Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/fMMVturxJ4lQbY1HSq1FcWCx0c8.roa
File: fMMVturxJ4lQbY1HSq1FcWCx0c8.roa (raw, json)
Hash identifier: aPrrs3Fs0nPa3GPBuz4SoGvW+wZuANUUo4PS32MXF2s=
Subject key identifier: 7C:C3:15:B6:EA:F1:27:89:50:6D:8D:47:4A:AD:45:71:60:B1:D1:CF
Certificate issuer: /CN=c34c13ecf26ac702f768c99110bf662e99139794
Certificate serial: 018571DE94FA4F08DDF24D9158C8B1C3E959
Authority key identifier: C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/fMMVturxJ4lQbY1HSq1FcWCx0c8.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209261
IP address blocks: 2a10:1cc0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:94:fa:4f:08:dd:f2:4d:91:58:c8:b1:c3:e9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34c13ecf26ac702f768c99110bf662e99139794
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc315b6eaf12789506d8d474aad457160b1d1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:1b:18:83:a8:a3:40:9d:d2:ef:6d:bc:eb:
45:6b:b7:d3:e0:9b:c3:61:50:ab:82:73:5b:20:1e:
35:1c:64:d7:d0:6f:bd:3a:55:a1:04:e6:8d:ff:b7:
91:7d:a8:04:56:44:9e:0d:d4:b7:d4:68:43:4d:f4:
47:b9:f9:93:15:ce:0f:5b:70:a9:77:24:a7:33:d3:
a7:97:02:0e:d3:37:52:e1:0e:ff:1a:22:50:4c:5e:
88:96:77:81:6b:1c:5c:fc:0b:a5:37:78:f1:d2:eb:
35:bf:97:cc:da:a3:9a:f9:bb:35:25:fc:1e:a7:97:
b4:5e:1a:7d:7a:66:35:fc:34:00:f1:b3:0b:19:6d:
4e:6d:fe:a1:07:db:62:86:79:95:b8:5e:79:9b:4a:
18:d9:f0:2e:15:57:1f:3b:00:da:c0:7e:32:0f:d7:
6e:60:1a:91:99:1f:d4:94:6f:d2:e1:d3:45:fd:8f:
93:76:59:ed:df:22:69:fe:d2:71:b6:56:f8:b2:92:
76:5f:52:ef:a2:e2:20:9d:78:6a:46:6d:36:7e:bd:
24:77:11:4f:3b:d1:c3:da:60:cd:dc:b5:26:76:38:
82:9b:f1:21:87:65:66:e4:44:d5:ad:e3:5b:02:d6:
0a:cc:6a:de:8a:09:2d:1d:01:6a:9a:d3:a2:6b:20:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:15:B6:EA:F1:27:89:50:6D:8D:47:4A:AD:45:71:60:B1:D1:CF
X509v3 Authority Key Identifier:
keyid:C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/fMMVturxJ4lQbY1HSq1FcWCx0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:1cc0::/40
Signature Algorithm: sha256WithRSAEncryption
5d:3f:ce:74:0e:98:61:87:d0:de:a7:dd:d0:0d:ac:fc:1e:0f:
4a:52:f5:3a:58:01:ea:69:bb:5d:bc:c5:a9:b7:32:0b:de:03:
7f:da:a9:54:9f:3b:22:8f:78:2d:83:85:b8:0b:e3:e2:9c:a8:
0b:8a:b7:9a:cb:db:1c:6c:57:9b:59:69:c0:6f:9c:b1:a3:59:
19:b2:62:60:71:bc:7d:47:39:96:47:4d:86:0e:d7:03:b1:bd:
56:e0:4e:ef:38:f1:44:b1:95:d1:51:8f:d7:1f:e3:73:82:18:
7a:ad:e5:f3:cd:8a:73:a3:ca:09:0a:07:8a:4d:de:d6:b1:6c:
de:a2:55:0c:02:3c:e4:ee:a8:65:92:56:53:12:ae:16:7b:e7:
7d:6a:94:37:3b:a8:ab:c3:11:7f:25:8f:16:fa:0a:2a:66:67:
41:1e:5f:0d:67:1f:c9:ca:2b:3b:79:86:a7:e9:f6:53:25:47:
de:68:b3:e8:97:bd:97:71:20:37:cc:bd:db:ef:d5:38:16:02:
fd:29:5a:9a:34:9c:82:51:9e:c1:7a:c4:98:4c:37:56:4b:47:
ce:16:59:61:18:54:c0:18:67:67:ec:ac:dd:4d:28:5e:23:b0:
8a:0a:6f:b4:ed:8a:c6:49:8d:5e:4d:a4:51:bb:61:fb:a7:d2:
25:78:53:d2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVx3pT6Twjd8k2RWMixw+lZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNGMxM2VjZjI2YWM3MDJmNzY4Yzk5MTEwYmY2NjJlOTkx
Mzk3OTQwHhcNMjMwMTAyMDk0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2MzMTViNmVhZjEyNzg5NTA2ZDhkNDc0YWFkNDU3MTYwYjFkMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfwbGIOoo0Cd0u9tvOtFa7fT4JvD
YVCrgnNbIB41HGTX0G+9OlWhBOaN/7eRfagEVkSeDdS31GhDTfRHufmTFc4PW3Cp
dySnM9OnlwIO0zdS4Q7/GiJQTF6IlneBaxxc/AulN3jx0us1v5fM2qOa+bs1Jfwe
p5e0Xhp9emY1/DQA8bMLGW1Obf6hB9tihnmVuF55m0oY2fAuFVcfOwDawH4yD9du
YBqRmR/UlG/S4dNF/Y+Tdlnt3yJp/tJxtlb4spJ2X1LvouIgnXhqRm02fr0kdxFP
O9HD2mDN3LUmdjiCm/Ehh2Vm5ETVreNbAtYKzGreigktHQFqmtOiayAcyQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHzDFbbq8SeJUG2NR0qtRXFgsdHPMB8GA1UdIwQY
MBaAFMNME+zyascC92jJkRC/Zi6ZE5eUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzB3VDdQSnF4d0wzYU1tUkVMOW1McGtUbDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E0ZTgtMWZjOS00NTg5LTk3ZTgt
MWU1OGJkNzRiZTYwLzEvZk1NVnR1cnhKNGxRYlkxSFNxMUZjV0N4MGM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hM2E0ZTgtMWZjOS00NTg5LTk3ZTgtMWU1OGJkNzRiZTYw
LzEvdzB3VDdQSnF4d0wzYU1tUkVMOW1McGtUbDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAcwAAw
DQYJKoZIhvcNAQELBQADggEBAF0/znQOmGGH0N6n3dANrPweD0pS9TpYAeppu128
xam3MgveA3/aqVSfOyKPeC2DhbgL4+KcqAuKt5rL2xxsV5tZacBvnLGjWRmyYmBx
vH1HOZZHTYYO1wOxvVbgTu848USxldFRj9cf43OCGHqt5fPNinOjygkKB4pN3tax
bN6iVQwCPOTuqGWSVlMSrhZ7531qlDc7qKvDEX8ljxb6CipmZ0EeXw1nH8nKKzt5
hqfp9lMlR95os+iXvZdxIDfMvdvv1TgWAv0pWpo0nIJRnsF6xJhMN1ZLR84WWWEY
VMAYZ2fsrN1NKF4jsIoKb7TtisZJjV5NpFG7Yfun0iV4U9I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:03 2024 by rpki-client on console-ams.rpki-client.org