Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa
File: cXQ98IAg_MOjlrMvcVMLL3czuvM.roa (raw, json)
Hash identifier: 0I37AHWE55Qdg987d7GJpaknAQq0P3WWRx2iMS4Lurs=
Subject key identifier: 71:74:3D:F0:80:20:FC:C3:A3:96:B3:2F:71:53:0B:2F:77:33:BA:F3
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 018555EC8474ED4DA85EA8504D00281B75FC
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa
Signing time: Tue 27 Dec 2022 23:30:41 +0000
ROA not before: Tue 27 Dec 2022 23:30:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201480
IP address blocks: 2a10:4646:250::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:ec:84:74:ed:4d:a8:5e:a8:50:4d:00:28:1b:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Dec 27 23:30:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71743df08020fcc3a396b32f71530b2f7733baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1f:74:a1:18:c5:c4:01:80:72:66:6e:24:d0:
de:0b:0f:10:9d:21:a9:5f:20:0d:b2:6d:8b:da:91:
4d:38:da:e3:ce:51:01:0d:c7:b4:cc:b2:fa:bf:4e:
3b:57:0d:05:e9:b8:16:d2:14:4b:1c:0b:ba:c1:48:
55:a8:6f:18:7c:e5:87:4f:e6:2a:a3:4e:05:78:34:
35:68:fe:78:bf:c4:f2:a4:99:14:8c:99:24:2c:41:
0d:8d:1a:48:6d:e2:0a:8d:f4:2a:ae:12:82:9c:61:
c5:38:94:21:7e:ba:a2:76:5a:c1:de:0b:9e:9e:58:
c8:83:54:65:07:52:be:ed:47:c5:5b:23:4e:28:16:
e4:77:64:36:7a:73:56:55:b0:06:10:46:f3:39:89:
10:aa:10:0a:6d:4b:8f:b0:47:f6:03:c1:25:a5:35:
b5:a5:11:c5:d4:07:05:90:b8:02:01:6b:48:18:e5:
3a:e0:da:fb:63:07:17:16:3f:78:3c:ee:31:3a:18:
19:b8:6a:50:ac:53:cd:45:b4:a2:eb:a6:b3:2b:29:
f6:69:36:7d:96:41:62:7e:22:e5:20:c1:f2:a7:2c:
27:51:9f:9a:d6:40:28:f7:a2:49:50:69:9e:2e:c5:
82:f5:3c:51:b8:6d:d8:7a:5c:54:e7:4a:9e:90:d7:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:3D:F0:80:20:FC:C3:A3:96:B3:2F:71:53:0B:2F:77:33:BA:F3
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/cXQ98IAg_MOjlrMvcVMLL3czuvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:250::/44
Signature Algorithm: sha256WithRSAEncryption
71:cd:a1:ec:cc:c8:14:0f:99:45:bc:55:e5:c0:23:47:ef:61:
ca:48:f7:83:70:27:48:8b:ef:24:01:13:0b:f9:4b:cd:cb:2d:
1a:70:2f:31:60:68:1b:68:ee:91:41:12:9f:27:5c:0e:a0:97:
77:14:47:8c:ea:b4:5e:00:4e:c1:b9:16:8b:30:75:fc:ea:0b:
5a:4b:38:0e:ac:b7:fb:0f:97:5b:ef:43:c1:6a:9b:ca:a8:6a:
d2:30:79:b0:4a:47:10:eb:72:b8:e0:a4:d7:9d:44:58:8d:51:
89:05:5d:ec:7c:e8:63:92:68:44:e2:04:78:e2:6e:7e:be:d0:
d0:02:d4:5f:53:85:0e:96:79:2c:66:46:d2:b7:1b:95:f0:92:
f2:bc:62:37:64:05:35:89:a1:89:8c:47:14:9b:f6:15:b0:fe:
15:09:d8:c7:20:8b:23:8a:51:2d:d4:e4:80:0a:d8:bc:7a:de:
b7:32:27:e0:be:a3:9a:6e:d5:cb:66:ed:95:5c:3b:c1:e4:b8:
dd:c1:61:d8:b9:7f:2f:fd:91:2f:f1:14:69:3a:dc:46:dd:eb:
08:f8:8d:06:46:31:51:50:5b:34:60:e5:a2:b0:47:41:6e:c5:
fc:2d:96:af:ef:7c:fd:28:d5:8b:a7:0f:24:70:29:4f:57:0d:
00:95:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org