Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/TZP81rOXrncKVdHKkTd27v8A_TM.roa
File: TZP81rOXrncKVdHKkTd27v8A_TM.roa (raw, json)
Hash identifier: PZ2qVQxQVyqruNEj8CvKxwd7QPkJYqpyQFQnMFnbR/4=
Subject key identifier: 4D:93:FC:D6:B3:97:AE:77:0A:55:D1:CA:91:37:76:EE:FF:00:FD:33
Certificate issuer: /CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
Certificate serial: 01857295B3D606E0ACB22E10CC0FFBB946F3
Authority key identifier: 7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/TZP81rOXrncKVdHKkTd27v8A_TM.roa
Signing time: Mon 02 Jan 2023 13:04:51 +0000
ROA not before: Mon 02 Jan 2023 13:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212679
IP address blocks: 2a10:c4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:b3:d6:06:e0:ac:b2:2e:10:cc:0f:fb:b9:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
Validity
Not Before: Jan 2 13:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d93fcd6b397ae770a55d1ca913776eeff00fd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:cb:c5:6e:17:15:39:e7:ad:e4:02:78:68:
7d:10:41:77:e5:64:f8:e8:f2:00:2c:9e:55:09:c1:
ed:5c:80:01:d8:a8:58:3c:20:8e:06:4c:18:a9:1b:
3d:12:61:64:b0:d8:96:87:0e:cd:b8:f3:3c:2c:4b:
fc:a0:66:20:d9:6b:f2:48:52:5b:bc:1d:de:a9:bf:
e9:2b:fc:cf:b6:27:c9:52:7f:ca:00:ea:24:5d:f1:
a9:4e:c7:6f:76:80:5e:52:a5:9f:e2:64:ee:7b:85:
5a:00:ce:2c:77:06:3e:6b:89:c9:51:5e:52:a0:eb:
18:43:d2:2f:14:d4:d3:39:53:e1:a4:a5:99:ba:94:
c2:96:4d:a6:63:f5:00:23:8c:76:68:3f:31:67:f2:
aa:3e:b7:67:66:25:9e:08:07:09:49:9c:d0:cf:bd:
a9:1b:3e:98:5f:ea:8c:63:43:ca:b2:87:30:87:a9:
e8:65:3a:3c:b9:29:c6:f8:df:c9:d9:06:70:7d:d9:
2f:07:09:e6:4e:bc:e8:fa:ba:0d:79:e5:f1:39:8c:
19:47:3b:3c:b3:be:72:cf:c4:4f:ae:1d:38:6e:40:
89:ae:eb:4e:33:4e:79:16:f9:3f:33:58:88:6d:a0:
c1:b4:f9:12:4b:07:8c:8c:30:18:e8:e4:7c:af:e9:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:FC:D6:B3:97:AE:77:0A:55:D1:CA:91:37:76:EE:FF:00:FD:33
X509v3 Authority Key Identifier:
keyid:7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/TZP81rOXrncKVdHKkTd27v8A_TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fPbtLRcX5oDhblPVta9Nu-aIE2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c4c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:43:a6:1f:fb:68:80:33:bf:16:83:0b:01:d4:bb:56:ff:a4:
e5:71:f0:5f:52:1f:fd:f8:f7:d8:c2:6a:3b:7e:c7:cd:6a:c8:
33:44:d2:b0:10:a8:65:85:2f:f3:56:d0:ad:13:f9:bb:60:e2:
db:73:a4:73:af:c2:8f:79:aa:53:7f:c6:c8:9c:de:7f:c7:75:
a8:82:05:d3:0b:45:c6:04:73:b3:dc:59:04:26:e9:d7:13:9d:
81:18:a4:90:88:17:fb:71:6b:8f:5a:93:7c:10:a7:12:8f:89:
c1:cd:ff:56:f2:59:a9:ce:1f:5a:8e:6e:a3:df:18:a6:1f:d4:
11:10:a0:cf:1b:ba:5b:9c:cc:27:f2:9a:ca:34:49:bd:99:ff:
13:b1:17:1b:c1:44:af:d2:7c:c4:2a:1b:27:b8:4d:df:cd:45:
37:d5:8b:4a:8e:b3:d8:69:1a:b3:07:cf:d7:04:ea:52:35:3b:
80:56:10:dc:24:1b:19:6d:b5:37:f8:c6:0b:92:f4:3c:a3:5f:
0e:bf:62:f4:35:23:f7:5d:f0:f6:2a:22:ae:2a:ad:02:e5:2e:
76:4c:09:10:aa:58:49:b0:0a:53:55:3a:e9:24:eb:97:de:80:
91:7f:ce:81:9b:78:8e:94:65:bf:ed:c9:2d:1c:8d:7d:8a:d9:
f2:34:16:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVylbPWBuCssi4QzA/7uUbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjZlZDJkMTcxN2U2ODBlMTZlNTNkNWI1YWY0ZGJiZTY4
ODEzNmMwHhcNMjMwMTAyMTMwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDkzZmNkNmIzOTdhZTc3MGE1NWQxY2E5MTM3NzZlZWZmMDBmZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/jLxW4XFTnnreQCeGh9EEF35WT4
6PIALJ5VCcHtXIAB2KhYPCCOBkwYqRs9EmFksNiWhw7NuPM8LEv8oGYg2WvySFJb
vB3eqb/pK/zPtifJUn/KAOokXfGpTsdvdoBeUqWf4mTue4VaAM4sdwY+a4nJUV5S
oOsYQ9IvFNTTOVPhpKWZupTClk2mY/UAI4x2aD8xZ/KqPrdnZiWeCAcJSZzQz72p
Gz6YX+qMY0PKsocwh6noZTo8uSnG+N/J2QZwfdkvBwnmTrzo+roNeeXxOYwZRzs8
s75yz8RPrh04bkCJrutOM055Fvk/M1iIbaDBtPkSSweMjDAY6OR8r+nJlwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE2T/Nazl653ClXRypE3du7/AP0zMB8GA1UdIwQY
MBaAFHz27S0XF+aA4W5T1bWvTbvmiBNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBidExSY1g1b0RoYmxQVnRhOU51LWFJRTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wM2Q4MDItYTM0NS00M2Y5LWI4ZTgt
ZWQxNjU5MDcwZTg4LzEvVFpQODFyT1hybmNLVmRIS2tUZDI3djhBX1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wM2Q4MDItYTM0NS00M2Y5LWI4ZTgtZWQxNjU5MDcwZTg4
LzEvZlBidExSY1g1b0RoYmxQVnRhOU51LWFJRTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhDEwDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ0OmH/togDO/FoMLAdS7Vv+k5XHwX1If/fj32MJq
O37HzWrIM0TSsBCoZYUv81bQrRP5u2Di23Okc6/Cj3mqU3/GyJzef8d1qIIF0wtF
xgRzs9xZBCbp1xOdgRikkIgX+3Frj1qTfBCnEo+Jwc3/VvJZqc4fWo5uo98Yph/U
ERCgzxu6W5zMJ/KayjRJvZn/E7EXG8FEr9J8xCobJ7hN381FN9WLSo6z2GkaswfP
1wTqUjU7gFYQ3CQbGW21N/jGC5L0PKNfDr9i9DUj913w9ioiriqtAuUudkwJEKpY
SbAKU1U66STrl96AkX/OgZt4jpRlv+3JLRyNfYrZ8jQWow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org