Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/53Ev0x5Ynb8uo82HVq5vLtZ-JTQ.roa
File: 53Ev0x5Ynb8uo82HVq5vLtZ-JTQ.roa (raw, json)
Hash identifier: LCMKVRo/wOm9m2U7CYa2Y30CRv/bNzgoLfbhu0rnKGY=
Subject key identifier: E7:71:2F:D3:1E:58:9D:BF:2E:A3:CD:87:56:AE:6F:2E:D6:7E:25:34
Certificate issuer: /CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Certificate serial: 018287713DE4DB60C861AD9589469902FE18
Authority key identifier: CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/53Ev0x5Ynb8uo82HVq5vLtZ-JTQ.roa
Signing time: Wed 10 Aug 2022 11:08:41 +0000
ROA not before: Wed 10 Aug 2022 11:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209022
IP address blocks: 2a10:a501:b00b::/48 maxlen: 48
2a10:a505:b00b::/48 maxlen: 48
2a10:a503:b00b::/48 maxlen: 48
2a10:a507:b00b::/48 maxlen: 48
2a10:a504:b00b::/48 maxlen: 48
2a10:a502:b00b::/48 maxlen: 48
2a10:a500:b00b::/48 maxlen: 48
2a10:a506:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:71:3d:e4:db:60:c8:61:ad:95:89:46:99:02:fe:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Validity
Not Before: Aug 10 11:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7712fd31e589dbf2ea3cd8756ae6f2ed67e2534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:d7:eb:b5:8c:dc:f5:13:39:fd:36:d8:09:
5b:75:34:c1:b9:99:49:ed:f3:74:1a:9c:74:b1:2d:
0e:53:21:86:02:51:5a:43:55:08:95:8c:a2:af:64:
cb:ab:e3:51:2a:b8:93:6d:80:68:27:44:01:9f:ff:
31:0c:ea:aa:0d:af:8d:03:88:0f:c2:da:9b:74:f8:
69:62:d8:03:07:51:4e:19:a9:57:bf:a4:9b:b5:09:
35:f8:4a:37:b1:54:7d:fd:2d:25:1c:a1:e1:d1:26:
dd:49:cd:a5:a2:88:bc:0c:ee:26:0a:08:cc:cb:08:
b5:f4:30:ea:12:69:e6:29:13:17:ee:bc:ab:b2:5f:
39:99:57:c6:14:08:69:aa:88:ca:6f:93:4e:ec:a5:
b8:43:0e:50:d9:f2:43:0e:35:58:ff:77:e2:df:9a:
1d:5a:ea:d9:af:ac:29:4f:b8:ac:ab:bf:eb:70:c1:
90:58:52:ef:98:f9:43:1f:10:95:15:ba:e5:8c:a8:
63:9b:68:43:4a:23:e0:86:3d:db:48:4f:5c:f6:af:
17:d3:85:21:c6:60:b4:7b:02:2a:5b:f7:c1:19:a0:
c1:da:e9:48:ca:12:a7:89:c2:e1:4d:0b:3b:95:07:
31:a5:5a:48:3f:96:fb:f3:86:bb:ba:fd:33:2d:32:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:2F:D3:1E:58:9D:BF:2E:A3:CD:87:56:AE:6F:2E:D6:7E:25:34
X509v3 Authority Key Identifier:
keyid:CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/53Ev0x5Ynb8uo82HVq5vLtZ-JTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a500:b00b::/48
2a10:a501:b00b::/48
2a10:a502:b00b::/48
2a10:a503:b00b::/48
2a10:a504:b00b::/48
2a10:a505:b00b::/48
2a10:a506:b00b::/48
2a10:a507:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
24:66:19:d1:bc:0d:20:a0:75:b6:9e:1d:a9:19:20:f9:4c:de:
54:04:c5:7f:46:68:c9:a8:7e:7e:d3:b4:f8:e8:9b:1c:a6:d7:
fd:9c:9a:d2:93:38:6f:ec:98:88:df:79:a0:cb:aa:ca:bf:a2:
1c:36:9b:cf:d3:46:c2:2f:9d:81:cf:61:34:d4:f5:ca:51:3b:
2f:b5:c3:2e:0b:f5:0c:33:c1:98:c0:f0:f3:6c:e5:53:60:ee:
78:79:66:12:d8:77:1c:c6:78:87:61:3f:92:25:a6:96:47:78:
13:92:f5:b5:8f:4e:ee:ff:44:47:d5:8d:fa:09:f7:5c:50:fc:
fa:31:a7:96:39:80:fd:22:c9:1b:69:ff:da:eb:0c:f8:c7:b1:
19:80:d7:3b:79:de:36:5b:ce:69:62:8f:59:9d:bc:b5:e8:ec:
8d:06:11:9b:28:68:b4:cd:36:01:26:b3:9b:63:e3:3c:3c:02:
18:7d:e7:7f:3a:84:fd:37:0d:e6:4d:49:ff:80:33:af:ec:01:
75:f0:6c:54:9a:c3:a4:74:ac:72:62:e0:23:b6:6f:9c:8a:1a:
fe:3a:f9:c8:79:ae:36:49:17:b3:4b:32:88:c1:c9:ef:70:a5:
25:76:4f:ac:a9:cd:cb:0b:e8:c6:1f:68:fd:30:df:29:ae:cf:
1d:59:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:47 2024 by rpki-client on console-fra.rpki-client.org