Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/3mnACetQRELOiU_iJje4r6bn07g.roa
File: 3mnACetQRELOiU_iJje4r6bn07g.roa (raw, json)
Hash identifier: DGIOp8PQTKszWAAbpidVUr+G0012TbShQx3BxHMJuVc=
Subject key identifier: DE:69:C0:09:EB:50:44:42:CE:89:4F:E2:26:37:B8:AF:A6:E7:D3:B8
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 04A3915A
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/3mnACetQRELOiU_iJje4r6bn07g.roa
Signing time: Sat 01 Jan 2022 10:03:14 +0000
ROA not before: Sat 01 Jan 2022 10:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211374
IP address blocks: 2a10:4646:90::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77828442 (0x4a3915a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Jan 1 10:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de69c009eb504442ce894fe22637b8afa6e7d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:54:6a:08:55:c5:7e:5d:43:e0:c2:ba:94:
ba:a8:be:3d:41:10:04:5a:37:c1:52:5f:36:0b:51:
3e:0a:fc:9c:0d:d2:de:db:46:4b:be:c9:2d:14:c6:
8c:ed:c7:e2:36:73:63:07:87:34:86:42:61:78:ac:
d5:c9:81:f7:3a:cc:84:00:50:91:20:e9:38:9c:1e:
21:30:3d:d4:dd:65:3e:64:c5:b5:d3:08:5d:78:d8:
20:f1:97:cd:65:70:15:f4:af:77:5f:64:0a:d1:42:
bf:07:51:02:4c:47:cb:3d:1c:c6:1a:70:7d:4c:14:
19:a7:e8:2c:08:02:a6:a1:5f:2b:72:cd:f9:d7:39:
2a:56:b4:47:45:4a:6a:ea:09:f8:b7:1b:9b:78:23:
fb:6e:7e:46:b5:32:97:51:28:12:0a:e7:e2:9a:6b:
5e:c8:af:ef:c6:5b:2a:7e:b2:e1:35:3d:cf:19:a0:
3d:ad:de:e5:a5:c9:60:f7:07:bf:0a:21:df:45:87:
ba:05:76:fc:b4:6b:19:4f:a6:fd:fd:52:ef:79:8b:
c5:90:19:9a:e4:a8:46:73:d2:01:75:ed:5c:f5:3f:
17:b7:b9:c1:4a:8e:31:b1:54:3b:58:e2:7f:d0:57:
3a:e9:c4:2c:48:1b:5b:dd:1c:8d:00:97:ab:c8:e4:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:C0:09:EB:50:44:42:CE:89:4F:E2:26:37:B8:AF:A6:E7:D3:B8
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/3mnACetQRELOiU_iJje4r6bn07g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:90::/44
Signature Algorithm: sha256WithRSAEncryption
2a:38:6f:b0:75:80:30:85:8b:ae:7f:ce:04:21:b4:d1:9e:22:
4b:75:e0:af:59:1b:83:59:86:07:66:52:5b:c6:29:86:63:54:
b9:1e:44:a9:73:24:87:bb:1a:ba:6e:96:d8:fc:aa:10:b2:c3:
3e:15:0a:62:c9:95:d1:76:cb:3d:7b:a6:8a:4b:aa:dc:3f:9b:
98:69:29:93:9d:88:44:23:0c:3a:58:66:4f:9d:20:d8:fe:0c:
09:18:f9:93:01:92:95:0a:85:bc:3b:38:f3:3e:0f:04:b0:3a:
8c:9c:ae:a8:36:ea:e2:bc:f2:84:be:49:2c:38:52:d4:2f:3a:
2e:dd:d1:c5:55:46:7d:66:b9:d5:56:97:92:de:ec:d4:a7:c7:
87:af:f4:d2:2d:62:08:1c:12:d7:f2:d7:6f:2d:e6:5f:ab:5a:
fe:a2:b1:93:30:d6:be:20:1b:a2:1a:20:ff:0e:6f:d1:b4:30:
0d:2e:be:30:3d:e8:c4:19:84:7e:d7:13:b2:a5:e8:ac:c8:ab:
8a:3f:3d:93:2e:07:8e:1c:7b:46:a8:dc:a7:a1:aa:7c:d5:bb:
51:aa:ef:9d:7f:a5:16:64:95:70:7a:67:6b:53:00:34:bc:4c:
1a:d9:68:7c:54:fb:f9:f9:7b:dc:b8:4f:d2:07:66:01:e8:62:
10:c2:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org