Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/7LYGv9F2z56TRW_PMz4FHHAWAH4.roa
File: 7LYGv9F2z56TRW_PMz4FHHAWAH4.roa (raw, json)
Hash identifier: PGkOP2etEuZhznD/MZez5c1CwYiGGu9cThFVCZq9sRo=
Subject key identifier: EC:B6:06:BF:D1:76:CF:9E:93:45:6F:CF:33:3E:05:1C:70:16:00:7E
Certificate issuer: /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial: 01857331441AFEDE951EE99781B8D08FBD5B
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/7LYGv9F2z56TRW_PMz4FHHAWAH4.roa
Signing time: Mon 02 Jan 2023 15:54:46 +0000
ROA not before: Mon 02 Jan 2023 15:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211535
IP address blocks: 2a10:4741::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:31:44:1a:fe:de:95:1e:e9:97:81:b8:d0:8f:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Validity
Not Before: Jan 2 15:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecb606bfd176cf9e93456fcf333e051c7016007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:10:4c:34:21:d2:d1:0f:d8:28:c1:26:70:
ce:d0:c5:80:11:9a:f6:e5:0a:92:a4:85:75:35:eb:
c3:a2:ee:40:f0:57:27:1d:3e:c7:fc:8f:12:69:1e:
19:e3:17:c8:d8:a1:d0:c6:2d:e2:44:97:99:cc:4a:
e2:33:14:e9:e8:24:8d:a0:86:4a:66:87:34:bf:d9:
f3:0c:94:e0:cb:17:1f:d7:aa:e7:3e:d5:ca:7a:85:
ab:3c:42:72:b6:eb:4c:97:ee:ee:cd:e9:28:8c:49:
b1:86:19:a5:6c:c3:b0:f8:55:17:12:55:fe:ca:10:
1f:a9:58:4a:52:3d:dc:85:ae:e1:4b:74:23:f8:75:
10:e7:a7:bf:fb:05:da:07:71:47:34:56:43:16:96:
12:0c:13:33:4c:28:c5:0c:cc:13:fc:85:43:1f:e5:
c2:29:ed:9e:99:af:f6:90:6d:56:2a:f2:93:cd:a7:
e6:c4:46:8a:32:be:f6:10:23:ca:08:7d:33:9d:46:
5c:d8:01:53:f4:d1:45:a8:1a:1a:73:77:95:bf:52:
7a:b7:16:2d:34:84:b9:10:4e:41:fa:a5:1c:14:e1:
df:15:2f:4b:b1:f4:5f:fe:5e:dd:29:e7:a1:cd:08:
f7:c2:63:79:c7:dc:ed:d1:76:d4:5e:5a:81:1b:2a:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:06:BF:D1:76:CF:9E:93:45:6F:CF:33:3E:05:1C:70:16:00:7E
X509v3 Authority Key Identifier:
keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/7LYGv9F2z56TRW_PMz4FHHAWAH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4741::/44
Signature Algorithm: sha256WithRSAEncryption
58:f1:68:eb:f8:8b:ae:6b:b7:1f:1d:5c:ab:b7:6d:12:da:96:
d7:b1:d0:da:46:ff:80:1b:d3:7e:a7:4f:48:3a:7b:a3:b8:98:
6b:e0:8e:ff:2f:58:dc:1b:72:50:d0:9e:4c:e0:bb:92:61:98:
d6:39:3e:4b:41:37:45:b4:98:5f:51:fe:ca:11:8d:2d:4b:cc:
ee:2d:00:a0:73:18:10:a0:a9:ba:ea:76:61:bd:82:0e:d2:e1:
21:5f:cd:ea:7d:fe:25:f1:4d:64:f6:49:f4:30:6f:1b:9c:56:
01:aa:90:26:39:2f:0a:dd:cf:f3:83:ae:ef:4d:f8:07:3e:c7:
8f:3d:6f:4e:9c:3e:bd:33:d0:31:1e:21:8e:95:fb:96:25:6f:
a8:0e:63:18:19:e6:68:9c:83:e5:d6:48:f0:35:6b:e7:fb:5f:
5c:36:b6:ca:b7:23:c3:5b:85:02:ca:aa:ce:44:1d:54:e2:70:
b7:41:b8:93:58:00:ea:81:64:9e:49:ad:55:96:2b:77:34:6d:
74:96:3c:e0:e6:26:b8:c0:64:83:fb:98:3b:e9:39:be:2b:4d:
f6:14:9f:ed:63:01:00:88:b4:02:82:14:ad:4e:e8:f8:eb:25:
68:17:f5:9a:ff:6f:0e:19:39:20:21:30:e2:07:77:43:0c:3a:
28:c5:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 13:01:39 2023 by rpki-client on console-fra.rpki-client.org