Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1Roc7tVR8dbMjYHAp7wJCJRCH3c.roa
File: 1Roc7tVR8dbMjYHAp7wJCJRCH3c.roa (raw, json)
Hash identifier: E8VjEa0UBnmCYOlYBf0ohNpziRj12GuKsn+Q5f+fQBw=
Subject key identifier: D5:1A:1C:EE:D5:51:F1:D6:CC:8D:81:C0:A7:BC:09:08:94:42:1F:77
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EBB951A6681503B3A5064DD798F85868
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1Roc7tVR8dbMjYHAp7wJCJRCH3c.roa
Signing time: Wed 07 Dec 2022 08:35:01 +0000
ROA not before: Wed 07 Dec 2022 08:35:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204375
IP address blocks: 2a06:a005:2270::/44 maxlen: 48
2a06:a005:2590::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:5a0::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:b9:51:a6:68:15:03:b3:a5:06:4d:d7:98:f8:58:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 08:35:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d51a1ceed551f1d6cc8d81c0a7bc090894421f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:55:b8:79:b0:7b:4f:c3:9d:21:a2:6b:33:
05:55:1f:e1:6c:7b:e6:83:52:96:b9:d3:65:0d:e0:
d1:d6:e8:e9:0b:f4:13:46:88:da:da:a6:dc:10:c8:
2a:3b:dc:e7:d7:d8:1c:f8:fc:82:0a:bb:8a:6c:b5:
ce:b9:96:68:b0:60:cd:32:49:92:ba:d5:41:92:67:
b1:01:f1:2b:9b:f7:28:0b:89:ba:2e:f8:11:bc:92:
c6:ef:a9:7f:85:c2:00:8c:11:28:49:66:fb:75:cd:
67:79:a9:d5:79:ab:8c:9a:27:03:e4:f8:fa:21:7a:
50:27:7e:db:cd:a8:b5:05:e1:9f:a8:33:fb:43:ee:
ac:6f:df:ba:6f:ea:0f:73:97:47:0a:75:1a:0f:53:
84:80:b3:76:48:d8:41:94:d3:00:62:b9:eb:c8:eb:
9a:6b:c6:e1:78:fd:94:04:43:5a:24:cc:1d:ca:d8:
e6:51:7d:ad:ca:d0:11:6e:79:e1:79:6c:f8:07:bd:
01:c5:53:a9:79:a1:39:30:a1:f5:06:fa:eb:0a:77:
8c:4b:cf:c4:f5:c3:6f:98:6d:00:7a:c8:16:ba:f7:
d1:60:55:03:53:1f:15:aa:a4:69:7a:c1:0d:04:97:
81:3a:fa:a0:e8:7e:eb:4d:da:85:9c:02:a4:42:54:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:1C:EE:D5:51:F1:D6:CC:8D:81:C0:A7:BC:09:08:94:42:1F:77
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1Roc7tVR8dbMjYHAp7wJCJRCH3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:5a0::/48
2a06:a005:ad0::/44
2a06:a005:2270::/44
2a06:a005:2590::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
41:81:2e:fa:b3:34:6a:df:bb:38:d4:30:35:f5:0b:fb:d7:e9:
4d:b8:b9:84:cf:ea:84:12:b9:58:f7:9b:e8:42:00:c1:07:36:
ec:86:6a:f6:e0:c8:9f:2e:85:8a:92:14:09:a9:45:fc:0a:bd:
bf:cf:96:12:aa:67:dd:14:c1:d6:7f:5b:3a:44:15:30:a6:bf:
0f:60:41:95:8a:03:70:b4:7e:c3:c4:82:7b:fb:b6:1f:fd:5a:
de:e5:a6:f9:ca:63:9d:e3:2d:8e:d5:f9:70:c5:2d:d7:49:2c:
7b:99:f9:82:14:eb:b4:91:4d:2d:2b:0e:66:6f:58:eb:29:f5:
e6:29:dc:b6:b0:ad:dd:8b:3a:63:3c:ff:16:d0:33:a4:e7:e8:
fd:84:cf:e0:3a:3d:c3:2c:ec:d9:d2:4d:6a:cb:09:a2:92:a3:
e2:6e:2b:74:cd:02:26:c1:61:ef:2c:bd:99:43:25:cf:ec:a8:
56:b2:ea:a9:37:54:df:0f:66:69:8a:44:49:7f:a2:e1:46:10:
4a:f0:e3:d2:b0:c0:7f:ca:fc:63:13:3a:42:fa:09:fc:88:2a:
4e:1f:bf:41:da:28:c6:f1:d0:d8:b9:5f:0d:8f:5c:4e:fb:a5:
cb:94:3d:61:66:08:8e:ee:1c:de:d0:52:2c:0e:b1:00:15:4e:
2a:d7:1b:91
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYTruVGmaBUDs6UGTdeY+FhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA3MDgzNTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTFhMWNlZWQ1NTFmMWQ2Y2M4ZDgxYzBhN2JjMDkwODk0NDIxZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL9VuHmwe0/DnSGiazMFVR/hbHvm
g1KWudNlDeDR1ujpC/QTRoja2qbcEMgqO9zn19gc+PyCCruKbLXOuZZosGDNMkmS
utVBkmexAfErm/coC4m6LvgRvJLG76l/hcIAjBEoSWb7dc1neanVeauMmicD5Pj6
IXpQJ37bzai1BeGfqDP7Q+6sb9+6b+oPc5dHCnUaD1OEgLN2SNhBlNMAYrnryOua
a8bheP2UBENaJMwdytjmUX2tytARbnnheWz4B70BxVOpeaE5MKH1BvrrCneMS8/E
9cNvmG0AesgWuvfRYFUDUx8VqqRpesENBJeBOvqg6H7rTdqFnAKkQlSW0QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNUaHO7VUfHWzI2BwKe8CQiUQh93MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMVJvYzd0VlI4ZGJNallIQXA3d0pDSlJDSDNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgagBQLT
AwcAKgagBQWgAwcEKgagBQrQAwcEKgagBSJwAwcEKgagBSWQAwcAKgdUwrALMA0G
CSqGSIb3DQEBCwUAA4IBAQBBgS76szRq37s41DA19Qv71+lNuLmEz+qEErlY95vo
QgDBBzbshmr24MifLoWKkhQJqUX8Cr2/z5YSqmfdFMHWf1s6RBUwpr8PYEGVigNw
tH7DxIJ7+7Yf/Vre5ab5ymOd4y2O1flwxS3XSSx7mfmCFOu0kU0tKw5mb1jrKfXm
Kdy2sK3dizpjPP8W0DOk5+j9hM/gOj3DLOzZ0k1qywmikqPibit0zQImwWHvLL2Z
QyXP7KhWsuqpN1TfD2ZpikRJf6LhRhBK8OPSsMB/yvxjEzpC+gn8iCpOH79B2ijG
8dDYuV8Nj1xO+6XLlD1hZgiO7hze0FIsDrEAFU4q1xuR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org