Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/tsv28oUx8QVd_sXdUqjy4FTt-fw.roa
File: tsv28oUx8QVd_sXdUqjy4FTt-fw.roa (raw, json)
Hash identifier: ANvoP7Px/D7EXNmQbhWIOcuihUR8Nb4TU7td8IH9lFI=
Subject key identifier: B6:CB:F6:F2:85:31:F1:05:5D:FE:C5:DD:52:A8:F2:E0:54:ED:F9:FC
Certificate issuer: /CN=ee748659524ec838f8dbba18af8306abe443285b
Certificate serial: 0185711513F1E6B74ECC49D2A704E062C1F6
Authority key identifier: EE:74:86:59:52:4E:C8:38:F8:DB:BA:18:AF:83:06:AB:E4:43:28:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nSGWVJOyDj427oYr4MGq-RDKFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/tsv28oUx8QVd_sXdUqjy4FTt-fw.roa
Signing time: Mon 02 Jan 2023 06:04:44 +0000
ROA not before: Mon 02 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56786
IP address blocks: 2a10:c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:13:f1:e6:b7:4e:cc:49:d2:a7:04:e0:62:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee748659524ec838f8dbba18af8306abe443285b
Validity
Not Before: Jan 2 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6cbf6f28531f1055dfec5dd52a8f2e054edf9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:c9:76:5b:7d:22:19:e8:50:b8:9b:e6:fa:
53:57:14:df:24:bf:ff:9e:c6:fa:f9:db:b4:6d:a3:
98:c0:5f:49:71:c6:5d:18:b4:92:fb:c8:53:39:b1:
c9:f8:c2:db:44:c5:28:1b:b3:57:44:33:49:93:2e:
1d:e2:35:8b:9f:5c:7c:fd:72:06:14:98:31:1e:ff:
3c:ca:20:cc:8d:fc:1f:2a:49:02:16:03:4a:45:f0:
02:04:f9:74:a2:20:35:8c:c8:c3:9f:ec:c0:99:d0:
4a:71:1d:34:8f:02:36:86:59:0f:54:15:4d:9e:02:
aa:a5:cd:f2:b9:b2:af:29:90:44:64:ce:3f:06:f1:
3d:9a:d6:37:6e:8c:cc:9e:71:86:56:20:30:f5:42:
aa:a2:62:4b:fe:50:2e:a6:f7:85:e9:88:7b:6a:0d:
3e:70:17:41:09:db:e9:61:64:f1:58:e4:e5:1d:f2:
35:5c:96:a2:fe:31:9f:67:32:ba:77:3a:dc:56:88:
0f:a6:8f:74:09:dc:98:6e:4d:67:c9:7f:17:ee:bf:
d0:ac:2d:c3:5b:17:45:92:df:aa:69:bc:96:85:fc:
ff:0e:a3:b1:f9:a3:9b:8a:de:09:39:ec:46:b7:b2:
a4:67:72:43:76:be:e1:30:cc:0c:5d:f3:9d:22:4b:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:F6:F2:85:31:F1:05:5D:FE:C5:DD:52:A8:F2:E0:54:ED:F9:FC
X509v3 Authority Key Identifier:
keyid:EE:74:86:59:52:4E:C8:38:F8:DB:BA:18:AF:83:06:AB:E4:43:28:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nSGWVJOyDj427oYr4MGq-RDKFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/tsv28oUx8QVd_sXdUqjy4FTt-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/7nSGWVJOyDj427oYr4MGq-RDKFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c80::/29
Signature Algorithm: sha256WithRSAEncryption
ac:7e:00:ad:83:8f:2a:e5:17:3c:0c:b4:68:f1:a8:1f:45:d9:
09:1e:44:4e:b6:30:bb:28:29:ba:15:93:52:08:dc:8b:c7:7c:
49:55:3f:e2:aa:b0:ed:3d:d0:28:5c:0c:4c:55:0b:00:1b:43:
19:a5:87:25:02:84:a1:74:d9:48:f3:c1:78:df:81:57:8b:1a:
42:2a:80:f8:9b:e0:d9:d7:70:5f:06:91:ad:26:ed:4f:14:76:
3e:c3:21:e7:27:ac:92:6d:5b:e2:0f:ca:65:f8:6b:67:62:a3:
03:6b:70:5f:1e:be:0a:e4:28:b3:03:ab:55:13:9b:9b:10:bb:
d7:e5:26:9a:88:de:40:ad:23:47:78:04:65:6a:b1:ff:ae:5e:
17:9c:54:1c:ff:79:0b:c5:64:c4:c2:cb:4f:45:23:e5:dc:60:
9b:6c:b6:f7:ec:c0:4e:2e:10:60:b4:f5:48:25:87:93:18:d8:
a4:9f:7c:ab:7a:f4:28:f3:01:6a:bf:a9:17:bf:7f:1a:1d:6d:
de:1b:9e:b7:92:55:27:ab:aa:39:13:6f:11:c8:46:5b:16:c0:
a5:53:a0:0e:78:af:d1:3d:64:2b:c0:63:a8:ea:6d:e7:aa:17:
c3:1d:bf:a2:ff:be:e3:3a:a6:d0:e4:03:ac:69:44:85:db:dd:
a8:d1:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org