Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa
File: dMj1G_dV4u_wU13-CznMi9RW5Pc.roa (raw, json)
Hash identifier: 0EJ1wy0Hl4cFJW7QrNEiKkNktWEFgZrRpfvMz2AvWSM=
Subject key identifier: 74:C8:F5:1B:F7:55:E2:EF:F0:53:5D:FE:0B:39:CC:8B:D4:56:E4:F7
Certificate issuer: /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial: 04D0EEB6
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa
Signing time: Tue 15 Feb 2022 20:36:26 +0000
ROA not before: Tue 15 Feb 2022 20:36:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208686
IP address blocks: 2a10:4741:27::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80801462 (0x4d0eeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Validity
Not Before: Feb 15 20:36:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74c8f51bf755e2eff0535dfe0b39cc8bd456e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:3a:06:23:69:60:6a:4d:ed:e4:bc:f1:e8:
33:93:12:37:53:24:4d:59:41:0d:33:f3:97:c6:d5:
d4:4a:0b:92:7d:45:99:db:32:d0:bc:a6:f1:dc:66:
03:f9:53:11:0c:56:be:54:be:88:ad:6c:02:e4:e7:
5b:b1:95:6d:dd:29:dc:6b:e0:c4:54:3a:be:c0:8e:
1d:9e:f0:ff:97:24:ef:c9:27:a1:8c:19:d5:64:39:
3a:3c:af:30:a0:a3:d8:97:88:0e:40:f4:d3:f2:d9:
39:7d:32:1e:1a:e3:30:e2:86:56:7f:90:16:9d:6b:
19:65:83:ce:ea:0e:db:ed:bc:d8:7a:b1:0d:2e:6d:
15:0c:f0:f3:26:c2:0e:ca:2d:38:7f:04:c2:8b:15:
dc:0f:62:22:bd:68:99:dd:11:76:77:e2:00:a1:be:
3d:0c:0c:a6:9b:c0:38:71:71:7d:84:da:51:95:3e:
db:47:d2:73:48:f9:e4:d5:91:78:70:01:e5:1d:58:
ff:c4:56:bb:95:f7:b8:9c:60:1d:f7:58:9a:46:fb:
dc:a3:a2:49:b3:bc:05:6a:b4:ea:54:96:78:6d:e2:
34:e8:30:ec:be:19:c7:40:da:68:db:e9:4e:fa:ee:
3a:4e:a7:66:78:52:1a:12:c2:be:c5:94:87:8f:80:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:F5:1B:F7:55:E2:EF:F0:53:5D:FE:0B:39:CC:8B:D4:56:E4:F7
X509v3 Authority Key Identifier:
keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4741:27::/48
Signature Algorithm: sha256WithRSAEncryption
5b:93:71:49:d4:25:53:31:90:74:09:62:2f:06:34:80:45:11:
e2:2d:93:73:ca:04:30:4c:f6:b1:52:44:e1:10:17:33:cd:34:
29:e2:1a:17:59:9f:be:58:a9:a2:3e:ca:e2:8f:9f:14:1a:49:
9d:c4:3f:da:72:16:0b:96:c8:0d:da:af:02:19:fb:bf:f0:6e:
7b:fd:7f:fd:5b:82:c1:94:f6:c3:d1:11:00:d3:10:db:60:ac:
1f:fe:3f:b0:3b:7f:f7:0e:76:31:44:51:87:d4:99:78:52:10:
be:bd:fc:5a:7f:b8:fe:5e:ef:5e:c7:12:29:b4:9d:a3:82:3d:
ba:a3:58:b3:1a:30:50:43:7d:7e:f2:e8:73:5d:92:02:09:0f:
44:b9:ac:f6:eb:35:3f:21:86:5e:9b:c7:8a:20:97:c7:07:53:
f3:f2:56:56:4c:c5:8b:e1:49:2f:13:a5:89:8d:56:e6:67:a7:
d9:95:04:a5:21:db:13:4e:3b:f5:de:27:ab:90:7e:3a:83:f3:
ea:11:dd:91:f3:d3:3e:4b:60:97:bf:ea:d0:c5:87:c9:1a:c1:
26:a6:28:7e:9a:b5:51:4f:53:ab:46:03:ee:94:ad:c2:bb:7b:
4f:4b:41:54:a5:33:79:86:3e:bd:0e:18:a3:dd:63:fb:bd:63:
da:47:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:38 2025 by rpki-client