Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/XVwxkapUBWqzv122Iw71xKTIwgU.roa
File: XVwxkapUBWqzv122Iw71xKTIwgU.roa (raw, json)
Hash identifier: VG5LvOgrB/C6P242KmgJiEP6rhfs0/dAfhZWYbtBTS4=
Subject key identifier: 5D:5C:31:91:AA:54:05:6A:B3:BF:5D:B6:23:0E:F5:C4:A4:C8:C2:05
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01930F686AF24D738893C0D2FF77BAD880FE
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/XVwxkapUBWqzv122Iw71xKTIwgU.roa
Signing time: Sat 09 Nov 2024 05:32:01 +0000
ROA not before: Sat 09 Nov 2024 05:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213904
IP address blocks: 2a0b:bb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:68:6a:f2:4d:73:88:93:c0:d2:ff:77:ba:d8:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Nov 9 05:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d5c3191aa54056ab3bf5db6230ef5c4a4c8c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:55:1e:0d:cf:60:cc:bd:b6:a4:b1:31:1a:
56:b6:b6:f0:6d:9c:80:6d:1e:56:d1:b7:72:ea:7b:
a6:b9:d3:e2:d5:4c:d7:b2:43:c9:c0:70:48:9e:07:
89:b3:62:8c:7a:56:2a:df:00:17:33:bc:10:b1:ff:
8a:0e:77:b9:08:36:ad:bd:7c:14:da:63:c8:90:c4:
9d:47:63:7c:d3:32:c3:0c:62:98:a6:96:3b:59:0b:
23:ef:32:c0:cb:97:cf:32:4f:37:6d:93:08:05:05:
68:ed:7d:08:47:55:67:98:82:59:19:83:84:60:80:
55:11:d4:88:4b:82:6c:44:0d:dc:01:4c:97:25:e8:
17:d1:7b:26:5d:66:be:a4:61:16:9e:c1:22:b9:74:
df:4f:1e:67:7f:61:23:3a:ac:30:74:ce:ef:a6:30:
51:4e:0c:fd:d6:74:54:a5:d7:97:70:de:e5:7f:fe:
b6:7e:12:a1:e2:13:dc:0a:65:7c:f4:ff:15:dc:51:
93:15:6d:0e:3f:43:51:da:13:02:c8:bb:7e:5c:b1:
82:0e:f6:2b:c1:08:f3:2e:24:48:6e:73:ab:bf:0c:
30:6a:86:b5:5e:7f:ea:78:8d:d5:c2:5a:5d:67:6c:
20:71:e5:43:8c:7a:26:d7:95:db:9b:5e:19:72:b0:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:31:91:AA:54:05:6A:B3:BF:5D:B6:23:0E:F5:C4:A4:C8:C2:05
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/XVwxkapUBWqzv122Iw71xKTIwgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
68:a4:d8:e6:a5:c9:18:9a:b0:54:b1:56:dd:52:97:9d:3b:22:
3b:69:ed:70:48:7d:ac:d0:c2:24:4a:fb:d4:ce:2b:f5:06:59:
77:71:5f:29:a0:86:a2:3b:ff:8e:2a:a5:6f:01:8a:ae:46:94:
ef:94:57:3d:c2:28:79:ee:c3:2e:e6:c3:2b:49:6e:f5:92:cc:
83:66:76:78:e8:da:0e:9c:1c:c1:0d:a7:4e:e0:b3:85:f0:21:
dc:01:3f:56:4e:4b:97:4c:ba:4f:a4:2c:7a:e1:b9:41:b8:8c:
9a:d4:2f:af:10:13:46:a2:fb:75:76:05:90:5e:13:ef:4a:b9:
27:ac:22:e1:7d:5d:5d:f6:12:58:7c:6e:fb:49:35:78:7d:3b:
08:2d:d9:1d:46:23:47:83:a6:55:9d:64:7c:9b:20:d1:e4:6d:
ec:b9:6a:01:b5:f3:df:5f:e0:8a:57:60:de:ac:77:6e:1f:6e:
85:d9:31:c1:68:2e:84:8c:28:cc:3a:69:57:b7:2f:8e:85:ae:
fc:d6:59:6b:3a:9f:43:b1:71:fa:8d:5b:29:92:13:23:1c:ba:
75:a0:27:78:1e:ce:8a:1b:2f:85:40:37:ec:93:37:86:28:85:
48:fc:71:6b:49:53:e3:ec:8b:2d:be:07:6a:2a:30:f7:f6:7f:
89:42:15:3a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZMPaGryTXOIk8DS/3e62ID+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1
OGQ2ZDUwHhcNMjQxMTA5MDUzMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDVjMzE5MWFhNTQwNTZhYjNiZjVkYjYyMzBlZjVjNGE0YzhjMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSRVHg3PYMy9tqSxMRpWtrbwbZyA
bR5W0bdy6numudPi1UzXskPJwHBIngeJs2KMelYq3wAXM7wQsf+KDne5CDatvXwU
2mPIkMSdR2N80zLDDGKYppY7WQsj7zLAy5fPMk83bZMIBQVo7X0IR1VnmIJZGYOE
YIBVEdSIS4JsRA3cAUyXJegX0XsmXWa+pGEWnsEiuXTfTx5nf2EjOqwwdM7vpjBR
Tgz91nRUpdeXcN7lf/62fhKh4hPcCmV89P8V3FGTFW0OP0NR2hMCyLt+XLGCDvYr
wQjzLiRIbnOrvwwwaoa1Xn/qeI3VwlpdZ2wgceVDjHom15Xbm14ZcrCofQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFF1cMZGqVAVqs79dtiMO9cSkyMIFMB8GA1UdIwQY
MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct
MTYyMGNmZGM3MTE3LzEvWFZ3eGthcFVCV3F6djEyMkl3NzF4S1RJd2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3
LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgu7ADAN
BgkqhkiG9w0BAQsFAAOCAQEAaKTY5qXJGJqwVLFW3VKXnTsiO2ntcEh9rNDCJEr7
1M4r9QZZd3FfKaCGojv/jiqlbwGKrkaU75RXPcIoee7DLubDK0lu9ZLMg2Z2eOja
DpwcwQ2nTuCzhfAh3AE/Vk5Ll0y6T6QseuG5QbiMmtQvrxATRqL7dXYFkF4T70q5
J6wi4X1dXfYSWHxu+0k1eH07CC3ZHUYjR4OmVZ1kfJsg0eRt7LlqAbXz31/gildg
3qx3bh9uhdkxwWguhIwozDppV7cvjoWu/NZZazqfQ7Fx+o1bKZITIxy6daAneB7O
ihsvhUA37JM3hiiFSPxxa0lT4+yLLb4Haiow9/Z/iUIVOg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:49 2024 by rpki-client on console.sobornost.net