Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/1x6W99i3VjNivaxpFCPVC1scSbY.roa
File: 1x6W99i3VjNivaxpFCPVC1scSbY.roa (raw, json)
Hash identifier: S9jB5yQbC0BnjHFC+Vvr8XWliii6J3D1C9YloEV8aOQ=
Subject key identifier: D7:1E:96:F7:D8:B7:56:33:62:BD:AC:69:14:23:D5:0B:5B:1C:49:B6
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 04AEBCF9
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/1x6W99i3VjNivaxpFCPVC1scSbY.roa
Signing time: Sat 01 Jan 2022 10:03:20 +0000
ROA not before: Sat 01 Jan 2022 10:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212188
IP address blocks: 2a10:4646:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78560505 (0x4aebcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Jan 1 10:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d71e96f7d8b7563362bdac691423d50b5b1c49b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:f9:ba:04:95:0c:54:70:95:d9:31:b5:0a:
a8:35:57:b0:9d:ba:96:1f:24:8e:3b:44:85:b1:be:
4d:a4:62:9a:1f:8b:df:db:b0:e3:66:f9:ad:04:ad:
49:16:04:7c:28:51:5a:b2:0f:2d:d8:9e:15:91:de:
82:a4:d3:e3:5b:32:2f:04:c9:13:6e:01:59:3e:6a:
2b:8f:04:cb:07:7b:a2:a4:c6:49:86:e3:09:cb:82:
9d:20:6f:8e:42:6c:f1:89:33:7a:de:c1:84:76:64:
28:07:24:96:fe:58:6c:3e:06:54:40:3c:c7:40:cb:
44:38:89:cd:38:46:e9:f7:b7:2b:e8:67:86:68:cc:
7a:f9:aa:ab:a1:4e:ef:0b:30:46:52:f8:b1:66:59:
c1:b0:51:9e:1f:d9:9e:1e:93:8f:74:cb:2e:c5:07:
6b:38:9f:0f:0e:35:bc:14:ac:9d:28:55:4d:64:d0:
06:3a:2a:f4:da:bf:45:06:6b:82:d7:73:ea:c8:06:
79:b6:d4:7d:db:a6:58:3a:29:b1:76:79:83:55:4f:
50:b0:11:ce:1d:89:2f:7b:9c:29:b8:c7:df:5d:df:
93:83:ac:56:af:1d:01:88:4f:c2:cb:f9:6c:24:ea:
69:50:6c:1e:83:30:13:70:6d:a8:62:cc:9a:aa:10:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:96:F7:D8:B7:56:33:62:BD:AC:69:14:23:D5:0B:5B:1C:49:B6
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/1x6W99i3VjNivaxpFCPVC1scSbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:7::/48
Signature Algorithm: sha256WithRSAEncryption
a3:6d:ec:82:d1:8e:8e:ce:7e:aa:0a:b1:d4:78:93:bc:03:a9:
14:ac:1a:b7:c0:9f:10:79:07:80:d0:29:f4:65:32:a8:2b:69:
87:7c:a3:5d:86:6a:5a:2c:c4:e9:e9:b8:24:59:fe:c3:2a:a5:
92:cb:e5:bd:b7:ec:37:27:c8:f1:ad:15:3d:df:e1:f8:cc:1a:
07:b1:ba:c2:c2:2d:95:c7:45:78:87:dc:26:9c:3f:f5:40:72:
5c:11:e1:9b:2c:dd:ef:8c:68:92:98:81:d4:2f:05:ff:66:ae:
15:be:ec:16:3a:1b:07:2e:3a:58:30:3d:04:c7:c2:4c:e9:58:
4e:85:e7:f2:38:12:a5:e4:90:b6:58:ac:b6:3f:32:6e:0b:db:
6c:a0:0f:5c:07:48:59:f2:3c:97:13:d0:31:01:b7:58:98:80:
50:3b:11:47:c4:d0:96:d4:aa:3a:0c:64:a2:d4:3d:ed:42:1d:
ab:21:75:c0:00:34:33:76:e0:e8:29:4d:25:d5:2a:c0:99:14:
60:e1:0d:28:5a:63:b4:53:1d:55:58:ed:90:b7:87:e7:80:b2:
b5:b0:84:9a:57:6c:f6:cd:68:02:83:b9:fc:50:c5:06:ca:15:
dd:db:42:7a:be:f0:bc:14:ab:8a:63:f1:bc:4e:a0:fe:cb:7c:
7f:e2:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org