Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/w_CKYaD2S8Idrx3SFagLk0Bcd0w.roa
File: w_CKYaD2S8Idrx3SFagLk0Bcd0w.roa (raw, json)
Hash identifier: K6RHbqOE6wWqbrI94MfPiyS7Qk1ynin9ZLugz37fkf8=
Subject key identifier: C3:F0:8A:61:A0:F6:4B:C2:1D:AF:1D:D2:15:A8:0B:93:40:5C:77:4C
Certificate issuer: /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial: 079EC577
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/w_CKYaD2S8Idrx3SFagLk0Bcd0w.roa
Signing time: Fri 21 Jan 2022 13:16:26 +0000
ROA not before: Fri 21 Jan 2022 13:16:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:a9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127845751 (0x79ec577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
Validity
Not Before: Jan 21 13:16:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3f08a61a0f64bc21daf1dd215a80b93405c774c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:63:60:e1:a8:6f:20:c0:f2:34:62:a2:fd:
fd:c5:25:78:bc:79:7f:67:85:d2:62:ee:5f:5b:b2:
53:56:84:cf:50:30:d6:0f:21:9e:fc:c2:fb:46:f7:
95:3f:70:14:ca:e6:aa:dd:17:41:a2:67:6e:89:cc:
16:f2:97:09:16:20:71:0c:e9:c7:87:dd:f5:08:38:
e3:4d:11:ea:da:39:0d:d5:01:f6:51:7d:71:74:d6:
e6:d0:cd:d0:da:61:cc:fb:34:a3:bc:32:5e:70:49:
d6:75:d5:99:d4:cf:51:34:f1:26:a8:3a:8a:c0:1c:
5c:2c:da:17:46:b4:6b:d3:4e:39:97:b9:c1:ed:6d:
34:60:51:3e:a5:c1:c6:f3:f4:0b:44:83:12:2b:ec:
ea:ca:37:6e:a1:dc:ae:6d:5e:34:b4:e6:ed:5e:8a:
d5:6d:f2:a5:3d:82:62:07:09:8e:a8:43:50:30:e7:
28:d3:d5:6d:9c:0a:65:eb:5c:c7:be:d8:f4:38:68:
c1:a5:62:05:e4:fb:10:80:20:e9:ce:06:53:a8:40:
7a:b5:03:8c:cc:dc:b1:a5:c6:ee:68:15:6f:0d:f9:
8a:09:42:40:84:3c:89:c2:08:49:13:a6:b0:ec:93:
cd:43:e8:7b:bb:f8:f4:d7:19:e7:e3:56:1c:0b:10:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:8A:61:A0:F6:4B:C2:1D:AF:1D:D2:15:A8:0B:93:40:5C:77:4C
X509v3 Authority Key Identifier:
keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/w_CKYaD2S8Idrx3SFagLk0Bcd0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:54:e4:32:9e:6a:51:1b:e8:ed:ed:d5:56:4d:31:85:2a:e5:
af:fa:0e:84:c4:a7:cd:d1:cc:ff:39:ae:df:26:c8:b9:cc:33:
84:4a:76:16:73:11:f7:60:62:b3:13:3c:ab:af:c9:b0:10:34:
1e:63:58:e3:dc:88:51:e8:95:6a:45:68:69:68:fe:04:0e:dc:
1a:19:c1:d6:db:25:4d:ac:1f:0a:6e:96:e0:f4:6f:c3:dc:de:
d2:cd:0b:81:d9:d5:69:69:51:ca:33:6e:3e:3c:d7:e9:f1:22:
cb:07:b4:f9:93:d9:04:30:57:7c:b8:7c:1d:1b:25:f3:69:5d:
8f:e7:62:96:2f:c4:58:6a:d3:03:83:90:6c:72:4f:0d:cd:8e:
01:d6:60:1f:c6:42:c0:ac:90:8b:e8:76:50:8d:47:b4:b3:b8:
a8:de:5e:b4:60:6c:5c:a2:52:94:e8:ab:f1:24:78:34:d1:41:
e9:ab:0d:c2:92:76:41:1e:69:6e:c0:d1:b3:db:fa:3c:7e:4f:
cc:70:30:d5:14:0e:f7:10:16:9e:b5:ba:31:79:b2:43:2c:cc:
03:e3:97:df:2f:25:35:2f:71:9d:fc:dd:13:02:a0:62:1e:de:
b7:58:d1:59:c3:87:ce:e2:d8:44:70:88:b3:34:f6:31:89:0b:
87:f8:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:40 2024 by rpki-client on console-ams.rpki-client.org