identifier: A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/nKlg0ONF6EnOfM2YDvfSwtJ_j00.roa
Signing time: Sat 01 Jan 2022 16:04:10 +0000
ROA not before: Sat 01 Jan 2022 16:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202033
IP address blocks: 2001:67c:12c0::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157736273 (0x966dd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84b25ab25770a358da5f5fb427072b0a2e24582
Validity
Not Before: Jan 1 16:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ca960d0e345e849ce7ccd980ef7d2c2d27f8f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:84:6f:a3:78:48:fd:96:8a:59:ab:65:b2:
d2:f2:cf:cd:a8:36:93:ed:ab:d6:33:3f:e2:a5:16:
d2:b3:05:72:2a:1f:8c:2b:6e:ef:b2:1c:32:5d:dc:
61:74:c4:9a:c4:67:27:3b:ad:ef:08:c5:37:15:dd:
34:86:91:00:fb:c9:d2:c6:57:40:2e:cc:b6:60:2a:
27:e5:85:cd:20:af:df:d7:0e:4e:e9:bd:6b:44:59:
68:be:f3:2e:5b:b0:a6:25:c9:46:b5:d2:fc:2d:12:
13:0a:52:49:ed:e5:77:fa:52:d5:eb:e4:e1:11:7a:
61:ea:20:44:6a:3a:8a:5d:14:b4:cc:2a:40:c6:b4:
a2:c1:44:b7:a9:e6:5e:6c:15:27:5b:b2:7f:e0:68:
b9:7a:55:81:19:40:82:6f:a6:c5:a3:21:c9:f8:7d:
db:55:3a:a6:09:57:9b:5c:72:9e:9b:8a:79:c1:fc:
6e:d0:c2:74:d0:96:8b:5b:99:fa:a6:d6:53:25:1b:
f4:f5:29:2f:57:77:3a:19:b2:a2:46:c6:ca:c2:c1:
d9:aa:70:e0:d9:7b:d4:3e:2b:26:ba:77:73:4c:ba:
ee:33:55:96:a1:3e:c1:b0:74:6a:c4:3a:78:55:55:
75:07:fd:5a:3b:1d:8e:34:78:3c:6c:5b:43:61:bf:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:60:D0:E3:45:E8:49:CE:7C:CD:98:0E:F7:D2:C2:D2:7F:8F:4D
X509v3 Authority Key Identifier:
keyid:A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/nKlg0ONF6EnOfM2YDvfSwtJ_j00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12c0::/47
Signature Algorithm: sha256WithRSAEncryption
32:20:cb:cf:bb:a2:8b:77:91:ab:9a:a6:b2:ff:ec:1c:ea:7c:
7d:36:96:54:df:74:73:42:83:90:84:8b:a7:b6:ae:a1:53:6b:
1a:0d:a3:c7:32:b1:34:99:9a:cf:62:c6:db:1a:01:db:68:d9:
33:56:9a:47:31:e5:6c:bd:71:73:18:b9:af:35:2b:f9:8b:8d:
9a:1a:0d:63:86:16:38:d8:54:73:b2:34:24:18:a1:88:11:b8:
ef:a8:21:22:23:8a:e9:7b:c2:db:fd:ea:06:30:e9:74:7d:ed:
93:92:e8:28:36:a5:17:d1:2e:90:59:7f:22:b3:c6:1f:25:ae:
d8:c0:da:b9:14:27:21:44:5b:92:90:1d:b6:a0:7c:fb:3f:91:
6a:98:ac:f3:bf:58:d9:d1:84:da:50:7b:29:ed:75:38:b9:88:
4d:03:c9:7a:3c:23:ae:f7:c4:8e:1c:c2:7b:36:a3:53:af:db:
ca:79:d2:45:f8:73:d4:e4:b0:e7:9f:45:cf:7c:d6:6c:95:67:
c6:3d:a1:8d:58:d5:ac:de:b4:c7:da:a0:4c:3d:0e:d3:69:33:
70:5d:ba:b0:65:35:d4:b3:88:d0:08:c3:21:b7:d0:17:3e:1e:
11:05:6f:4b:88:6f:9e:22:21:18:44:86:6d:7a:a3:b3:b4:9a:
ef:0d:97:77
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECWbdUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ODRiMjVhYjI1NzcwYTM1OGRhNWY1ZmI0MjcwNzJiMGEyZTI0NTgyMB4XDTIyMDEw
MTE2MDQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWNhOTYwZDBlMzQ1
ZTg0OWNlN2NjZDk4MGVmN2QyYzJkMjdmOGY0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMn4hG+jeEj9lopZq2Wy0vLPzag2k+2r1jM/4qUW0rMFciof
jCtu77IcMl3cYXTEmsRnJzut7wjFNxXdNIaRAPvJ0sZXQC7MtmAqJ+WFzSCv39cO
Tum9a0RZaL7zLluwpiXJRrXS/C0SEwpSSe3ld/pS1evk4RF6YeogRGo6il0UtMwq
QMa0osFEt6nmXmwVJ1uyf+BouXpVgRlAgm+mxaMhyfh921U6pglXm1xynpuKecH8
btDCdNCWi1uZ+qbWUyUb9PUpL1d3OhmyokbGysLB2apw4Nl71D4rJrp3c0y67jNV
lqE+wbB0asQ6eFVVdQf9WjsdjjR4PGxbQ2G/YS8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBScqWDQ40XoSc58zZgO99LC0n+PTTAfBgNVHSMEGDAWgBSoSyWrJXcKNY2l
9ftCcHKwouJFgjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FFc2xxeVYzQ2pXTnBmWDdRbkJ5c0tMaVJZSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvZGIyMzE2LTQyOWQtNDQyNS1iMzllLTEyNjRmMjAxODBlOS8x
L25LbGcwT05GNkVuT2ZNMllEdmZTd3RKX2owMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
ZGIyMzE2LTQyOWQtNDQyNS1iMzllLTEyNjRmMjAxODBlOS8xL3FFc2xxeVYzQ2pX
TnBmWDdRbkJ5c0tMaVJZSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASABBnwSwDANBgkqhkiG9w0BAQsF
AAOCAQEAMiDLz7uii3eRq5qmsv/sHOp8fTaWVN90c0KDkISLp7auoVNrGg2jxzKx
NJmaz2LG2xoB22jZM1aaRzHlbL1xcxi5rzUr+YuNmhoNY4YWONhUc7I0JBihiBG4
76ghIiOK6XvC2/3qBjDpdH3tk5LoKDalF9EukFl/IrPGHyWu2MDauRQnIURbkpAd
tqB8+z+Rapis879Y2dGE2lB7Ke11OLmITQPJejwjrvfEjhzCezajU6/bynnSRfhz
1OSw559Fz3zWbJVnxj2hjVjVrN60x9qgTD0O02kzcF26sGU11LOI0AjDIbfQFz4e
EQVvS4hvniIhGESGbXqjs7Sa7w2Xdw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:19 2025 by rpki-client