Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa
File: 7zosDK2n8Rheg-y2eD0k2J-noLw.roa (raw, json)
Hash identifier: VmORdBkYt0DmEq4Z1srbrXKiZ/p7jlTEfXRuLoIFgd0=
Subject key identifier: EF:3A:2C:0C:AD:A7:F1:18:5E:83:EC:B6:78:3D:24:D8:9F:A7:A0:BC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01846656EFFB01E9B2492D3165B955ED06C1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa
Signing time: Fri 11 Nov 2022 10:58:04 +0000
ROA not before: Fri 11 Nov 2022 10:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210631
IP address blocks: 2a06:a005:22a0::/44 maxlen: 48
2a06:a005:2290::/44 maxlen: 48
2a06:a005:22b0::/44 maxlen: 48
2a06:a005:22c0::/44 maxlen: 48
2a06:a005:22d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:56:ef:fb:01:e9:b2:49:2d:31:65:b9:55:ed:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 11 10:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef3a2c0cada7f1185e83ecb6783d24d89fa7a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:76:53:9e:02:3d:b1:95:69:40:07:db:96:
a8:de:6f:13:86:99:5e:3c:35:2b:8f:2e:33:9a:a3:
e9:84:6e:0c:4c:c5:69:b1:24:74:f8:f7:f9:c5:d3:
5a:ae:38:74:86:fa:83:19:7f:9f:07:2c:a0:49:49:
06:e2:b4:78:6a:d2:72:56:83:5f:fe:4a:63:8d:7e:
cf:4d:13:b7:7f:38:53:03:60:c9:4f:c0:d6:5b:40:
69:59:6f:9f:67:c0:d7:a8:12:f3:23:23:d3:74:23:
99:5d:7f:11:ec:c4:20:ad:dc:65:1b:d4:03:c9:d5:
91:9d:9e:17:3f:f9:98:f2:dd:26:6b:a7:b2:f1:96:
db:30:18:1b:ee:81:aa:ce:b5:24:fb:08:3c:bd:f9:
21:0f:5b:41:62:0a:c7:d8:c1:ec:e2:25:d1:6c:3d:
67:c2:6a:21:d7:8a:de:d2:32:5c:1e:0d:8f:1a:c7:
79:e5:ab:3e:8d:2e:66:f5:de:82:1d:ec:bc:5a:ed:
50:ab:20:be:40:7e:19:73:bc:6c:79:43:6e:dd:58:
3f:da:af:13:3b:bf:65:0b:be:6e:9e:e4:7b:b0:02:
23:17:cf:bd:b3:f1:f4:9b:93:7e:09:b1:7d:b2:30:
8a:98:8b:81:83:c6:ff:ce:68:cc:4e:78:47:71:61:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:2C:0C:AD:A7:F1:18:5E:83:EC:B6:78:3D:24:D8:9F:A7:A0:BC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2290::-2a06:a005:22df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:e5:ad:bb:e3:82:2a:bb:77:84:fc:f9:24:eb:12:a5:5d:e8:
dc:f5:16:91:83:a6:9c:76:08:84:02:dd:94:52:d9:b0:cc:d9:
95:f6:2d:6e:98:22:b5:19:76:bb:4f:32:d1:33:01:a7:19:3c:
27:6a:67:05:53:c5:4c:e1:bc:1c:ca:d3:5a:3c:dd:8f:e6:5b:
b1:08:0a:a8:16:0d:52:d8:ba:40:27:c3:9a:03:12:97:12:a7:
9f:88:53:fc:eb:0c:51:a5:65:19:fa:76:3c:8f:a8:f2:71:a8:
73:96:33:03:86:24:09:45:e7:b2:dd:60:5e:07:02:85:b6:a8:
f8:91:c2:8f:18:b0:7b:6c:9b:77:16:3a:7f:95:85:94:98:35:
b3:4d:66:b7:9b:1b:54:a4:99:7b:0f:f7:14:06:e1:ab:17:c1:
77:82:80:50:c8:02:9b:9e:b5:20:66:15:8e:10:ab:b0:ec:85:
7b:d2:d6:ee:44:c5:d3:98:99:4d:7e:cb:71:a0:c2:85:5b:aa:
7d:ad:65:b8:76:aa:95:9b:5d:03:12:1d:d3:59:db:37:04:ac:
96:d6:6f:6a:b4:6e:ad:b6:7e:f6:38:31:37:72:9c:bd:41:bf:
b2:ea:f8:de:ef:11:26:89:f2:30:12:5b:09:7f:3a:35:1a:d8:
44:dd:21:73
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYRmVu/7AemySS0xZblV7QbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTExMTA1ODA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjNhMmMwY2FkYTdmMTE4NWU4M2VjYjY3ODNkMjRkODlmYTdhMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmp2U54CPbGVaUAH25ao3m8Thple
PDUrjy4zmqPphG4MTMVpsSR0+Pf5xdNarjh0hvqDGX+fByygSUkG4rR4atJyVoNf
/kpjjX7PTRO3fzhTA2DJT8DWW0BpWW+fZ8DXqBLzIyPTdCOZXX8R7MQgrdxlG9QD
ydWRnZ4XP/mY8t0ma6ey8ZbbMBgb7oGqzrUk+wg8vfkhD1tBYgrH2MHs4iXRbD1n
wmoh14re0jJcHg2PGsd55as+jS5m9d6CHey8Wu1QqyC+QH4Zc7xseUNu3Vg/2q8T
O79lC75unuR7sAIjF8+9s/H0m5N+CbF9sjCKmIuBg8b/zmjMTnhHcWGhnwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFO86LAytp/EYXoPstng9JNifp6C8MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvN3pvc0RLMm44UmhlZy15MmVEMGsySi1ub0x3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAF
IpADBwUqBqAFIsAwDQYJKoZIhvcNAQELBQADggEBAI7lrbvjgiq7d4T8+STrEqVd
6Nz1FpGDppx2CIQC3ZRS2bDM2ZX2LW6YIrUZdrtPMtEzAacZPCdqZwVTxUzhvBzK
01o83Y/mW7EICqgWDVLYukAnw5oDEpcSp5+IU/zrDFGlZRn6djyPqPJxqHOWMwOG
JAlF57LdYF4HAoW2qPiRwo8YsHtsm3cWOn+VhZSYNbNNZrebG1SkmXsP9xQG4asX
wXeCgFDIApuetSBmFY4Qq7DshXvS1u5ExdOYmU1+y3GgwoVbqn2tZbh2qpWbXQMS
HdNZ2zcErJbWb2q0bq22fvY4MTdynL1Bv7Lq+N7vESaJ8jASWwl/OjUa2ETdIXM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org