Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7Tw-fNVHdNXFJ-UINVXlNGeYR8I.roa
File: 7Tw-fNVHdNXFJ-UINVXlNGeYR8I.roa (raw, json)
Hash identifier: x2vZEzLft5WBqExX38ylPmdDXMTDR6N4DhTPxriAQvs=
Subject key identifier: ED:3C:3E:7C:D5:47:74:D5:C5:27:E5:08:35:55:E5:34:67:98:47:C2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18DCFD0D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7Tw-fNVHdNXFJ-UINVXlNGeYR8I.roa
Signing time: Thu 28 Apr 2022 20:33:43 +0000
ROA not before: Thu 28 Apr 2022 20:33:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211495
IP address blocks: 2a06:a005:6b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417135885 (0x18dcfd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 28 20:33:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed3c3e7cd54774d5c527e5083555e534679847c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:6d:ee:58:04:29:e5:6a:86:ef:c8:10:5e:
a4:7d:68:9e:df:a4:f0:30:f8:5b:71:de:62:70:93:
ae:7d:e6:2f:a2:57:92:fc:bb:22:f2:fe:7e:39:a6:
94:b2:f0:03:75:b4:53:cf:f9:07:71:f6:98:db:db:
be:7d:21:df:5b:96:c8:3c:83:77:da:d4:9c:08:b8:
42:40:3e:52:a5:2a:79:41:53:33:20:ba:9c:62:9b:
bb:cb:c3:7c:f1:20:ac:da:49:42:93:7c:7e:b1:3c:
b1:a4:4a:be:e0:d4:f9:0a:a5:f9:b9:66:b4:b6:d8:
2e:0a:66:aa:5d:86:8b:63:0f:72:1e:0a:36:aa:5e:
96:89:95:9d:70:0a:17:6a:6c:d4:a0:69:43:82:69:
72:78:4f:58:2e:c0:67:58:7b:27:bd:63:48:c3:d4:
58:06:60:d9:b9:da:27:30:6d:a8:4e:d8:2f:13:b4:
69:d8:f7:15:e1:15:ec:2b:da:6c:48:ef:bc:f7:2c:
c8:a0:d0:38:cf:e7:30:f2:ed:31:55:9d:81:14:da:
2e:0b:9d:64:15:36:4f:ff:21:70:ee:dc:74:39:de:
08:e7:d4:44:73:0c:b7:cf:c2:56:7f:73:1e:aa:cf:
59:0c:b1:68:59:a0:21:e5:4f:7f:ff:98:4d:4a:1a:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:3E:7C:D5:47:74:D5:C5:27:E5:08:35:55:E5:34:67:98:47:C2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7Tw-fNVHdNXFJ-UINVXlNGeYR8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
45:b4:aa:36:a2:b9:cc:43:e4:b1:56:e5:13:af:50:d4:3a:4e:
e9:2c:a3:d5:23:7f:d2:eb:d7:2f:40:8e:3b:bc:32:e8:17:86:
0b:02:cd:ca:b5:88:6f:e4:06:f7:7a:57:ba:7f:a6:94:e3:ec:
98:10:52:96:68:9b:93:c7:f5:07:ce:b5:e7:49:ca:58:6f:ea:
bb:44:16:47:d2:b9:e4:9a:93:1f:e5:11:ba:0c:2f:57:0f:23:
b1:f7:3b:d3:b9:6a:fb:34:ad:89:72:10:14:83:61:23:b6:1f:
07:c1:0a:3c:a5:21:12:4b:7e:50:6f:87:02:0b:24:e4:d3:b5:
cb:f1:fa:2a:e5:a5:0d:2f:0f:57:b7:01:40:7b:0d:4c:01:47:
e5:fa:a6:b1:b7:32:72:c3:52:7a:86:2c:51:66:91:32:56:69:
73:a1:92:8f:fa:a4:e2:2f:63:67:ab:d5:b0:da:5d:f6:cd:16:
f2:1f:d8:fc:c6:87:91:33:d1:22:09:e0:74:38:a6:37:77:ec:
ef:f6:9b:1a:15:ca:6a:a3:ce:8b:f8:1a:64:8e:bc:a5:e8:a7:
e1:44:bd:82:3c:e7:bd:9c:9b:5b:59:6a:82:1d:be:53:37:0a:
6c:7f:4f:cb:65:2f:fc:bb:9c:fe:31:21:57:2f:4c:35:4d:df:
81:ed:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org