Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6HGVRAsPZvW_uSMkbqNqXEcfmlg.roa
File: 6HGVRAsPZvW_uSMkbqNqXEcfmlg.roa (raw, json)
Hash identifier: K1ANV22h5udzfrtS2MHwbEu1/mgNxFWWQnbvWfo2Q7c=
Subject key identifier: E8:71:95:44:0B:0F:66:F5:BF:B9:23:24:6E:A3:6A:5C:47:1F:9A:58
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16B239DB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6HGVRAsPZvW_uSMkbqNqXEcfmlg.roa
Signing time: Fri 11 Mar 2022 06:44:34 +0000
ROA not before: Fri 11 Mar 2022 06:44:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380778971 (0x16b239db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 11 06:44:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e87195440b0f66f5bfb923246ea36a5c471f9a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:c3:16:50:eb:8f:94:d7:88:73:47:30:47:
40:a5:6a:09:68:89:d7:8f:cb:ed:85:21:49:f1:9b:
a6:89:8d:66:c4:7e:9f:d8:ca:11:b7:3d:e9:76:f2:
ba:04:c4:23:d6:94:fd:7b:14:40:57:5c:65:dc:e3:
2e:3c:1a:9b:4b:d2:eb:2f:98:e6:6e:94:ac:e3:10:
2e:d0:c5:e5:95:9d:01:63:af:df:0d:ee:7b:92:10:
2d:6e:4e:a6:83:d8:84:ac:e1:9f:80:59:9c:2e:e1:
d9:34:7d:78:91:e2:19:fa:4a:49:c6:63:8a:50:f5:
88:8d:c9:62:30:26:1e:45:57:7e:db:82:36:80:fa:
67:6a:63:ed:9d:39:da:33:88:00:31:c1:3c:d1:73:
ad:73:e5:7c:70:41:10:ce:63:43:df:bb:84:b7:ac:
61:64:2d:74:09:67:dd:6c:0d:ca:ce:d1:46:8a:3d:
b4:8b:ca:af:a6:76:35:97:5e:c0:84:15:c5:d9:f4:
c8:b9:97:ba:2b:09:38:6b:cc:b6:42:e6:30:dd:cb:
df:8a:5a:c2:d9:9c:05:78:cb:c1:8a:b0:26:00:a4:
38:ce:73:67:7e:ed:75:8f:0f:b3:01:5b:ac:30:08:
46:94:97:98:f6:1c:e1:c3:4b:01:03:f0:b7:16:d0:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:95:44:0B:0F:66:F5:BF:B9:23:24:6E:A3:6A:5C:47:1F:9A:58
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6HGVRAsPZvW_uSMkbqNqXEcfmlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:ce:0b:b9:f6:37:ae:33:a0:f3:70:06:20:1c:5b:f1:f4:3a:
13:09:1c:e4:28:7f:73:6f:bc:b5:e5:c8:a3:ff:15:ae:89:c7:
02:88:8e:ea:57:55:fe:51:b4:dc:3f:9b:09:35:e9:71:39:2f:
b3:c6:57:20:ae:be:0a:f0:07:01:5d:aa:e9:97:49:8f:b9:90:
f0:f2:3c:55:e8:1c:69:7b:7d:47:a5:6c:0b:7d:66:d7:7a:18:
fe:0b:96:a7:35:ee:9e:0e:df:b0:9c:b7:0b:b0:cc:de:1f:74:
dd:22:1e:b4:4a:a0:77:4b:64:f4:19:96:c8:9b:eb:d1:1c:16:
8f:56:13:e7:f9:ae:9b:79:a0:7a:84:1b:14:7a:a8:1f:02:26:
38:ae:71:e2:1d:92:82:4f:b3:86:e0:b0:9e:0b:07:0f:3b:0c:
4e:fc:5b:db:1f:8c:f6:7c:db:f1:9d:60:f6:26:36:dc:26:25:
0a:83:62:3e:07:20:24:d1:93:8f:a2:e6:21:5a:60:e0:41:30:
77:a9:bf:e1:b4:0a:22:2b:f2:9c:f0:18:31:68:a2:d7:ab:b3:
28:7a:c2:58:c5:a6:bb:19:35:0a:15:0f:1e:f9:fa:a9:09:7e:
72:e1:32:42:84:86:4a:9a:e3:35:de:a7:c0:e4:45:cb:c0:c7:
36:c9:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org