Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7fkWx0x4_kJllRTSAPphHC0uKpE.roa
File: 7fkWx0x4_kJllRTSAPphHC0uKpE.roa (raw, json)
Hash identifier: mmWR+yfy+P54t825gGDcHVyZMRitD7GWZl598J9+5uk=
Subject key identifier: ED:F9:16:C7:4C:78:FE:42:65:95:14:D2:00:FA:61:1C:2D:2E:2A:91
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182D5E23D88DB48AC0167FC87AD8AFB68DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7fkWx0x4_kJllRTSAPphHC0uKpE.roa
Signing time: Thu 25 Aug 2022 16:42:30 +0000
ROA not before: Thu 25 Aug 2022 16:42:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394414
IP address blocks: 2a06:a005:1a00::/44 maxlen: 48
2a06:a005:19a0::/44 maxlen: 48
2a06:a005:ae0::/44 maxlen: 48
2a06:a005:19f0::/44 maxlen: 48
2a06:a005:2d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:e2:3d:88:db:48:ac:01:67:fc:87:ad:8a:fb:68:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 25 16:42:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edf916c74c78fe42659514d200fa611c2d2e2a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:2b:6b:5e:70:b0:11:b5:ba:91:13:66:d4:
0c:53:37:24:fa:f1:03:a7:26:49:1a:85:0d:aa:28:
0d:b3:13:d1:91:42:3e:0d:4c:47:a6:4a:54:1c:4d:
dd:c8:c3:5d:0f:ef:49:dd:38:f9:71:6c:de:67:1a:
2e:0e:7e:55:92:ef:63:1e:b7:43:3a:e5:20:17:09:
ed:44:d2:5f:4c:e3:45:67:bb:f8:6f:cc:78:8f:40:
a1:3a:4d:72:40:19:de:78:64:b2:f4:b9:68:9e:21:
02:8f:cc:f1:ac:ee:25:1f:d4:3a:6f:66:6f:7f:44:
0b:07:14:04:3d:c5:ed:a2:0c:7d:25:31:f8:bb:05:
f6:12:ec:b4:00:6b:36:6c:d6:39:a5:e5:b6:a1:4f:
75:6e:d2:66:1f:e0:c7:2f:1f:05:ff:33:4f:8b:6b:
58:06:93:a0:54:af:80:c1:7f:96:2e:e5:79:ba:27:
b8:93:12:c7:16:6f:44:dd:c5:9b:d1:14:0f:74:00:
b6:f6:4c:3f:2d:a1:6f:bd:3d:b9:f2:b2:df:db:7e:
f4:53:bb:cf:bb:ac:da:ce:d3:4d:9d:c0:f2:d4:5a:
77:98:e1:6f:f7:0d:39:e8:46:53:2a:8e:b6:9a:dc:
b3:5b:95:c2:34:5c:42:0f:9b:30:bc:c1:4a:b9:43:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:16:C7:4C:78:FE:42:65:95:14:D2:00:FA:61:1C:2D:2E:2A:91
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7fkWx0x4_kJllRTSAPphHC0uKpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d8::/48
2a06:a005:ae0::/44
2a06:a005:19a0::/44
2a06:a005:19f0::-2a06:a005:1a0f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:3a:65:06:eb:20:88:ed:36:36:28:bf:61:8f:3d:19:57:cf:
72:5e:ea:37:6b:ac:a4:6a:4b:5f:33:12:01:2d:58:f0:d7:74:
75:7e:2e:90:f7:4d:12:66:b2:04:5d:b5:e1:71:52:e1:6c:1c:
f3:e3:fc:b3:59:86:80:8c:c1:f1:94:94:7e:35:44:35:cb:de:
49:c5:9a:29:6d:cb:56:98:74:b9:78:a7:7b:97:78:7d:0b:d1:
b9:60:d7:4b:fc:a3:4b:f4:d2:3f:fb:a8:34:de:34:73:8d:9c:
9d:a2:f0:4a:35:ea:ac:84:78:69:cf:5b:a6:6a:4a:e0:2b:28:
4d:d0:94:9b:a1:24:af:a1:78:c5:01:04:d9:21:60:96:d5:22:
e1:fb:26:e2:f2:ae:d7:f0:65:22:bb:ba:5b:de:2b:12:80:8a:
b0:db:fd:65:09:27:38:37:04:77:46:11:b6:bb:70:df:f2:7c:
30:db:1e:16:43:0a:bd:d8:c6:9b:44:99:cd:cc:d1:72:2d:5f:
36:25:85:43:c1:8b:e4:01:1d:e8:c8:84:1a:1d:f2:f3:2f:ff:
f7:5d:88:b1:45:6c:4c:21:37:2d:14:68:d4:0a:48:7b:a6:28:
fc:c6:e1:a7:92:c1:e6:54:8c:ac:78:f3:5a:25:d2:a6:32:b3:
53:1f:a9:93
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYLV4j2I20isAWf8h62K+2jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI1MTY0MjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGY5MTZjNzRjNzhmZTQyNjU5NTE0ZDIwMGZhNjExYzJkMmUyYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbMra15wsBG1upETZtQMUzck+vED
pyZJGoUNqigNsxPRkUI+DUxHpkpUHE3dyMNdD+9J3Tj5cWzeZxouDn5Vku9jHrdD
OuUgFwntRNJfTONFZ7v4b8x4j0ChOk1yQBneeGSy9LloniECj8zxrO4lH9Q6b2Zv
f0QLBxQEPcXtogx9JTH4uwX2Euy0AGs2bNY5peW2oU91btJmH+DHLx8F/zNPi2tY
BpOgVK+AwX+WLuV5uie4kxLHFm9E3cWb0RQPdAC29kw/LaFvvT258rLf2370U7vP
u6zaztNNncDy1Fp3mOFv9w056EZTKo62mtyzW5XCNFxCD5swvMFKuUNU/QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFO35FsdMeP5CZZUU0gD6YRwtLiqRMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvN2ZrV3gweDRfa0psbFJUU0FQcGhIQzB1S3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcAKgagBQLY
AwcEKgagBQrgAwcEKgagBRmgMBIDBwQqBqAFGfADBwQqBqAFGgAwDQYJKoZIhvcN
AQELBQADggEBAJw6ZQbrIIjtNjYov2GPPRlXz3Je6jdrrKRqS18zEgEtWPDXdHV+
LpD3TRJmsgRdteFxUuFsHPPj/LNZhoCMwfGUlH41RDXL3knFmilty1aYdLl4p3uX
eH0L0blg10v8o0v00j/7qDTeNHONnJ2i8Eo16qyEeGnPW6ZqSuArKE3QlJuhJK+h
eMUBBNkhYJbVIuH7JuLyrtfwZSK7ulveKxKAirDb/WUJJzg3BHdGEba7cN/yfDDb
HhZDCr3YxptEmc3M0XItXzYlhUPBi+QBHejIhBod8vMv//ddiLFFbEwhNy0UaNQK
SHumKPzG4aeSweZUjKx481ol0qYys1MfqZM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org