Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa
File: 72rYTTPwktRw_enLnuDcLYjAGFY.roa (raw, json)
Hash identifier: z1pcdsbB9yS6Itk15jWPsTSCpfcL5JElKLJNHA/u2Qo=
Subject key identifier: EF:6A:D8:4D:33:F0:92:D4:70:FD:E9:CB:9E:E0:DC:2D:88:C0:18:56
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18ADCE8E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa
Signing time: Sun 24 Apr 2022 19:43:54 +0000
ROA not before: Sun 24 Apr 2022 19:43:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204446
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414043790 (0x18adce8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 24 19:43:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef6ad84d33f092d470fde9cb9ee0dc2d88c01856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:1a:26:25:ed:91:7a:5a:47:b7:0c:f0:e3:
94:1e:cf:53:85:a2:0a:ce:49:95:7e:9f:fe:35:3e:
d3:cc:48:cf:ae:4f:b8:4c:5c:6b:c4:c6:dc:34:05:
e6:cd:96:dc:41:2f:69:c8:a1:00:da:fc:2e:fd:4a:
b4:b6:12:c9:65:ad:31:15:db:72:bf:d8:83:25:f0:
45:f3:2c:cc:7a:0c:1d:1e:53:a2:7e:d4:a5:f6:eb:
0b:ac:63:27:e0:75:85:b0:27:3d:19:67:eb:a5:fd:
88:d8:db:1e:c1:25:aa:41:c7:b6:04:31:12:68:96:
f7:ea:ce:bd:aa:a9:5a:8e:91:68:af:43:6f:a6:cb:
3d:97:27:14:3c:47:27:94:86:6a:ea:76:28:fe:cb:
bf:85:8c:39:63:af:64:4e:40:18:57:e2:6f:2b:dd:
e1:1c:9b:7a:d7:9f:75:af:99:09:c2:2e:3e:0a:77:
36:17:fa:f8:f1:2f:bf:07:08:86:af:98:70:ec:c3:
76:91:db:6a:45:ce:aa:0d:11:a7:f4:1b:ef:c5:1f:
48:5c:70:c7:2e:8c:69:5e:11:c9:36:d8:42:bd:17:
8a:b9:a8:cb:ca:b4:3e:f7:79:2d:cf:2d:b4:95:c2:
f1:be:4e:20:63:5b:e8:d5:95:d8:52:03:c5:52:b5:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:D8:4D:33:F0:92:D4:70:FD:E9:CB:9E:E0:DC:2D:88:C0:18:56
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
Signature Algorithm: sha256WithRSAEncryption
52:1f:bf:7f:4f:16:32:b1:8d:dc:81:c4:8f:a8:13:d6:d3:27:
df:b5:37:02:d0:da:59:57:9c:41:c9:b8:c3:8a:d9:8a:8d:64:
39:f6:a8:58:a5:9d:b5:14:1e:10:a5:68:5d:16:2c:28:43:2b:
79:c5:fe:09:2d:83:5f:02:d1:eb:db:be:17:61:c5:d7:70:7e:
6b:f3:f8:9f:ef:86:78:0e:fb:12:7c:69:5e:75:fb:38:71:17:
ed:66:03:64:15:03:83:3d:1c:c8:16:21:26:91:b4:c2:9e:c9:
97:49:58:7a:6c:2c:3e:de:10:e6:5b:2e:68:bb:d2:d9:c9:72:
fd:c2:13:53:43:ff:03:55:94:ee:4d:9e:f8:9b:c2:9d:18:86:
7a:65:40:ba:cd:d7:18:14:1d:aa:83:34:20:5b:85:78:bf:72:
12:a0:40:83:2a:ea:6a:cb:9b:08:20:8a:45:62:17:61:48:f2:
1b:9a:5f:20:62:c8:06:b5:75:8f:77:07:e5:0e:a9:6e:93:99:
3c:e5:ba:1d:11:c6:a0:c5:2d:23:a2:4b:34:1d:dc:17:78:0f:
15:12:2f:e0:8a:c3:81:7e:5a:b2:48:d1:3e:29:19:0f:a4:af:
c0:27:5f:ad:f6:9b:91:8d:e4:19:4b:3d:cd:b0:0c:66:33:50:
e5:bc:76:ac
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGK3OjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
NDE5NDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWY2YWQ4NGQzM2Yw
OTJkNDcwZmRlOWNiOWVlMGRjMmQ4OGMwMTg1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPMGGiYl7ZF6Wke3DPDjlB7PU4WiCs5JlX6f/jU+08xIz65P
uExca8TG3DQF5s2W3EEvacihANr8Lv1KtLYSyWWtMRXbcr/YgyXwRfMszHoMHR5T
on7UpfbrC6xjJ+B1hbAnPRln66X9iNjbHsElqkHHtgQxEmiW9+rOvaqpWo6RaK9D
b6bLPZcnFDxHJ5SGaup2KP7Lv4WMOWOvZE5AGFfibyvd4Rybetefda+ZCcIuPgp3
Nhf6+PEvvwcIhq+YcOzDdpHbakXOqg0Rp/Qb78UfSFxwxy6MaV4RyTbYQr0Xirmo
y8q0Pvd5Lc8ttJXC8b5OIGNb6NWV2FIDxVK1HCsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTvathNM/CS1HD96cue4NwtiMAYVjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzcycllUVFB3a3RSd19lbkxudURjTFlqQUdGWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUF4TANBgkqhkiG9w0BAQsF
AAOCAQEAUh+/f08WMrGN3IHEj6gT1tMn37U3AtDaWVecQcm4w4rZio1kOfaoWKWd
tRQeEKVoXRYsKEMrecX+CS2DXwLR69u+F2HF13B+a/P4n++GeA77EnxpXnX7OHEX
7WYDZBUDgz0cyBYhJpG0wp7Jl0lYemwsPt4Q5lsuaLvS2cly/cITU0P/A1WU7k2e
+JvCnRiGemVAus3XGBQdqoM0IFuFeL9yEqBAgyrqasubCCCKRWIXYUjyG5pfIGLI
BrV1j3cH5Q6pbpOZPOW6HRHGoMUtI6JLNB3cF3gPFRIv4IrDgX5askjRPikZD6Sv
wCdfrfabkY3kGUs9zbAMZjNQ5bx2rA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org