Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/9r7OoDGfLfXuU2XMV3Dt9-I9bdU.roa
File: 9r7OoDGfLfXuU2XMV3Dt9-I9bdU.roa (raw, json)
Hash identifier: RdiBZINiHf19WbJsEmP8VV7uh1OnU4TbE8R2okkZbLw=
Subject key identifier: F6:BE:CE:A0:31:9F:2D:F5:EE:53:65:CC:57:70:ED:F7:E2:3D:6D:D5
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 018555EC85B76EC480CC9E06CA5FB9D45F88
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/9r7OoDGfLfXuU2XMV3Dt9-I9bdU.roa
Signing time: Tue 27 Dec 2022 23:30:41 +0000
ROA not before: Tue 27 Dec 2022 23:30:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210381
IP address blocks: 2a10:4646:50::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:ec:85:b7:6e:c4:80:cc:9e:06:ca:5f:b9:d4:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Dec 27 23:30:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6becea0319f2df5ee5365cc5770edf7e23d6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:da:5e:51:e6:ba:03:26:7b:27:40:6e:c0:
2f:cc:80:a0:97:de:36:3f:06:bc:c8:3e:94:34:d8:
dc:fe:cc:f4:88:44:91:b6:af:e3:88:ba:e6:d7:01:
00:4f:c0:e5:4d:2c:07:47:66:8b:3b:95:7a:13:53:
1e:23:77:1c:6a:4a:2b:70:d7:38:19:77:f4:63:fc:
ac:6d:a3:c0:f7:1e:12:9c:ed:9e:b1:04:0b:27:59:
73:4f:7e:6b:0b:b2:af:2c:e5:4f:0c:8c:a8:27:21:
4b:ab:a8:c1:8c:9c:31:78:c2:9a:59:1c:2e:e1:75:
05:2f:8f:b8:28:5d:0b:e1:5e:dc:1b:da:d5:fb:92:
a5:a0:68:f0:6c:b1:38:35:1c:1e:fa:38:93:37:1f:
aa:9e:85:8a:85:01:d9:57:22:8c:bf:a6:34:e3:05:
e8:99:34:61:65:64:ca:74:05:c7:51:72:9b:50:b9:
74:79:9c:39:54:aa:fb:3e:f1:3e:ef:0d:b7:3f:95:
03:ef:8c:5a:d7:a4:b0:e7:ec:f9:b1:3f:08:9f:8a:
d9:b4:20:28:43:c8:e1:c4:2e:50:bc:b6:9d:33:43:
25:73:91:91:3d:26:e4:a5:12:eb:b6:e8:3e:bf:a2:
d6:ca:b5:25:05:72:43:55:57:33:5c:62:4a:ca:19:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:CE:A0:31:9F:2D:F5:EE:53:65:CC:57:70:ED:F7:E2:3D:6D:D5
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/9r7OoDGfLfXuU2XMV3Dt9-I9bdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:50::/44
Signature Algorithm: sha256WithRSAEncryption
c6:1b:83:a7:ab:2a:f1:99:b9:15:60:65:d5:ad:76:e3:3c:3d:
6b:0c:48:c7:53:21:44:5d:db:1b:fe:6f:b6:5e:a9:6e:23:a1:
a1:eb:31:b3:6a:3d:51:aa:2e:5f:bc:a5:e8:d4:aa:60:59:8f:
58:4e:c9:06:64:f7:a6:ad:fd:4e:6a:17:92:8d:32:3c:32:87:
6a:03:d9:79:6e:f3:64:52:80:dc:90:ef:b8:51:3a:ad:c0:67:
70:43:3b:1d:ec:35:bb:6e:e9:b4:d3:dc:0a:9d:f3:fc:3f:3f:
5f:ac:7c:ab:fa:cf:64:d0:85:0d:b5:7a:92:a3:f4:77:18:08:
69:c2:29:54:3a:41:26:69:e9:f5:68:0a:60:c2:07:c1:e6:be:
04:5c:09:82:13:40:c3:c1:c3:d0:c4:1d:7f:37:e5:86:11:e3:
f1:20:ef:38:09:a5:51:95:07:4a:14:08:e9:82:05:98:4b:7c:
bd:87:9d:d7:0f:74:a8:2f:6b:2e:cf:a6:f6:3a:f1:ea:bd:8b:
1f:fc:1d:00:0d:c0:f2:ae:0e:03:d5:27:b3:8b:d6:3e:7d:43:
5f:ad:e8:76:68:20:f3:2b:db:8b:e4:9a:4b:05:0d:66:dc:a3:
89:de:30:01:cc:34:54:51:9c:8a:5d:3f:b2:aa:ed:78:9f:69:
67:e0:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org