Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa
File: TUwHhERJL27CzrVgke3jv16vCUs.roa (raw, json)
Hash identifier: Q+Rlt18bzcd4qfM3W5oHY32LZgBRppGKxofWG8aszqw=
Subject key identifier: 4D:4C:07:84:44:49:2F:6E:C2:CE:B5:60:91:ED:E3:BF:5E:AF:09:4B
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 049EF932
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa
Signing time: Sat 01 Jan 2022 10:03:11 +0000
ROA not before: Sat 01 Jan 2022 10:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52073
IP address blocks: 2a10:4646:120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77527346 (0x49ef932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Jan 1 10:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d4c078444492f6ec2ceb56091ede3bf5eaf094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:24:3a:7f:4a:b1:2c:3e:f9:03:57:10:c1:
6e:a4:cd:ea:ea:09:4e:83:7d:42:98:67:fa:1c:17:
5d:5d:0d:cd:37:04:6b:92:7f:ee:c7:68:ec:b0:07:
64:8f:93:14:cf:fc:76:53:22:c6:b3:b3:00:8e:e5:
65:15:96:eb:57:c1:66:69:49:0e:38:f0:80:f1:80:
77:89:79:75:11:ec:b4:7d:d5:02:b7:fc:dc:6f:60:
dc:99:7d:e2:8b:51:52:07:ec:af:26:ee:4c:73:9a:
2a:cd:35:d5:44:ed:5d:09:eb:9a:78:ed:ee:a7:96:
74:dd:3b:1c:83:95:21:e7:a3:42:ab:a8:c5:43:3d:
15:85:b2:5f:3e:34:a9:66:30:86:68:29:64:ab:40:
7d:d2:f1:89:1e:4b:3f:6c:06:ec:4a:41:3a:1e:08:
c0:5f:c8:d5:28:73:0e:72:6a:80:14:33:b8:cc:c2:
3c:34:5a:11:73:29:82:c8:25:9b:d9:85:c8:7b:4c:
fb:11:21:26:1e:ea:85:fe:51:14:f4:75:99:a1:c6:
12:78:a0:41:7f:12:1c:57:4a:26:35:29:c4:68:03:
f5:a2:e8:f2:b4:3e:70:da:74:8a:a3:1c:e1:e4:97:
bc:92:7a:2a:a4:59:4b:1d:1f:53:da:b5:b6:f9:65:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:07:84:44:49:2F:6E:C2:CE:B5:60:91:ED:E3:BF:5E:AF:09:4B
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/TUwHhERJL27CzrVgke3jv16vCUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:120::/44
Signature Algorithm: sha256WithRSAEncryption
bc:77:e5:a9:67:98:45:34:08:1f:a2:0d:9f:d3:30:3c:c2:08:
9c:15:37:19:15:e0:4b:a3:64:ad:cf:f8:70:97:ed:bf:08:eb:
99:93:91:a0:5b:f8:de:d8:3b:75:88:b4:d2:1b:70:13:d7:3e:
b5:ba:b7:d4:39:c6:74:1d:86:14:2c:77:11:d4:85:12:ab:c3:
eb:b0:d5:0f:77:66:ff:ff:f1:fc:d9:ef:6d:5c:6b:27:45:04:
b3:f1:29:c5:79:ba:e5:36:07:2e:71:d4:dd:1c:2a:b9:e3:a3:
6e:60:0b:0f:e4:c5:ac:74:3d:f4:53:d8:33:e0:79:92:0c:79:
b6:b6:5a:0f:85:85:5b:b8:ab:5f:45:17:12:ea:52:65:15:1e:
e2:0b:e7:6b:e1:f5:50:a6:04:22:0f:d9:85:cd:c3:b5:b3:ab:
da:2f:69:e1:2c:cf:a4:d6:e7:21:09:1b:67:78:04:5f:09:08:
67:e3:9f:f8:5a:f7:c1:c9:5a:e5:53:81:49:1e:e9:e4:d4:21:
9f:39:43:17:78:56:8b:c6:53:8f:d2:f7:75:ab:75:ba:62:69:
3f:7f:2d:32:10:7c:7c:4f:fe:f2:e3:e9:e3:b6:91:97:01:a8:
55:82:53:1d:05:2e:4a:60:93:97:d5:57:c6:63:57:1d:c3:82:
cc:71:50:7b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBJ75MjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzBkMGUxNjZmYTVmMmM3ODU1YjAyNGIzNWM0N2U1N2JkYzU1NjU2MB4XDTIyMDEw
MTEwMDMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQ0YzA3ODQ0NDQ5
MmY2ZWMyY2ViNTYwOTFlZGUzYmY1ZWFmMDk0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWVJDp/SrEsPvkDVxDBbqTN6uoJToN9Qphn+hwXXV0NzTcE
a5J/7sdo7LAHZI+TFM/8dlMixrOzAI7lZRWW61fBZmlJDjjwgPGAd4l5dRHstH3V
Arf83G9g3Jl94otRUgfsrybuTHOaKs011UTtXQnrmnjt7qeWdN07HIOVIeejQquo
xUM9FYWyXz40qWYwhmgpZKtAfdLxiR5LP2wG7EpBOh4IwF/I1ShzDnJqgBQzuMzC
PDRaEXMpgsglm9mFyHtM+xEhJh7qhf5RFPR1maHGEnigQX8SHFdKJjUpxGgD9aLo
8rQ+cNp0iqMc4eSXvJJ6KqRZSx0fU9q1tvllXOsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRNTAeEREkvbsLOtWCR7eO/Xq8JSzAfBgNVHSMEGDAWgBS3DQ4Wb6Xyx4Vb
Aks1xH5XvcVWVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R3ME9GbS1sOHNlRld3SkxOY1ItVjczRlZsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvYzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8x
L1RVd0hoRVJKTDI3Q3pyVmdrZTNqdjE2dkNVcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
YzdjNGE4LTM0MmMtNGVkOS1iNTIxLWEyZmE0MmVjMzYyZS8xL3R3ME9GbS1sOHNl
Rld3SkxOY1ItVjczRlZsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoQRkYBIDANBgkqhkiG9w0BAQsF
AAOCAQEAvHflqWeYRTQIH6INn9MwPMIInBU3GRXgS6Nkrc/4cJftvwjrmZORoFv4
3tg7dYi00htwE9c+tbq31DnGdB2GFCx3EdSFEqvD67DVD3dm///x/NnvbVxrJ0UE
s/EpxXm65TYHLnHU3RwqueOjbmALD+TFrHQ99FPYM+B5kgx5trZaD4WFW7irX0UX
EupSZRUe4gvna+H1UKYEIg/Zhc3DtbOr2i9p4SzPpNbnIQkbZ3gEXwkIZ+Of+Fr3
wcla5VOBSR7p5NQhnzlDF3hWi8ZTj9L3dat1umJpP38tMhB8fE/+8uPp47aRlwGo
VYJTHQUuSmCTl9VXxmNXHcOCzHFQew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org