Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/MHoeTTM4khbR7HkIPzOs7c11wag.roa
File: MHoeTTM4khbR7HkIPzOs7c11wag.roa (raw, json)
Hash identifier: EAn++EM7qkvsIXrUqDbKFGaG+qbS+TmS4PUU3jpNEPs=
Subject key identifier: 30:7A:1E:4D:33:38:92:16:D1:EC:79:08:3F:33:AC:ED:CD:75:C1:A8
Certificate issuer: /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial: 021F0B9D
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/MHoeTTM4khbR7HkIPzOs7c11wag.roa
Signing time: Fri 06 May 2022 12:00:11 +0000
ROA not before: Fri 06 May 2022 12:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:7ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35589021 (0x21f0b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Validity
Not Before: May 6 12:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=307a1e4d33389216d1ec79083f33acedcd75c1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:bf:0c:3c:ee:bc:0e:37:6e:ec:1e:5a:02:
07:87:c8:e4:06:21:21:e9:c3:48:2c:3c:da:4d:d1:
dc:e1:f1:89:c9:64:dc:83:c5:e4:ef:d9:13:b5:e6:
9f:19:42:cb:0e:18:8f:4e:e8:2e:ba:29:1a:67:50:
fe:e1:a5:3d:d5:12:09:96:55:93:c5:04:05:18:60:
df:90:7b:ff:f7:ea:44:d0:c7:b4:e4:2d:ca:f7:ab:
17:58:5e:06:b3:7e:13:f2:2f:c6:01:e0:46:e4:a0:
8d:0e:db:20:fb:9f:ca:79:0b:61:0b:e8:3f:47:1f:
13:ee:9e:ab:98:52:e7:6d:36:a7:6e:c1:ef:d1:04:
9b:63:b8:e2:1a:6d:cf:21:5a:09:59:3f:84:c7:90:
b3:d1:b3:4e:ba:9e:15:a4:b0:b4:1d:0a:7c:2b:30:
82:21:d7:3d:13:59:b8:b1:fb:85:9b:f8:0a:71:3b:
c5:ac:54:57:a9:3f:5e:f7:6f:0f:78:c6:c2:a6:b4:
80:5e:f8:0d:eb:50:78:c1:3f:27:11:69:1b:99:d5:
99:1d:32:64:a6:30:31:11:b7:81:93:97:3b:70:68:
11:61:2b:0d:41:0e:2e:94:cb:74:df:83:6b:73:ad:
42:a2:01:35:6b:e6:4a:55:7a:da:e1:81:97:29:dd:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:1E:4D:33:38:92:16:D1:EC:79:08:3F:33:AC:ED:CD:75:C1:A8
X509v3 Authority Key Identifier:
keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/MHoeTTM4khbR7HkIPzOs7c11wag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:01:d0:e7:46:9e:dd:49:3c:eb:eb:10:da:2b:ef:c0:c5:f8:
9f:71:8f:66:1c:01:ea:88:2b:ee:80:3b:bd:af:89:80:33:01:
4b:89:60:b4:a9:38:56:82:65:e5:5a:6b:b5:02:01:0b:1b:ae:
63:f8:ff:6b:14:68:ee:c1:7c:ed:19:88:a1:a6:5b:a0:9c:7a:
84:5b:28:23:31:3f:35:ae:1e:e0:de:f7:70:85:73:99:b5:f8:
c9:2d:e7:db:21:24:1b:79:0c:3a:a1:60:ff:21:64:75:92:8f:
c5:11:02:1c:4c:05:c0:06:db:49:51:47:4d:57:bc:34:0a:3f:
13:0a:5e:23:ef:fa:75:6e:6d:ed:d9:70:ed:c6:54:d5:ea:0a:
95:12:ef:3d:1b:fd:01:f3:ff:fb:89:e3:63:0f:16:88:8c:4d:
31:56:8e:2c:14:bc:43:78:af:aa:fb:67:15:b3:fe:2b:e7:59:
90:13:68:5d:d4:21:7f:b3:8a:f9:c7:4b:28:37:b2:0c:e8:1f:
41:6a:30:e9:eb:fa:34:01:62:f4:37:c5:90:f9:bd:da:8f:01:
2c:6d:c1:13:59:2b:15:d5:8e:14:14:97:1d:bf:fe:7f:43:a2:
7f:67:56:d6:b0:75:e0:51:41:e6:ad:d7:1c:69:1f:31:f5:a0:
9e:97:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org