Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/C9KnMPMIp7uH2s6jFaxkTjXcRUA.roa
File: C9KnMPMIp7uH2s6jFaxkTjXcRUA.roa (raw, json)
Hash identifier: btd0g+c4FMTLVRRsV03HdkvgjUh0w4xaR+FAp4m1c8Y=
Subject key identifier: 0B:D2:A7:30:F3:08:A7:BB:87:DA:CE:A3:15:AC:64:4E:35:DC:45:40
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 04A5CDFB
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/C9KnMPMIp7uH2s6jFaxkTjXcRUA.roa
Signing time: Sat 01 Jan 2022 10:03:15 +0000
ROA not before: Sat 01 Jan 2022 10:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211617
IP address blocks: 2a10:4646:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77975035 (0x4a5cdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Jan 1 10:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd2a730f308a7bb87dacea315ac644e35dc4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:f7:dd:ee:78:6a:74:87:f5:82:82:cb:f7:
f9:0b:16:fd:21:20:10:0b:18:eb:75:b8:90:0a:05:
79:cc:f7:6d:aa:3d:cb:c8:ba:a3:a2:76:64:d2:7a:
cd:a0:7f:f9:ea:f6:b6:f2:75:9d:65:01:b4:cb:b4:
41:76:7f:88:16:0d:60:74:cc:fa:3d:62:43:18:6d:
d4:d2:db:e3:2d:81:8c:63:6a:6d:21:d1:fa:34:1d:
97:61:7c:c7:90:b8:96:01:0c:67:32:c8:66:4c:c2:
1f:ab:b5:f2:23:56:ab:df:af:e0:5f:cc:39:52:7c:
d8:f9:60:9e:da:61:01:68:f1:55:99:66:12:6a:ec:
2e:5b:87:e3:f0:80:bc:19:7d:aa:3c:3c:6a:70:1d:
89:7e:a2:aa:ba:00:36:dd:fe:38:d6:a2:58:9b:ff:
c3:77:74:c7:16:32:96:eb:d5:34:6c:87:28:3f:e7:
0d:86:8a:eb:bf:d2:bd:0f:7f:5e:f2:a8:dc:08:3f:
70:ec:95:63:e8:cc:dd:5e:85:e7:3c:a1:65:a4:84:
1f:23:88:f4:2f:d9:c5:5c:54:0d:7b:40:df:64:b6:
ea:71:b0:0e:fb:d5:ea:04:8a:27:85:31:3d:0c:45:
2d:ce:cb:50:f3:2f:ec:ee:18:e8:86:b0:32:78:4e:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:A7:30:F3:08:A7:BB:87:DA:CE:A3:15:AC:64:4E:35:DC:45:40
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/C9KnMPMIp7uH2s6jFaxkTjXcRUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:40::/44
Signature Algorithm: sha256WithRSAEncryption
61:a1:47:ed:1d:5d:e8:f8:f3:2e:f2:fa:64:a8:a4:d1:9f:25:
1e:b9:e4:c8:3f:bf:66:be:11:14:a3:b0:83:5b:27:a1:f2:28:
d0:6c:5d:6a:33:cb:d5:10:9c:8c:46:7e:6f:3e:fe:de:91:ca:
d5:ce:31:af:40:3f:e5:b5:f0:af:af:f2:02:25:25:60:20:98:
8f:45:3c:07:79:0a:c6:a7:ed:3d:de:57:88:a1:29:52:55:09:
05:ad:97:a7:ca:98:95:a3:a2:43:12:3f:fa:f4:c1:a8:46:1e:
6d:d2:b1:9f:df:8f:2b:63:0a:66:87:1c:e1:c0:cb:b6:54:08:
31:76:2b:9f:c9:e5:73:ac:80:9c:0c:8b:98:54:99:f1:b1:c5:
d2:dc:9d:a8:a7:6e:a0:31:b4:2f:9c:43:6d:b7:b3:a6:bd:a7:
a4:25:20:62:bf:39:65:94:3b:92:cc:52:92:f0:e2:ad:75:4d:
e1:f7:08:e3:a6:0d:1f:ae:70:f1:1b:19:ab:92:23:e4:6f:a6:
cc:e7:d6:1c:23:ab:6f:b1:22:ef:dd:63:34:7a:a2:fe:77:b0:
dc:89:05:5c:56:b2:c5:03:78:e5:66:16:36:7e:6d:85:dc:66:
68:1d:20:38:05:33:85:f3:49:92:f6:aa:ff:9d:07:71:d7:f6:
be:cd:cb:d4
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBKXN+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzBkMGUxNjZmYTVmMmM3ODU1YjAyNGIzNWM0N2U1N2JkYzU1NjU2MB4XDTIyMDEw
MTEwMDMxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGJkMmE3MzBmMzA4
YTdiYjg3ZGFjZWEzMTVhYzY0NGUzNWRjNDU0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcI993ueGp0h/WCgsv3+QsW/SEgEAsY63W4kAoFecz3bao9
y8i6o6J2ZNJ6zaB/+er2tvJ1nWUBtMu0QXZ/iBYNYHTM+j1iQxht1NLb4y2BjGNq
bSHR+jQdl2F8x5C4lgEMZzLIZkzCH6u18iNWq9+v4F/MOVJ82PlgntphAWjxVZlm
EmrsLluH4/CAvBl9qjw8anAdiX6iqroANt3+ONaiWJv/w3d0xxYyluvVNGyHKD/n
DYaK67/SvQ9/XvKo3Ag/cOyVY+jM3V6F5zyhZaSEHyOI9C/ZxVxUDXtA32S26nGw
DvvV6gSKJ4UxPQxFLc7LUPMv7O4Y6IawMnhOEIkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQL0qcw8winu4fazqMVrGRONdxFQDAfBgNVHSMEGDAWgBS3DQ4Wb6Xyx4Vb
Aks1xH5XvcVWVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R3ME9GbS1sOHNlRld3SkxOY1ItVjczRlZsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvYzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8x
L0M5S25NUE1JcDd1SDJzNmpGYXhrVGpYY1JVQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
YzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8xL3R3ME9GbS1sOHNl
Rld3SkxOY1ItVjczRlZsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoQRkYAQDANBgkqhkiG9w0BAQsF
AAOCAQEAYaFH7R1d6PjzLvL6ZKik0Z8lHrnkyD+/Zr4RFKOwg1snofIo0GxdajPL
1RCcjEZ+bz7+3pHK1c4xr0A/5bXwr6/yAiUlYCCYj0U8B3kKxqftPd5XiKEpUlUJ
Ba2Xp8qYlaOiQxI/+vTBqEYebdKxn9+PK2MKZocc4cDLtlQIMXYrn8nlc6yAnAyL
mFSZ8bHF0tydqKduoDG0L5xDbbezpr2npCUgYr85ZZQ7ksxSkvDirXVN4fcI46YN
H65w8RsZq5Ij5G+mzOfWHCOrb7Ei791jNHqi/new3IkFXFayxQN45WYWNn5thdxm
aB0gOAUzhfNJkvaq/50Hcdf2vs3L1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org