Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/vrXAYoJZpBwFjL7Ob-apevzbOco.roa
File: vrXAYoJZpBwFjL7Ob-apevzbOco.roa (raw, json)
Hash identifier: vY8aU0EECXyEwiK8H+dnJE8qeZ2jLXMz+O5Zwj15GgY=
Subject key identifier: BE:B5:C0:62:82:59:A4:1C:05:8C:BE:CE:6F:E6:A9:7A:FC:DB:39:CA
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 018471E06966BF1B50063C46D11D338E225D
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/vrXAYoJZpBwFjL7Ob-apevzbOco.roa
Signing time: Sun 13 Nov 2022 16:44:03 +0000
ROA not before: Sun 13 Nov 2022 16:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399486
IP address blocks: 2a10:4646:240::/44 maxlen: 44
2a10:4646:170::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:e0:69:66:bf:1b:50:06:3c:46:d1:1d:33:8e:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Nov 13 16:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beb5c0628259a41c058cbece6fe6a97afcdb39ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:ee:e1:13:48:a5:41:cd:f3:29:6f:6c:25:
03:f9:e7:b9:2a:0d:30:fe:2f:a2:f0:58:0c:b4:d5:
c1:e8:d9:de:dd:c5:cc:3a:74:72:9c:ea:7e:4d:46:
08:ea:f9:83:5d:a1:b2:23:45:ff:8d:15:03:4c:6f:
b0:36:ad:13:4a:8d:11:93:e1:b2:05:8f:5d:fa:be:
b6:6d:fd:c9:6a:c9:3e:5d:87:9a:9c:fd:da:54:ed:
3d:f1:8a:a3:7e:71:e6:4e:70:f6:b8:1d:65:57:c6:
fe:15:92:c7:d4:af:92:4b:cd:02:9d:a1:ea:93:3e:
91:43:17:db:53:65:ba:c6:e3:38:fb:f0:6f:70:2d:
f6:c9:dc:14:8f:c6:7c:cb:5e:d7:9e:41:f2:e4:87:
58:48:ae:dd:46:28:a4:4c:17:c3:05:3c:60:0f:cc:
70:9f:4c:a5:0d:81:23:55:f9:6f:44:70:7c:4f:d0:
73:14:d7:8d:fc:42:0e:55:4f:4b:01:0a:a9:e9:12:
7f:27:e9:74:97:f1:99:e7:f5:52:a2:3e:2e:18:d5:
65:7b:de:12:b4:cb:cb:95:9a:fc:5c:19:1c:a5:94:
40:b7:61:1d:00:13:b5:cd:25:36:2f:48:d7:3f:85:
4e:54:86:54:7a:ef:94:f5:97:79:4a:35:d0:3b:2f:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:C0:62:82:59:A4:1C:05:8C:BE:CE:6F:E6:A9:7A:FC:DB:39:CA
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/vrXAYoJZpBwFjL7Ob-apevzbOco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:170::/44
2a10:4646:240::/44
Signature Algorithm: sha256WithRSAEncryption
68:1a:69:b7:80:2b:15:2a:74:42:37:e4:14:9a:98:30:76:1a:
d2:9e:e8:24:97:56:61:de:22:59:5b:bb:f8:d4:d3:96:8f:c1:
60:33:89:1c:7c:de:23:96:0c:e6:22:01:63:77:14:7b:9d:77:
76:1e:56:9e:31:ae:f2:4b:08:61:81:b1:16:6a:b7:63:8f:29:
c7:32:a2:a3:ad:c3:2e:4c:06:27:d0:ac:d7:08:b5:0f:d2:2e:
e4:83:35:1f:95:1f:31:e4:11:60:a9:7b:73:66:06:80:98:1e:
01:24:b5:6e:23:ab:96:af:2a:70:18:fd:88:f7:a2:59:6b:6c:
0e:bc:15:c3:28:50:df:e4:ab:90:89:34:58:90:35:00:89:63:
ff:89:8e:55:b1:df:29:f4:5c:58:c5:ca:f0:59:9a:57:26:d7:
63:97:dc:c3:c9:93:a7:17:58:23:a3:19:b2:f1:9f:60:a2:48:
28:fc:46:c7:b2:80:0a:04:00:22:3f:4f:5a:34:76:1a:f0:b1:
a1:38:6e:82:62:61:68:56:68:64:d2:62:12:3d:06:2b:17:7c:
1a:16:6a:fe:af:90:a2:d7:84:51:cc:a2:47:0f:d0:9c:da:ac:
8f:66:23:01:0f:25:d6:04:98:d4:84:47:de:7e:c1:11:c3:51:
d2:a9:f5:a9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYRx4GlmvxtQBjxG0R0zjiJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MGQwZTE2NmZhNWYyYzc4NTViMDI0YjM1YzQ3ZTU3YmRj
NTU2NTYwHhcNMjIxMTEzMTY0NDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWI1YzA2MjgyNTlhNDFjMDU4Y2JlY2U2ZmU2YTk3YWZjZGIzOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUHu4RNIpUHN8ylvbCUD+ee5Kg0w
/i+i8FgMtNXB6Nne3cXMOnRynOp+TUYI6vmDXaGyI0X/jRUDTG+wNq0TSo0Rk+Gy
BY9d+r62bf3Jask+XYeanP3aVO098YqjfnHmTnD2uB1lV8b+FZLH1K+SS80CnaHq
kz6RQxfbU2W6xuM4+/BvcC32ydwUj8Z8y17XnkHy5IdYSK7dRiikTBfDBTxgD8xw
n0ylDYEjVflvRHB8T9BzFNeN/EIOVU9LAQqp6RJ/J+l0l/GZ5/VSoj4uGNVle94S
tMvLlZr8XBkcpZRAt2EdABO1zSU2L0jXP4VOVIZUeu+U9Zd5SjXQOy8/twIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL61wGKCWaQcBYy+zm/mqXr82znKMB8GA1UdIwQY
MBaAFLcNDhZvpfLHhVsCSzXEfle9xVZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHcwT0ZtLWw4c2VGV3dKTE5jUi1WNzNGVmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2M0YTgtMzQyYy00ZWQ5LWI1MjEt
YTJmYTQyZWMzNjJlLzEvdnJYQVlvSlpwQndGakw3T2ItYXBldnpiT2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jN2M0YTgtMzQyYy00ZWQ5LWI1MjEtYTJmYTQyZWMzNjJl
LzEvdHcwT0ZtLWw4c2VGV3dKTE5jUi1WNzNGVmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhBGRgFw
AwcEKhBGRgJAMA0GCSqGSIb3DQEBCwUAA4IBAQBoGmm3gCsVKnRCN+QUmpgwdhrS
nugkl1Zh3iJZW7v41NOWj8FgM4kcfN4jlgzmIgFjdxR7nXd2HlaeMa7ySwhhgbEW
ardjjynHMqKjrcMuTAYn0KzXCLUP0i7kgzUflR8x5BFgqXtzZgaAmB4BJLVuI6uW
rypwGP2I96JZa2wOvBXDKFDf5KuQiTRYkDUAiWP/iY5Vsd8p9FxYxcrwWZpXJtdj
l9zDyZOnF1gjoxmy8Z9gokgo/EbHsoAKBAAiP09aNHYa8LGhOG6CYmFoVmhk0mIS
PQYrF3waFmr+r5Ci14RRzKJHD9Cc2qyPZiMBDyXWBJjUhEfefsERw1HSqfWp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org