Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5TtVErIlhVGE8hPlp4_oC9qDmFc.roa
File: 5TtVErIlhVGE8hPlp4_oC9qDmFc.roa (raw, json)
Hash identifier: 0MkUsNHJ6KNBHohWQJnGnHK7V5D4B63Ph1VAEQsPvQI=
Subject key identifier: E5:3B:55:12:B2:25:85:51:84:F2:13:E5:A7:8F:E8:0B:DA:83:98:57
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B5373DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5TtVErIlhVGE8hPlp4_oC9qDmFc.roa
Signing time: Sat 25 Jun 2022 00:23:00 +0000
ROA not before: Sat 25 Jun 2022 00:23:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204518
IP address blocks: 2a06:a005:d90::/44 maxlen: 48
2a06:a005:e70::/44 maxlen: 48
2a06:a005:dc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458453978 (0x1b5373da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 25 00:23:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e53b5512b225855184f213e5a78fe80bda839857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:93:24:bb:fc:6b:3a:06:14:72:f9:c7:3e:
96:9e:9f:ba:98:1a:08:d8:21:9e:5a:24:47:7c:75:
61:01:ce:f9:9c:8a:35:d0:bb:20:55:6f:6b:19:58:
6c:e4:c9:1f:52:11:21:f7:e8:43:a3:ef:c1:1a:9f:
95:ef:b4:fd:49:64:9a:5c:a7:d7:63:16:a4:4c:1a:
25:08:f8:d4:c1:fb:52:07:56:b5:a6:85:b2:62:42:
d1:1c:9a:db:79:38:64:97:a2:cd:e9:02:5d:63:16:
29:d4:b4:a8:9c:10:d0:f4:6c:5f:7b:04:71:8d:47:
b5:7f:d6:fc:93:b0:cd:87:5b:ee:21:34:fa:7b:68:
53:65:91:0e:32:db:07:5e:fe:95:7a:59:82:4e:ba:
98:80:cf:22:3f:27:08:94:85:a4:30:7a:d4:9e:8b:
4c:41:5c:d8:c4:d7:53:66:ee:b5:a3:ed:0a:13:88:
e5:e2:8e:4f:07:72:a1:2e:05:aa:1e:1e:c0:b1:d0:
2c:47:2c:e0:2e:19:c3:52:86:8b:06:06:f7:dc:11:
aa:f2:ac:39:bb:71:36:b5:86:4e:ac:41:0d:ae:d8:
b1:84:c5:72:d0:a8:0b:57:93:6f:b0:fc:15:f5:0c:
74:b3:1d:97:c8:35:58:51:fd:58:6f:f9:7a:ec:d5:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:55:12:B2:25:85:51:84:F2:13:E5:A7:8F:E8:0B:DA:83:98:57
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5TtVErIlhVGE8hPlp4_oC9qDmFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d90::/44
2a06:a005:dc0::/44
2a06:a005:e70::/44
Signature Algorithm: sha256WithRSAEncryption
39:f9:ad:23:65:fe:b0:9d:ba:0d:02:08:f2:33:40:ce:49:42:
39:95:5b:75:d0:70:df:75:28:a1:10:c9:cb:4b:81:b3:57:84:
c9:2e:57:84:2d:96:1a:e9:4d:54:f7:97:8c:4b:66:20:73:ed:
01:c5:81:f9:d4:cf:0a:6e:85:db:5a:32:1c:01:a7:30:9f:8b:
cc:67:83:c0:b9:19:7a:31:6a:ea:c0:18:bc:be:ab:08:2f:e6:
00:6c:b1:4a:36:69:49:c8:d2:97:76:bb:c1:5a:26:d0:65:41:
83:fb:87:83:6a:f1:18:dc:68:be:26:7b:9b:52:e2:30:e0:94:
9b:44:ff:99:19:4c:00:26:85:00:75:08:16:4a:be:75:35:ea:
4f:c3:d4:0a:76:ba:60:bb:b9:4d:a7:b5:9b:2a:36:7f:1e:be:
cc:db:08:98:b6:d1:4b:48:9c:21:b1:25:eb:44:04:16:e5:10:
3e:f0:15:0b:a2:1e:d3:3c:00:57:18:92:ca:88:60:5a:5e:5e:
b4:87:ca:54:7a:30:a1:6f:b6:8e:74:ba:af:71:66:1d:d2:7f:
70:67:24:83:87:9d:5b:71:b6:57:c3:0e:0f:0f:26:1d:60:e0:
9a:d1:92:66:69:31:9d:48:fa:0a:f3:6c:df:67:ae:6e:a6:53:
d2:e9:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org