Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/809_jvvL7Z7rWOF-jYDMtOHrZkw.roa
File: 809_jvvL7Z7rWOF-jYDMtOHrZkw.roa (raw, json)
Hash identifier: lop8hgY/fHoXYmEkWU0AHrrLIhx+2liYgzdBKsqaEII=
Subject key identifier: F3:4F:7F:8E:FB:CB:ED:9E:EB:58:E1:7E:8D:80:CC:B4:E1:EB:66:4C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19FB13C4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/809_jvvL7Z7rWOF-jYDMtOHrZkw.roa
Signing time: Sun 22 May 2022 13:26:30 +0000
ROA not before: Sun 22 May 2022 13:26:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435884996 (0x19fb13c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 22 13:26:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f34f7f8efbcbed9eeb58e17e8d80ccb4e1eb664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:ff:e4:43:36:51:17:5e:c7:81:4a:52:75:
31:59:ae:ba:ef:79:c6:93:5d:0b:36:c4:e8:5d:c7:
0a:32:1f:d5:bd:96:bc:89:6c:39:1a:c2:34:4c:5e:
bd:d3:5d:ef:fa:8d:fa:6a:bd:47:27:81:d3:3d:0c:
0f:b5:c9:cf:a7:f2:e2:e0:dd:09:bd:f7:f5:86:01:
f0:c8:e8:3f:8f:df:ed:cf:a7:53:b5:8d:09:4f:48:
91:a3:d0:9c:b4:59:62:ba:51:73:fd:e8:97:8f:4a:
a3:fe:53:28:8f:fa:f5:42:62:4a:af:17:69:84:88:
bf:2d:67:c4:8c:ed:7d:19:23:0b:d8:54:23:d7:2e:
06:2e:55:13:cd:7b:3e:47:46:7b:d9:08:75:b0:09:
b1:eb:35:3b:6b:8f:7b:36:51:f0:e8:47:4b:3b:1d:
f9:47:d0:09:3e:70:d2:38:37:75:90:54:ea:c7:77:
25:d2:13:90:90:94:1a:df:57:fd:cc:ae:e5:5b:9a:
69:ff:ed:6b:0a:8e:6d:ac:23:f0:70:78:db:f8:ae:
7c:8e:ca:d2:86:c9:85:10:03:3a:8c:5b:23:d1:69:
71:9e:55:76:9d:fd:f0:65:f3:e0:fa:40:0c:bb:2b:
44:39:11:af:b1:7c:0f:23:a1:f6:cc:c2:12:80:0e:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4F:7F:8E:FB:CB:ED:9E:EB:58:E1:7E:8D:80:CC:B4:E1:EB:66:4C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/809_jvvL7Z7rWOF-jYDMtOHrZkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
85:9e:b1:17:e3:8e:d3:98:de:cc:72:69:3d:6a:35:c8:5e:a3:
5a:a1:36:59:7b:f2:85:46:3e:78:8e:82:16:34:e0:08:d7:73:
1e:da:b5:df:f7:88:05:50:bb:b4:31:1c:19:81:2e:6a:9b:12:
f6:a7:ed:4f:d8:2c:60:1b:f7:d6:39:35:cb:9c:f3:60:05:fe:
3d:ca:c3:6e:34:4c:d7:0d:2f:35:34:04:d4:62:d9:9d:f3:91:
08:c6:b9:87:6a:f3:87:30:99:34:83:2b:be:56:6f:77:13:b3:
f4:22:70:7e:80:a8:f4:dc:71:5b:a4:12:59:56:c1:07:ae:e1:
72:da:26:59:2b:8a:53:da:a6:99:65:f2:01:0d:a9:9e:8a:33:
21:fe:17:b2:9b:a8:9e:e3:96:35:ed:61:86:79:f5:b6:ba:a2:
c5:d0:b6:67:fc:6e:5a:af:e0:fc:a9:5b:b1:53:81:e7:2f:96:
7a:5d:a2:f8:06:5d:ae:c6:37:dc:5e:ef:66:55:fa:4b:8a:03:
90:9d:90:84:c5:65:07:18:fd:3e:38:83:e8:b6:37:dc:d3:58:
43:00:e9:2e:57:45:22:23:a4:1d:0d:be:37:c5:ff:da:43:04:
bb:b1:24:1c:2b:86:32:22:88:93:e3:85:81:65:55:52:37:d8:
cd:b1:63:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEGfsTxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUy
MjEzMjYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjM0ZjdmOGVmYmNi
ZWQ5ZWViNThlMTdlOGQ4MGNjYjRlMWViNjY0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONH/+RDNlEXXseBSlJ1MVmuuu95xpNdCzbE6F3HCjIf1b2W
vIlsORrCNExevdNd7/qN+mq9RyeB0z0MD7XJz6fy4uDdCb339YYB8MjoP4/f7c+n
U7WNCU9IkaPQnLRZYrpRc/3ol49Ko/5TKI/69UJiSq8XaYSIvy1nxIztfRkjC9hU
I9cuBi5VE817PkdGe9kIdbAJses1O2uPezZR8OhHSzsd+UfQCT5w0jg3dZBU6sd3
JdITkJCUGt9X/cyu5Vuaaf/tawqObawj8HB42/iufI7K0obJhRADOoxbI9FpcZ5V
dp398GXz4PpADLsrRDkRr7F8DyOh9szCEoAOqU0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTzT3+O+8vtnutY4X6NgMy04etmTDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzgwOV9qdnZMN1o3cldPRi1qWURNdE9Iclprdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwJQQCAAIwHwMGBCoGEoAQAwUAKgagADAOAwUAKgag
AwMFASoGoAQwDQYJKoZIhvcNAQELBQADggEBAIWesRfjjtOY3sxyaT1qNcheo1qh
Nll78oVGPniOghY04AjXcx7atd/3iAVQu7QxHBmBLmqbEvan7U/YLGAb99Y5Ncuc
82AF/j3Kw240TNcNLzU0BNRi2Z3zkQjGuYdq84cwmTSDK75Wb3cTs/QicH6AqPTc
cVukEllWwQeu4XLaJlkrilPappll8gENqZ6KMyH+F7KbqJ7jljXtYYZ59ba6osXQ
tmf8blqv4PypW7FTgecvlnpdovgGXa7GN9xe72ZV+kuKA5CdkITFZQcY/T44g+i2
N9zTWEMA6S5XRSIjpB0NvjfF/9pDBLuxJBwrhjIiiJPjhYFlVVI32M2xYyE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org