Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/148ot7YCmd01xmral40Mmrx3ukM.roa
File: 148ot7YCmd01xmral40Mmrx3ukM.roa (raw, json)
Hash identifier: aig0MSnjEsho37dFnomQnDMm6Q5af1D7GBN4J4qwipk=
Subject key identifier: D7:8F:28:B7:B6:02:99:DD:35:C6:6A:DA:97:8D:0C:9A:BC:77:BA:43
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 087F83A1
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/148ot7YCmd01xmral40Mmrx3ukM.roa
Signing time: Wed 23 Feb 2022 09:56:09 +0000
ROA not before: Wed 23 Feb 2022 09:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 2a10:f46::/32 maxlen: 32
2a10:f44::/32 maxlen: 32
2a10:f42::/32 maxlen: 32
2a10:f40::/32 maxlen: 32
2a10:f43::/32 maxlen: 32
2a10:f47::/32 maxlen: 32
2a10:f45::/32 maxlen: 32
2a10:f41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142574497 (0x87f83a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Feb 23 09:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d78f28b7b60299dd35c66ada978d0c9abc77ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:da:f9:54:a7:6a:c4:8f:97:6d:9a:ac:67:
36:8a:30:ea:65:fe:20:b1:af:28:05:27:da:da:f4:
c7:ee:8a:54:2d:dc:53:29:0e:6d:36:2e:95:d9:76:
13:2f:fb:b2:5c:89:1e:89:66:9d:29:8d:55:11:55:
54:4c:01:ce:27:d0:3c:e2:4f:a4:9c:9b:b5:f5:6d:
64:f9:31:bd:54:2f:86:b6:49:14:6f:1e:d0:b1:25:
0b:12:f8:bd:4b:32:93:58:b8:72:1d:8a:65:d9:9f:
92:81:9c:89:3a:c1:8b:0f:35:0c:fc:2e:71:34:60:
24:d8:58:31:fc:cf:d3:13:3f:4f:4c:a9:19:e7:6e:
91:56:fc:fc:f9:ad:e9:f0:62:d8:13:f5:38:9e:61:
28:54:aa:26:e3:dd:56:4e:72:bd:94:04:44:50:07:
3c:f1:92:45:a9:81:ca:82:75:d9:8c:b2:e4:b1:a8:
8d:6b:73:4a:a1:e8:65:f7:3a:d2:34:a0:b8:a2:59:
68:5c:e1:42:38:6c:10:61:78:4f:93:e0:f8:09:d1:
4a:7e:6a:44:33:7c:bb:1b:54:54:5f:1f:2d:dc:4b:
02:4c:d4:5b:5d:99:67:55:a8:7b:04:85:90:07:e9:
4f:49:e7:e6:ca:0b:60:55:23:5e:0b:fd:cb:13:58:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:28:B7:B6:02:99:DD:35:C6:6A:DA:97:8D:0C:9A:BC:77:BA:43
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/148ot7YCmd01xmral40Mmrx3ukM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f40::/29
Signature Algorithm: sha256WithRSAEncryption
2e:84:ec:f0:16:71:3c:21:03:36:01:70:9b:69:cd:e8:d5:53:
b2:6c:98:ad:4a:09:86:50:e5:bf:0c:c0:80:e2:b3:76:21:79:
b7:f9:f9:eb:c7:96:58:e0:15:29:6b:cb:e1:13:6d:8d:eb:12:
cf:e0:87:0e:c0:e6:11:9e:fb:30:1d:df:db:c9:c8:99:e5:9c:
af:bd:32:f4:21:05:b4:9c:3e:85:7e:0b:ba:bb:1f:16:eb:72:
4d:c5:16:62:24:e7:c8:cd:df:7b:34:6d:08:c5:0f:41:b9:d0:
72:95:df:d9:7a:b9:66:43:10:01:df:47:33:9f:2f:85:6e:a1:
b9:4e:e9:7e:48:cc:19:04:84:b4:e2:66:19:92:77:d3:20:d5:
44:82:52:c7:c4:e0:0d:0b:43:83:fc:3f:d3:37:97:9d:8c:fd:
9b:25:5f:cf:88:1a:b1:eb:bd:45:51:41:6f:69:7e:a1:8e:9f:
dc:18:f3:e4:d2:51:5b:36:84:6b:1c:96:04:06:d2:26:67:61:
a0:1f:03:8a:42:41:d1:37:e2:48:b5:71:d7:e8:fa:35:d8:91:
2b:64:78:8d:61:d8:ab:a4:5e:b3:6a:bb:76:8f:e6:65:07:f9:
de:5a:e4:8a:97:16:9e:fa:56:f4:d0:59:ea:74:23:d4:88:47:
28:e1:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:00 2025 by rpki-client