Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4z8_Cua_ERjdV8K5IFj-rDGRdqs.roa
File: 4z8_Cua_ERjdV8K5IFj-rDGRdqs.roa (raw, json)
Hash identifier: HcsMz6csSIOElyRb6Bv5h4LHn3GKNnm0W2y4gJGtU6o=
Subject key identifier: E3:3F:3F:0A:E6:BF:11:18:DD:57:C2:B9:20:58:FE:AC:31:91:76:AB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 176DAC7F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4z8_Cua_ERjdV8K5IFj-rDGRdqs.roa
Signing time: Mon 28 Mar 2022 06:10:10 +0000
ROA not before: Mon 28 Mar 2022 06:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133555
IP address blocks: 2a06:a005:280::/44 maxlen: 48
2a06:a005:2a0::/44 maxlen: 48
2a06:a005:270::/44 maxlen: 48
2a06:a005:260::/44 maxlen: 48
2a06:a005:290::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393063551 (0x176dac7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 28 06:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e33f3f0ae6bf1118dd57c2b92058feac319176ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:cf:e7:6d:32:c0:3d:c9:e0:8c:cf:99:09:
d9:25:25:dc:b0:3c:40:2d:bd:9d:20:f6:3f:af:ad:
8c:7f:0d:3e:5d:75:6b:a6:c4:7d:1d:2a:09:6b:91:
83:2f:26:16:9d:8d:c9:24:9e:1d:6c:2b:f5:05:37:
2c:70:55:6c:b4:a4:25:25:14:df:ec:c3:60:a5:66:
02:33:8b:b5:b4:8d:ab:2c:c2:73:9a:b7:c1:ac:e2:
d5:63:3a:9e:d4:51:54:e7:df:f0:2c:20:fb:6f:f9:
5d:6e:28:c3:55:61:bf:5e:3c:31:05:84:98:78:0d:
27:e8:c6:06:e8:f2:00:95:64:f4:f0:28:74:f9:e0:
40:10:1b:64:35:55:90:ed:55:ad:7a:39:85:be:8e:
1d:0d:56:cf:93:36:59:16:ba:7d:45:4d:f3:9a:54:
8a:6a:94:6a:3d:ea:ff:87:e4:84:71:8a:be:da:2f:
58:2e:f6:8b:e1:db:39:90:c2:aa:ad:6d:c5:db:36:
f8:e4:2e:e4:e3:44:2c:8b:22:47:71:0a:c5:2d:69:
1e:11:85:76:72:b7:ed:4b:8e:a2:39:ee:04:b1:4f:
12:58:b9:fe:01:e6:25:11:fe:f1:db:27:be:23:d8:
f3:47:5e:2e:d9:68:c1:a7:e7:7c:ed:c0:9a:79:e4:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3F:3F:0A:E6:BF:11:18:DD:57:C2:B9:20:58:FE:AC:31:91:76:AB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4z8_Cua_ERjdV8K5IFj-rDGRdqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:260::-2a06:a005:2af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:15:2c:13:30:a7:f4:e3:14:da:69:62:92:f4:78:e5:24:34:
d2:fc:cc:e5:04:90:d1:27:da:01:9c:bf:98:8e:36:77:0b:ee:
17:4f:32:53:88:76:28:d7:49:a4:26:b9:f1:0a:05:b3:eb:e2:
85:20:51:8d:d3:57:89:f7:6b:b3:76:d2:e6:d0:f5:0f:71:e7:
91:1c:3a:9f:1e:01:55:5f:be:2d:bc:03:14:0d:49:dc:b6:9e:
ff:d7:e1:82:9a:af:76:c3:50:23:c4:2e:a3:bd:bc:36:45:e4:
05:17:db:b6:14:9c:c2:73:ce:c1:af:ac:aa:22:18:6f:bc:eb:
c6:c6:8a:cd:dc:b2:e5:5f:07:68:c6:58:2d:23:bd:56:10:1a:
91:0b:5d:df:11:2e:cd:ab:1e:3e:bf:db:2d:c1:9c:bf:0a:a5:
b2:81:65:37:a8:b9:de:22:89:ce:4c:a4:d9:c1:cf:9f:ea:6e:
2d:fc:18:73:05:dd:6a:15:d8:31:c3:ca:dc:46:4c:40:23:89:
75:a3:a1:16:c9:f4:fa:3c:a6:b5:c8:f7:12:7a:19:13:2f:23:
13:23:70:d8:d2:eb:f6:ea:9b:87:3d:b5:ed:55:61:1d:99:c6:
d9:7c:9a:a8:f3:8a:12:57:70:2a:1d:e5:db:35:a9:52:7a:24:
71:84:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org