Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-aV3cv340MDmPQokyABChaGwwpk.roa
File: 1-aV3cv340MDmPQokyABChaGwwpk.roa (raw, json)
Hash identifier: wKRGehLXOY3WtwKNfYAbl2DOggxCaqE5zXXTqOvuVww=
Subject key identifier: F9:A5:77:72:FD:F8:D0:C0:E6:3D:0A:24:C8:00:42:85:A1:B0:C2:99
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1994F790
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-aV3cv340MDmPQokyABChaGwwpk.roa
Signing time: Sun 08 May 2022 12:29:28 +0000
ROA not before: Sun 08 May 2022 12:29:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429193104 (0x1994f790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 8 12:29:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9a57772fdf8d0c0e63d0a24c8004285a1b0c299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:1d:b2:0f:ad:38:79:3f:aa:79:49:48:97:
36:38:1b:04:37:cc:d7:4c:bf:5c:fb:e2:37:1f:c2:
fa:9f:9b:46:ea:19:f7:67:3f:12:1a:a5:94:5a:14:
40:5f:54:90:8b:32:fb:74:06:9d:d9:56:9c:3d:72:
11:2a:ef:81:2c:f0:a9:10:a8:24:a8:d5:7f:ae:58:
cc:3c:a4:7b:af:99:d9:d8:ca:57:de:09:24:d0:b6:
7a:26:ac:cc:a0:cc:61:61:e9:f4:bf:56:83:7c:4e:
ce:80:08:4d:ae:ee:80:8f:0c:c4:73:e9:d5:43:98:
05:fa:09:1e:05:41:e4:0f:14:92:b1:ba:e8:81:c5:
c4:99:32:d4:26:bc:56:78:8e:29:81:a5:c5:ff:65:
d4:19:ad:80:3c:5f:3e:46:b0:19:e8:94:4a:bb:a7:
97:43:f0:79:9d:cd:d5:36:2c:a4:03:4b:c2:c7:af:
9e:7b:cb:f3:fe:cb:ae:df:45:2e:a3:ad:aa:f2:15:
60:74:0a:01:e5:49:9b:6e:19:56:e1:a6:ff:e3:8d:
59:a1:f2:78:3b:b5:a8:8e:3b:c9:d8:04:a8:4c:6f:
cd:26:93:2e:02:df:91:af:b5:27:3e:b8:be:10:1b:
4c:14:45:c6:87:fa:ef:c6:fc:f5:fe:91:2c:97:79:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A5:77:72:FD:F8:D0:C0:E6:3D:0A:24:C8:00:42:85:A1:B0:C2:99
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-aV3cv340MDmPQokyABChaGwwpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:860::/44
Signature Algorithm: sha256WithRSAEncryption
19:bb:e1:bd:80:30:59:0e:8a:b5:cb:b8:85:ce:7b:e9:a9:dc:
6b:54:69:3f:29:24:f3:55:bc:19:96:3a:3d:79:81:83:0f:92:
d2:c7:2b:8b:46:4f:bd:73:b6:a3:ea:d3:5f:7f:e4:12:5b:ee:
f6:1f:26:61:23:2b:4d:ed:fc:eb:63:bc:e0:1f:0e:32:d5:fd:
4b:78:54:da:78:10:d6:8f:5b:0f:5f:7a:48:db:d2:92:ea:75:
b7:9c:c3:aa:ea:7b:13:f1:d4:93:b0:b5:c2:b7:0b:40:00:2d:
9f:47:34:d3:83:bd:de:1f:e3:d6:88:40:9f:fd:be:47:20:3f:
83:2f:af:5e:17:45:45:ed:61:cd:54:73:ee:b3:da:8e:68:1f:
ab:a6:35:e5:62:f8:db:7a:19:07:f7:c4:5e:6e:d8:eb:eb:ab:
c8:52:77:cf:df:f9:c3:79:2b:e4:c3:73:34:95:13:60:f4:0d:
84:bb:30:8e:0c:2d:39:d5:a1:f6:45:11:2e:3c:32:9c:c2:83:
43:7c:6a:26:17:04:9b:94:a3:a1:6e:7e:39:e5:5f:a3:a3:31:
30:54:d3:07:ec:90:e1:24:09:e7:d5:e6:c2:9e:aa:87:6b:22:
0d:ad:52:7d:e7:30:69:2d:85:b2:54:06:d2:dd:7b:41:0b:69:
c5:54:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org