Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa
File: 1EynS8pfChWrYq83y6_lr6qhwm4.roa (raw, json)
Hash identifier: tSKeFDaNRjA42feTajcqfRSIyJTfWZBfqy5BZOg+JTw=
Subject key identifier: D4:4C:A7:4B:CA:5F:0A:15:AB:62:AF:37:CB:AF:E5:AF:AA:A1:C2:6E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18F3651F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa
Signing time: Sun 01 May 2022 15:15:56 +0000
ROA not before: Sun 01 May 2022 15:15:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213326
IP address blocks: 2a06:a005:6f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418604319 (0x18f3651f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 1 15:15:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d44ca74bca5f0a15ab62af37cbafe5afaaa1c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:86:c6:bc:a2:5b:b9:42:4d:ce:f9:46:b7:
13:22:f1:d9:d2:f9:09:4b:30:14:4e:f1:db:11:4e:
30:04:20:b7:0d:a6:4f:0f:22:12:0e:49:0a:9b:75:
46:87:93:f2:96:ea:3a:30:51:cb:12:34:0a:38:d7:
d4:a7:d8:41:b0:7f:95:14:d2:21:dd:cf:76:09:b9:
fc:b6:58:34:e5:06:40:73:23:a1:ac:84:d9:63:1f:
5a:2d:af:3f:c3:fe:01:0b:29:65:51:69:52:0f:ef:
b0:89:f8:d0:66:d0:04:b6:b4:0e:68:72:43:75:ee:
5d:74:a8:99:b0:fe:36:08:dc:74:b3:fe:a8:54:b7:
d4:ae:8f:19:ce:38:db:1c:8b:40:15:e3:55:58:23:
71:ec:d5:9c:6c:92:e0:09:82:ce:9b:aa:87:f8:d6:
f2:c4:12:5f:7a:76:db:a5:68:73:33:99:cc:ed:29:
8d:97:ca:c9:c4:e9:ce:38:ac:ed:58:3f:4a:04:ae:
45:fd:dd:9c:fc:1c:64:c1:73:e6:bd:32:8c:6e:c5:
db:7a:68:de:d0:8a:70:36:56:7c:d1:3e:3e:76:31:
d0:fe:7f:81:5a:4c:4f:fd:61:61:fc:c7:8f:40:6c:
87:dc:26:1f:81:b8:20:12:ab:f5:5a:a6:d0:c0:0b:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:A7:4B:CA:5F:0A:15:AB:62:AF:37:CB:AF:E5:AF:AA:A1:C2:6E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6f0::/44
Signature Algorithm: sha256WithRSAEncryption
48:02:b8:ce:48:6c:8c:e3:5d:21:51:72:c9:a5:6e:9f:ac:cc:
02:aa:b7:65:ed:43:99:f4:eb:df:d6:94:1d:cc:dd:0d:12:59:
c5:a3:0d:58:1f:eb:23:62:45:07:ed:66:84:34:9e:79:01:82:
5b:82:80:b3:76:b1:e4:a1:05:98:37:be:0d:c0:05:3e:56:59:
b4:c3:d7:07:21:2d:31:7d:d5:2f:6d:7a:e0:b3:0e:31:d2:4b:
4f:8b:34:16:02:4a:75:b5:10:dc:fa:9d:32:0b:db:f8:56:45:
4a:a1:7d:20:3d:4d:d0:d7:6f:7b:66:df:32:39:d2:77:06:8b:
dd:0d:0c:30:2d:c4:88:08:43:f4:1a:89:4a:27:c2:7b:91:cf:
6d:01:ac:9b:d7:92:00:34:02:9a:4e:4c:a9:f0:7e:a0:07:87:
98:03:53:6d:6f:a5:00:a4:8b:ab:c3:84:4e:90:7a:81:c0:c5:
d7:c7:a1:e6:d0:a1:1c:69:70:2c:9b:6d:aa:42:ee:7f:40:5a:
28:31:4b:59:35:e9:de:ef:35:b5:0f:8a:94:3c:58:ea:02:b1:
1d:55:5b:34:62:2f:57:80:48:d4:3f:93:15:10:b4:68:84:a5:
d3:47:f0:8d:07:89:d7:3c:e9:13:56:36:34:ce:d5:57:5e:7c:
e9:27:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org