Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3DT3EGuFeLbOE641AI6LchICnrk.roa
File: 3DT3EGuFeLbOE641AI6LchICnrk.roa (raw, json)
Hash identifier: iEXQu15fC2wNyvndkRzf6yPbXL2jyjt+RLtE/7LVfto=
Subject key identifier: DC:34:F7:10:6B:85:78:B6:CE:13:AE:35:00:8E:8B:72:12:02:9E:B9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 170348F9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3DT3EGuFeLbOE641AI6LchICnrk.roa
Signing time: Sat 26 Mar 2022 15:05:27 +0000
ROA not before: Sat 26 Mar 2022 15:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9267
IP address blocks: 2a06:a005:170::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386091257 (0x170348f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 26 15:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc34f7106b8578b6ce13ae35008e8b7212029eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:bc:10:3c:e3:17:0b:86:ca:b1:77:5b:5d:
3c:c2:20:b0:8c:ea:16:98:a1:b3:e0:6d:08:c4:95:
30:b9:70:7a:07:95:c1:49:a5:72:c9:71:61:07:70:
82:fa:2d:96:3a:65:2e:dc:ea:3a:c4:a5:fc:5e:d6:
c3:52:99:7b:31:98:c0:f9:e0:79:80:58:be:ee:0f:
1d:c7:5b:21:c4:03:e8:b6:db:d5:bd:e2:82:bf:48:
92:67:dc:c9:62:76:15:40:27:11:c8:3a:ec:22:14:
6f:01:ce:5c:8a:ae:d3:55:38:ff:33:cd:9f:cc:14:
77:a6:79:74:f9:97:46:d0:97:51:25:85:3e:bf:35:
1b:6c:c4:45:ff:81:79:ce:77:af:9b:76:4b:75:b4:
fa:19:fb:5c:ba:1a:5c:04:4e:e6:17:7b:f8:43:ca:
08:3a:37:3c:9c:cd:04:b9:9b:21:ad:9c:c4:46:b0:
95:1d:5a:bf:57:0c:d8:2c:09:15:35:ee:ac:dc:c0:
cc:ec:af:d7:43:84:3f:42:8b:6b:3f:04:5b:fc:12:
42:fb:2e:56:4a:63:49:66:c1:29:a1:71:24:6c:91:
86:3d:f4:a1:26:8a:99:00:43:b0:0c:34:a1:9c:22:
14:dd:2f:35:84:22:1a:e3:f3:47:c6:22:79:6c:e8:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:F7:10:6B:85:78:B6:CE:13:AE:35:00:8E:8B:72:12:02:9E:B9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3DT3EGuFeLbOE641AI6LchICnrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:170::/44
Signature Algorithm: sha256WithRSAEncryption
58:01:f7:82:49:5d:24:bc:25:6a:5d:57:15:4e:0e:2e:1c:65:
4f:e3:95:51:e7:98:d3:ef:04:6f:f1:71:25:31:20:fa:ee:4e:
44:73:44:75:d0:34:e9:b1:f0:de:6f:88:f3:5e:ae:fb:04:01:
ef:91:50:b1:68:14:23:69:8c:1d:62:0e:ef:d3:26:c9:46:f8:
35:eb:df:fa:26:51:17:1a:56:ff:cc:e0:71:9c:45:b6:93:c7:
f4:73:11:e3:a2:cd:5f:22:76:6a:1d:d0:fb:0a:d9:21:df:d7:
44:a4:ea:b8:de:b8:67:39:9f:78:6b:74:2f:a4:d7:ba:ad:00:
c2:7b:4e:09:01:1b:b0:c9:3a:a9:d4:cb:e5:02:fd:2c:98:50:
0f:57:4b:ce:9f:c2:eb:d3:2b:13:48:70:5c:24:51:e5:21:94:
75:d8:92:9c:8d:3c:31:25:de:5e:0f:15:04:e6:ab:20:b4:76:
5b:f4:9c:c0:1b:06:20:fb:a3:c0:a4:11:c4:b1:c0:13:74:69:
57:23:ec:32:a5:5a:ce:ba:65:0b:32:3f:96:af:4b:be:ea:54:
f3:79:0f:27:30:37:f3:9c:3d:83:40:18:97:26:a7:6c:2d:8b:
45:bb:65:22:a5:6b:5e:bf:28:36:5d:04:47:fd:f3:49:23:b9:
af:fe:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org