Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/5nmckpimk0zIcCkv6tVXP57l_r4.roa
File: 5nmckpimk0zIcCkv6tVXP57l_r4.roa (raw, json)
Hash identifier: 7BI1thxfJMx/iARBPiC+QGVe5ehiMzyr5hRMrjNs30Y=
Subject key identifier: E6:79:9C:92:98:A6:93:4C:C8:70:29:2F:EA:D5:57:3F:9E:E5:FE:BE
Certificate issuer: /CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Certificate serial: 04786017
Authority key identifier: 72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/5nmckpimk0zIcCkv6tVXP57l_r4.roa
Signing time: Thu 09 Jun 2022 14:02:04 +0000
ROA not before: Thu 09 Jun 2022 14:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210072
IP address blocks: 2a10:4a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74997783 (0x4786017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Validity
Not Before: Jun 9 14:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6799c9298a6934cc870292fead5573f9ee5febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:f3:c8:f7:a7:6c:01:40:e8:ad:a4:d9:59:
fe:8f:d4:4f:81:65:e9:81:71:f5:50:9f:5d:f8:1c:
e8:ab:51:60:7a:ed:82:8a:08:7b:38:aa:a3:e1:76:
b1:f7:bc:65:bd:62:46:2a:6a:bf:c7:44:1f:6e:25:
f9:ac:74:49:e6:b7:96:e7:a0:7b:21:d6:e2:b8:e2:
22:44:66:93:d4:66:91:8f:5c:94:c9:a1:50:dc:82:
1a:06:4a:5d:91:0f:9c:0f:37:ef:8a:8a:78:fa:63:
64:de:de:4b:7f:db:bf:38:6d:01:f7:25:c5:ed:c5:
e3:ce:84:6e:65:19:ef:66:eb:bd:c2:04:ac:55:0f:
fc:b7:a5:2d:55:87:ce:67:21:d7:cf:bb:d5:1f:78:
a9:5d:a1:df:3d:e8:79:9c:e8:ae:f0:db:03:99:bc:
f0:44:d4:56:3f:84:57:ab:48:04:36:bf:51:39:e6:
fb:4c:e0:38:26:be:c8:b6:73:ed:a8:ed:29:49:b9:
b4:2b:cf:5f:70:40:52:47:4a:18:4e:98:33:c2:86:
0f:ca:51:f8:4e:7b:84:bc:b9:43:80:68:bc:51:9e:
b0:f3:14:fd:b1:b7:60:9e:c4:96:76:2d:e2:da:d3:
20:02:38:fe:65:e8:20:03:7d:68:3e:8e:bf:36:dc:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:9C:92:98:A6:93:4C:C8:70:29:2F:EA:D5:57:3F:9E:E5:FE:BE
X509v3 Authority Key Identifier:
keyid:72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/5nmckpimk0zIcCkv6tVXP57l_r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/cuT3uSKcXWWDiAhAtwyWpQj9B_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4a80::/32
Signature Algorithm: sha256WithRSAEncryption
7f:40:86:23:d3:95:ce:0f:2e:c3:2b:07:62:9c:97:49:33:fa:
d2:75:22:cb:89:66:28:69:71:41:79:ef:ca:77:ad:66:68:a4:
ab:a3:eb:35:d0:56:b7:43:1f:46:28:de:3f:84:0b:05:0f:b3:
2e:77:6c:5e:d9:9d:7a:f5:ec:33:e8:31:e9:16:4b:24:bf:f1:
76:c5:29:3d:70:1f:ff:bd:ef:a7:3b:ff:06:41:58:d3:6f:63:
13:15:cf:94:30:4d:bb:1b:13:c6:11:1b:32:6f:a0:4a:b6:27:
c4:da:eb:3b:c1:ab:e3:02:07:57:74:8d:9d:91:b5:c1:79:c1:
ab:62:54:61:fb:c1:29:7a:27:b1:47:80:c1:17:12:19:71:38:
a1:1c:7c:73:85:14:45:80:56:d2:0f:e7:fb:5d:fd:4b:6e:3b:
4a:30:89:71:04:9f:36:2c:b5:93:71:51:19:32:09:c9:59:d1:
7c:a2:2f:b2:28:65:05:58:a7:13:4c:5f:43:b0:ee:c4:bc:01:
36:b2:11:b1:a1:b5:2a:12:a7:cf:b0:14:d1:11:b2:e1:f1:3e:
66:3c:59:e6:da:ad:d7:f4:5f:c6:ee:12:c6:6e:33:1d:a8:63:
d1:73:b3:91:44:aa:b6:2e:6d:c1:de:03:dc:fd:07:d8:ce:02:
36:57:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:38 2025 by rpki-client