Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22PgT1Y8HKTwPsCiywRvAgQjwOM.roa
File: 22PgT1Y8HKTwPsCiywRvAgQjwOM.roa (raw, json)
Hash identifier: G6VR9XkUCGvdZB3BSZFaYYO9Ocvw7ZHiCrS7mNJc8LA=
Subject key identifier: DB:63:E0:4F:56:3C:1C:A4:F0:3E:C0:A2:CB:04:6F:02:04:23:C0:E3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845C0901B1D63B9CAA2EF2B3462A14F368
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22PgT1Y8HKTwPsCiywRvAgQjwOM.roa
Signing time: Wed 09 Nov 2022 10:56:44 +0000
ROA not before: Wed 09 Nov 2022 10:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48
2a06:a005:437::/48 maxlen: 48
2a0a:6040:ef00::/40 maxlen: 48
2a06:a005:a15::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:09:01:b1:d6:3b:9c:aa:2e:f2:b3:46:2a:14:f3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 9 10:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db63e04f563c1ca4f03ec0a2cb046f020423c0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:57:ba:b3:c5:a8:33:25:c1:1c:33:5a:62:
ed:b9:ed:9c:69:a0:b6:5a:a6:7e:93:de:c5:3e:98:
5d:24:25:22:2e:52:da:28:e8:7a:7a:01:0e:d7:42:
9f:7b:ea:e9:14:c2:d9:5f:a5:3d:fe:cb:53:d7:e9:
8c:6f:96:3f:d9:7f:14:b1:f4:92:52:be:5f:31:43:
0d:aa:5d:a5:63:1f:c1:a2:51:a7:a0:35:01:4d:0f:
84:c7:b3:b7:5f:a0:97:93:db:a5:94:e2:3b:aa:55:
4a:dd:81:d6:ff:fc:54:53:58:5e:8d:dc:6f:c4:e4:
32:ba:2e:1e:5b:86:30:f3:38:e3:52:69:ee:84:b6:
92:38:7f:49:ab:c5:ad:63:ba:41:94:93:46:b2:06:
99:89:3e:7a:02:a9:a3:6a:08:38:9b:c8:d8:02:f8:
ab:42:60:36:02:52:89:0b:ba:41:09:1d:fd:6c:09:
5a:2b:24:de:12:f6:10:d3:7c:6b:98:e8:43:01:1d:
93:8b:aa:8f:de:fc:72:50:ee:03:61:fe:85:01:df:
da:8a:b9:44:be:45:4d:c0:a5:b0:8b:80:94:cb:76:
c8:c1:2a:51:59:9d:78:9c:be:d3:9d:94:94:95:87:
53:32:c1:2b:7f:bf:80:c0:56:18:a9:9d:18:31:8b:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:E0:4F:56:3C:1C:A4:F0:3E:C0:A2:CB:04:6F:02:04:23:C0:E3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22PgT1Y8HKTwPsCiywRvAgQjwOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
2a06:a005:a15::/48
2a07:54c2:b00b::/48
2a0a:6040:ef00::/40
2a0a:6040:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
09:c1:8f:0e:b2:b8:b6:0e:12:6b:ce:5f:97:8f:57:02:24:96:
b3:5e:d7:a0:16:85:12:fc:bb:54:3e:36:e6:58:94:6c:fe:b9:
41:60:42:f9:a5:3b:8a:5f:fc:c5:2f:a1:14:b3:57:4d:e4:4c:
69:5e:a4:31:57:ea:d6:f6:84:5c:ed:43:ad:10:7a:0c:7f:6d:
0a:fa:d3:2f:98:ab:16:38:e1:8f:fe:87:55:9c:f3:d6:b2:31:
66:26:31:02:0e:20:af:c4:55:9a:9d:59:48:5d:46:98:f6:c1:
6b:38:94:fa:78:5e:6c:fa:b1:2d:15:5d:24:3e:b3:9b:89:eb:
65:a3:89:83:bc:cd:75:dc:84:b6:5a:00:c2:45:99:7e:02:9d:
b2:bb:2f:ec:86:23:b2:35:46:e5:b4:08:88:06:dc:08:52:a6:
99:7e:d6:42:1a:c8:ca:35:5d:4a:ae:86:54:dc:71:ec:4e:02:
44:bc:58:0f:0e:e6:9b:93:82:6d:76:74:d7:df:3c:e1:9d:f6:
83:ed:bb:ee:a9:67:f9:e0:40:a3:9b:c3:5e:15:96:44:37:6a:
ca:fb:fd:46:01:ba:98:84:ab:11:80:45:b0:8f:bc:de:a5:d7:
d0:a4:74:fe:22:5b:3a:d5:a2:30:0e:b9:fb:f9:f1:a9:52:17:
d4:3a:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:34 2023 by rpki-client on console-fra.rpki-client.org