Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa
File: OlR5am2uiatO7gmC0OvfjmbV0ho.roa (raw, json)
Hash identifier: wwNxI0QHVPK1H87+5g66ZUe8k81uMPi8oXF6sGkGhTQ=
Subject key identifier: 3A:54:79:6A:6D:AE:89:AB:4E:EE:09:82:D0:EB:DF:8E:66:D5:D2:1A
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 04AD03D5
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa
Signing time: Sat 01 Jan 2022 10:03:19 +0000
ROA not before: Sat 01 Jan 2022 10:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212124
IP address blocks: 2a10:4646:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78447573 (0x4ad03d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Jan 1 10:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a54796a6dae89ab4eee0982d0ebdf8e66d5d21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:58:bf:b1:72:da:6e:cd:9a:96:ff:55:c7:
2e:37:2e:d0:32:69:55:97:4e:88:b6:e0:ee:f8:69:
78:26:fb:dd:55:4a:b1:a0:f3:6d:0e:e4:3e:90:90:
bb:bb:a7:a4:ec:76:6a:af:7f:b4:03:1c:1b:98:28:
07:29:dd:ea:e8:37:eb:5b:d2:27:18:a2:18:90:d2:
b1:72:2a:01:87:22:27:3c:0c:65:87:97:77:fe:37:
39:a3:1a:99:6a:81:d0:53:c3:a5:01:b6:a1:46:13:
ab:cc:74:ac:80:c4:5a:8d:1a:db:bd:5a:c3:4c:9e:
63:92:2c:95:19:7f:1e:3a:ce:17:80:e2:61:c6:be:
a1:5a:90:01:78:a5:2f:da:cd:83:a5:bf:0e:b7:87:
9e:e6:3a:63:45:7e:bd:59:4e:29:6b:eb:d3:d6:b3:
bc:4b:3d:e9:3e:25:08:12:c0:62:8f:82:fb:2b:4b:
ff:fe:c3:77:53:5d:d5:3b:72:38:fb:ce:0e:93:d0:
0b:20:ae:df:cb:a4:81:e2:8d:89:6a:e5:f0:54:ab:
c4:53:e4:c6:3a:85:be:ba:82:bc:05:08:85:b3:b7:
7d:0e:46:04:8f:50:f9:f2:6c:60:2a:c0:c2:78:ae:
9e:b7:af:48:b2:2d:ed:aa:15:f8:ba:46:f9:12:f0:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:79:6A:6D:AE:89:AB:4E:EE:09:82:D0:EB:DF:8E:66:D5:D2:1A
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/OlR5am2uiatO7gmC0OvfjmbV0ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:10::/48
Signature Algorithm: sha256WithRSAEncryption
20:4e:a5:a8:ba:bf:41:ac:11:9f:42:a2:46:4f:5f:bf:91:a7:
5c:d1:6c:df:37:cc:44:84:c1:92:c1:24:85:1e:7f:b2:12:cf:
f1:93:e7:e0:d0:28:7f:e8:28:75:a5:44:1a:a9:42:8e:55:ac:
f4:5c:c1:bb:6a:a4:e5:89:9d:35:20:84:97:b1:19:71:fc:32:
0b:a7:71:4a:ee:43:9b:d9:6a:04:e8:09:d3:d2:3b:00:37:7e:
b4:ae:28:22:d8:4c:84:29:56:5b:4f:be:3b:34:34:08:95:12:
04:7f:96:7a:3a:13:76:e8:90:8b:d0:8c:0d:37:c4:b9:d6:06:
ea:ff:d7:42:18:22:9b:d1:65:dc:47:56:56:f9:ed:ca:38:29:
ec:60:ad:b6:bb:9f:f4:c2:d3:8a:d9:61:b0:b7:b4:b2:0b:8b:
b0:79:d9:fd:87:22:cd:0c:78:37:60:a7:72:09:67:dd:e8:f5:
ce:36:a3:de:61:eb:14:2d:d1:3e:b1:83:d3:d1:ac:cf:9e:ce:
0c:61:27:4e:8d:6a:94:5f:94:4d:c2:74:ec:22:31:55:13:1d:
74:e4:b1:86:29:43:7b:b9:cb:8a:9c:7e:31:2c:fd:d3:82:91:
2c:d9:b1:fe:a3:1a:cb:c3:30:41:f7:54:73:3c:51:e3:65:8f:
67:68:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org