Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4fx126A_maeSt8NXHIVK-u84Vhk.roa
File: 4fx126A_maeSt8NXHIVK-u84Vhk.roa (raw, json)
Hash identifier: SCbTXidm23sQeKFn6VtpT5RAAw2WICs1MqY8LbRjyfc=
Subject key identifier: E1:FC:75:DB:A0:3F:99:A7:92:B7:C3:57:1C:85:4A:FA:EF:38:56:19
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840CB0B98D911E8CA29106AACCFFA38F72
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4fx126A_maeSt8NXHIVK-u84Vhk.roa
Signing time: Tue 25 Oct 2022 01:10:19 +0000
ROA not before: Tue 25 Oct 2022 01:10:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203635
IP address blocks: 2a07:54c4:3::/48 maxlen: 48
2a06:a005:14d0::/44 maxlen: 48
2a06:a005:1490::/44 maxlen: 48
2a06:a005:1040::/44 maxlen: 48
2a06:a005:14c0::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
2a06:a005:14b0::/44 maxlen: 48
2a06:a005:14a0::/44 maxlen: 48
2a06:a005:1050::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0c:b0:b9:8d:91:1e:8c:a2:91:06:aa:cc:ff:a3:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 01:10:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1fc75dba03f99a792b7c3571c854afaef385619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:ca:5d:b1:ff:f3:1a:fd:d3:93:9e:1a:1f:
10:a2:f6:20:90:9e:09:3d:d2:0d:54:0d:c1:ee:8d:
b2:b7:b4:d6:a1:49:e1:2e:9c:f9:93:a0:ae:00:a7:
dc:cb:3e:7c:cb:de:61:96:dc:fa:66:53:3a:6b:be:
c6:32:df:b5:cb:3b:6e:3f:12:dc:97:45:1e:ba:e6:
fb:5c:b2:cb:62:f3:6e:89:45:18:9e:1d:a9:a2:5c:
e8:7b:05:9e:1c:bc:25:10:79:5a:ca:06:07:dc:a9:
c0:ce:9b:d2:10:11:a8:76:af:48:f5:de:0b:ba:26:
8c:f4:43:2b:0e:9f:25:d0:ce:05:1f:aa:fc:48:15:
69:32:f0:43:01:55:69:72:45:2a:f0:95:e3:23:08:
63:8d:ed:f1:b4:ff:2b:4d:23:9c:b7:78:41:a0:9b:
9a:d0:3f:5b:d0:71:ef:bd:d2:97:e1:06:f8:11:a1:
5d:47:0f:cb:06:71:ba:f3:38:20:be:97:8f:99:b5:
39:bc:70:c7:49:92:2b:92:4d:39:3a:ee:26:b7:9a:
66:4d:b9:c6:da:82:3b:0a:80:40:99:39:cc:ec:04:
cb:f7:36:b1:30:9a:35:7f:6f:cc:72:74:56:cb:9d:
dd:e2:f0:e1:ae:56:18:40:2f:2d:34:3e:da:57:a8:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:75:DB:A0:3F:99:A7:92:B7:C3:57:1C:85:4A:FA:EF:38:56:19
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4fx126A_maeSt8NXHIVK-u84Vhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1600::/40
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
2a07:54c2:b00b::/48
2a07:54c4:3::/48
Signature Algorithm: sha256WithRSAEncryption
35:e0:4f:d3:f5:84:b6:8d:36:f9:29:74:a3:51:47:88:e3:49:
9f:0f:36:79:0d:21:f0:a6:6d:0f:92:33:01:fe:0f:e1:f9:77:
a8:bf:21:63:91:4d:5d:c5:76:3c:f6:97:11:09:ec:5d:3b:11:
1d:e0:7f:17:e7:70:31:aa:b1:5f:89:84:af:7e:90:31:63:b3:
c4:5f:6e:a4:86:b4:bc:ae:77:ce:31:e0:f5:68:7e:40:86:61:
47:59:af:74:fe:c9:e5:bd:84:11:56:a6:2a:4b:1f:45:52:7b:
98:d0:50:32:24:76:cc:1f:8f:ed:cc:39:33:45:ae:ee:93:c0:
a0:0e:0e:b3:62:3e:96:6c:48:8c:b7:4d:d8:1b:61:75:2a:c9:
43:a8:67:a3:d9:2a:13:65:75:29:2e:d3:c4:57:0e:a1:5a:e3:
26:34:39:49:f2:07:51:ed:d4:f8:67:32:00:e5:9e:22:e6:e2:
d6:9b:89:3d:8f:c0:a9:c9:17:c2:17:c7:c6:5f:41:a6:6e:ea:
71:16:67:f9:00:1e:18:86:dc:f4:cb:03:3a:0f:c3:55:22:66:
6a:12:9f:35:32:b9:50:86:e9:e9:a3:78:0e:00:06:c6:15:0c:
a6:7a:0c:ae:5c:23:62:c8:c8:a7:08:09:01:9b:3a:f3:4a:2b:
40:8c:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org