Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/4E6QsQtwm3GAQ3n9fuUWdbJpNkM.roa
File: 4E6QsQtwm3GAQ3n9fuUWdbJpNkM.roa (raw, json)
Hash identifier: HPDxF4SnKFtXZhcMKFJK0iSJssJ2eoc5TW3246LlWks=
Subject key identifier: E0:4E:90:B1:0B:70:9B:71:80:43:79:FD:7E:E5:16:75:B2:69:36:43
Certificate issuer: /CN=97743d346356469b4b6939463c96df2b8a39065c
Certificate serial: 018C8C6AC346719ABB6FBF1DAB6A88C38326
Authority key identifier: 97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/4E6QsQtwm3GAQ3n9fuUWdbJpNkM.roa
Signing time: Thu 21 Dec 2023 12:47:36 +0000
ROA not before: Thu 21 Dec 2023 12:47:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204386
IP address blocks: 2a10:acc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:6a:c3:46:71:9a:bb:6f:bf:1d:ab:6a:88:c3:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97743d346356469b4b6939463c96df2b8a39065c
Validity
Not Before: Dec 21 12:47:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e04e90b10b709b71804379fd7ee51675b2693643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:42:a3:6d:51:7d:52:2f:88:62:9a:d0:5d:
15:1b:7e:9a:46:9b:60:e0:95:f8:13:92:83:93:e1:
fb:d6:d0:16:50:90:80:d3:8b:c9:33:42:8c:4b:fe:
b4:44:b1:25:3e:19:3a:91:d9:49:e7:58:53:26:56:
31:19:fd:0f:55:14:5c:13:b5:c0:bf:b1:cd:0c:84:
cf:3d:87:13:45:87:36:76:37:85:36:3a:fb:1f:57:
0a:54:cc:c0:c9:6c:3e:37:a6:4a:1b:13:c8:34:59:
c8:17:6e:aa:4c:71:93:92:b1:8a:cc:63:2b:73:04:
5e:be:a2:6d:e8:f1:e7:6e:a3:7c:1a:34:4c:45:09:
55:03:9e:f9:96:79:76:b3:f9:30:f1:90:f9:d9:45:
0e:f8:d1:97:d8:98:c2:1d:4e:e2:ac:6e:4d:26:6f:
0a:b7:42:e4:df:4a:d4:a6:c2:27:cf:66:83:e1:1c:
9b:5d:4a:07:2b:4a:c8:72:f2:dc:04:fb:07:15:fd:
1d:20:94:38:a4:ae:9d:ea:2e:73:0d:30:59:7f:49:
d5:9e:e4:9f:90:30:8e:63:97:1a:a6:d1:85:b5:8b:
db:07:0d:4c:cd:a3:57:fe:fc:87:fe:b6:83:5b:54:
1d:a9:2b:fc:a8:cd:58:c8:29:4b:57:5f:98:00:90:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:90:B1:0B:70:9B:71:80:43:79:FD:7E:E5:16:75:B2:69:36:43
X509v3 Authority Key Identifier:
keyid:97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/4E6QsQtwm3GAQ3n9fuUWdbJpNkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
87:2f:b8:8c:1f:4d:cf:b3:6c:cb:42:70:6e:99:97:28:20:b9:
0e:90:f7:ae:10:e1:69:f6:f6:ef:7f:d5:27:9f:43:f1:83:31:
07:af:a8:b7:7b:53:3e:44:4d:6d:96:75:a9:bc:b4:4b:79:2b:
79:85:93:de:c5:de:43:2b:4a:59:fd:88:35:15:66:88:76:94:
8a:c7:8a:15:5d:9f:23:37:5e:e2:d7:50:c1:68:53:76:78:90:
e4:c2:cd:18:08:77:be:db:c5:c0:27:bc:c5:4d:52:82:eb:e6:
85:93:75:d9:f4:8d:07:f3:ba:c5:cf:d6:f1:e7:cc:51:0c:09:
b7:a4:b4:c7:30:92:af:fb:49:4b:35:7d:de:ab:5e:4b:f4:78:
7f:c0:59:f4:7f:56:f5:a6:64:db:5c:48:fc:26:bf:92:b1:98:
79:d7:ae:d5:73:3a:b2:e8:fa:23:77:d4:e4:74:90:57:74:70:
f5:80:79:34:f5:ba:57:9e:4b:11:08:6a:72:0a:f4:5c:54:ed:
9e:2d:3c:10:2f:47:42:5e:02:97:61:d1:6e:86:b3:90:37:d2:
fb:09:b2:a9:87:ea:ee:52:31:10:cb:f4:1b:30:b9:d9:a3:ee:
97:4f:04:97:a9:06:c4:4e:23:08:f2:27:6e:94:b4:dc:33:99:
fc:16:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org