Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cRrBLv1VnNDiRkLB2XCuuGwMKSg.roa
File: cRrBLv1VnNDiRkLB2XCuuGwMKSg.roa (raw, json)
Hash identifier: tc8FfGAoC15g2OV4+eaxON/IhHux5nmy9XKYPyUfIsQ=
Subject key identifier: 71:1A:C1:2E:FD:55:9C:D0:E2:46:42:C1:D9:70:AE:B8:6C:0C:29:28
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 018471E06899947C9516DE17DCA5ADE7A28D
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cRrBLv1VnNDiRkLB2XCuuGwMKSg.roa
Signing time: Sun 13 Nov 2022 16:44:02 +0000
ROA not before: Sun 13 Nov 2022 16:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210864
IP address blocks: 2a10:4646:a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:e0:68:99:94:7c:95:16:de:17:dc:a5:ad:e7:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Nov 13 16:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=711ac12efd559cd0e24642c1d970aeb86c0c2928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:1a:9b:6b:52:42:5f:48:0b:d6:d8:5e:8e:
67:e4:e7:4d:1b:22:5a:3d:f4:9c:c2:37:79:45:94:
8b:56:ad:e1:79:cf:b0:b0:2f:71:34:f2:25:3a:dc:
c8:ac:03:2c:5d:07:2a:35:6f:4a:6b:be:94:66:00:
2b:83:6a:2e:bd:db:10:ea:df:bd:b2:bb:ae:6f:85:
c4:ee:fd:4f:80:61:58:74:95:e8:90:7e:b4:85:c6:
ea:4b:dc:35:8f:d5:72:23:47:33:f2:24:be:89:62:
77:58:a0:bb:48:a6:a3:3a:65:f8:7e:a2:18:6a:92:
30:65:05:0b:fa:44:50:65:2e:30:0e:be:dc:74:ce:
10:53:c3:4b:ba:8c:76:bd:95:f2:7f:0d:66:57:c1:
d8:f2:b3:1b:74:91:28:c1:49:ce:00:a8:a7:90:dc:
0e:0a:d8:fb:07:89:76:66:a4:28:25:2b:2c:10:41:
44:e0:22:1c:d1:48:1f:99:d1:50:b0:23:1a:b2:65:
54:b7:ff:5c:f1:17:0a:d6:b3:0c:55:64:29:88:f9:
65:23:a4:31:90:ac:92:4f:99:4b:4b:f8:58:49:32:
16:e4:0e:15:c3:97:41:42:8e:af:81:33:81:54:f9:
43:08:fe:73:6b:9c:28:e1:ce:c0:c5:68:00:f7:c8:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:C1:2E:FD:55:9C:D0:E2:46:42:C1:D9:70:AE:B8:6C:0C:29:28
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cRrBLv1VnNDiRkLB2XCuuGwMKSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:a0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:c4:a5:6c:2a:80:9f:1f:21:2d:cb:93:37:92:96:ed:98:0c:
04:f4:b8:f6:1f:1b:c4:ec:d9:5a:ba:f2:70:04:46:f6:e0:93:
63:da:2d:79:91:b7:a6:56:8e:8a:06:7a:92:c6:b3:c0:f7:e6:
2e:8e:a6:fa:1d:0b:a8:ce:33:9d:57:93:23:10:ce:fd:83:62:
33:aa:01:99:3f:e0:07:9b:d6:20:d6:58:ec:89:17:9b:e1:ba:
b6:98:95:e5:11:1b:fc:d5:fa:09:c1:b5:bc:b8:e9:00:b5:0e:
34:ce:8b:4e:5b:10:e5:43:66:43:68:de:03:90:7a:84:4a:29:
e5:41:e3:f0:d7:fe:04:77:64:33:6f:af:f1:d5:57:a1:90:d7:
0d:58:6e:fc:fe:50:b1:db:d9:58:27:4d:bc:21:cb:28:7a:c8:
e2:bd:a3:65:46:29:db:be:db:38:48:cf:3e:e3:2d:ca:fa:30:
bc:26:f7:e4:ae:82:b0:76:33:2f:3f:04:2b:86:d7:0c:f1:24:
07:86:f3:78:3a:5d:81:3f:49:aa:3f:bf:fc:96:23:8e:b7:b2:
d8:82:7b:17:4d:97:0b:69:a2:77:57:70:a4:e9:b5:20:72:c7:
bd:ea:db:07:0c:da:5f:42:29:2a:8e:4a:f5:c6:28:09:5d:f7:
71:cc:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org