Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa
File: nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa (raw, json)
Hash identifier: zNPO5aV7jH/Ty3knXMUu/FXGYw+WVoREgToIoe7LDx4=
Subject key identifier: 9D:F2:04:FC:03:57:E0:DC:B2:3D:7A:3B:46:2D:AE:CD:C2:98:10:9D
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 05CB9451
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa
Signing time: Wed 04 May 2022 21:14:51 +0000
ROA not before: Wed 04 May 2022 21:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210864
IP address blocks: 2a10:4646:a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97227857 (0x5cb9451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: May 4 21:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df204fc0357e0dcb23d7a3b462daecdc298109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:0f:f8:cf:48:13:aa:28:a7:13:f1:0c:de:
cf:66:1d:ac:86:7c:a1:14:8f:b9:75:ce:14:71:06:
4a:2f:dd:8b:ad:e3:0a:23:fc:4e:5e:e9:0e:89:25:
b9:71:a1:27:27:fb:63:bb:2e:a6:e0:e4:85:a2:e9:
96:ba:e8:89:45:b4:8e:4f:f6:fd:1b:03:b9:5c:09:
2d:02:aa:10:d2:cb:ed:f4:13:7e:18:cc:f5:cb:ae:
7e:60:d3:e8:63:4a:5b:fc:7e:3a:ed:b2:57:a9:d5:
89:dd:3e:07:48:67:89:11:27:1b:5c:80:06:f2:26:
e8:a7:44:f5:db:58:40:33:2d:54:e4:e7:12:50:53:
1e:9f:ca:9f:bc:60:84:e9:8b:1a:24:f3:6a:e8:58:
85:4f:0c:69:2a:9c:81:d7:e6:3c:d5:fc:52:fd:2d:
35:44:45:76:4e:c9:6f:a6:11:35:67:d5:16:69:29:
41:e2:44:12:53:6e:3b:29:c0:e6:da:4b:51:ee:77:
ab:01:3f:cc:91:32:83:65:cb:0f:46:02:a2:2d:4c:
e7:01:88:b9:c2:d8:09:1f:5d:0d:02:4d:c5:51:88:
54:2e:44:e2:52:bd:7f:ca:5f:c5:13:8a:78:17:ce:
3f:89:8e:24:f9:38:6a:c3:d6:9e:91:a8:97:28:69:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:04:FC:03:57:E0:DC:B2:3D:7A:3B:46:2D:AE:CD:C2:98:10:9D
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:a0::/44
Signature Algorithm: sha256WithRSAEncryption
82:86:91:cc:d0:d0:09:b5:31:53:51:19:ce:69:ab:78:43:c2:
a7:e7:55:5a:9b:f9:7d:69:7c:7d:a2:17:b6:2b:69:55:25:6b:
99:43:8b:d6:0e:ff:61:93:05:e2:d5:58:d8:b9:3b:55:eb:3e:
9b:fe:dc:ea:21:f4:02:1c:6a:72:46:99:d8:34:b3:ae:29:fa:
a6:27:36:db:03:13:69:b0:68:80:fe:41:8e:e9:b8:2c:b1:58:
57:20:60:f7:c9:b4:19:a4:d2:f9:b8:66:cd:49:bd:25:57:f0:
1c:f8:94:ef:44:10:b1:1e:24:b0:4e:e7:d7:43:bc:05:0b:35:
ca:e2:e6:94:c2:1d:d5:71:b8:97:71:2c:98:7a:b5:7e:df:e6:
56:ff:d1:85:d1:66:05:9d:6b:a4:4e:25:e8:fa:4a:2d:68:2f:
36:e0:e7:b2:50:3a:1a:2f:be:77:6e:9b:b2:43:70:6d:99:25:
42:aa:ed:50:50:00:09:1c:80:0a:58:9f:83:1b:86:9a:34:72:
23:53:d7:4b:18:bc:09:18:b5:d6:ba:ad:9a:b6:98:e0:fa:6a:
b9:bc:06:9e:f0:19:c8:5f:ea:7b:42:df:aa:28:65:65:39:3e:
08:e2:8b:f3:52:98:a5:b7:d8:c6:1f:76:81:89:f9:e1:fe:a6:
d2:d3:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org