Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8KjZH4WDnU9Kp1xaVKz3jcSNKBw.roa
File: 8KjZH4WDnU9Kp1xaVKz3jcSNKBw.roa (raw, json)
Hash identifier: BnOUX0taUlObzTF3VKyvTSdgcZa5D0cfkXqzVRAwDKw=
Subject key identifier: F0:A8:D9:1F:85:83:9D:4F:4A:A7:5C:5A:54:AC:F7:8D:C4:8D:28:1C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EB70188CB356A755DF9B40F4A3B3C5F4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8KjZH4WDnU9Kp1xaVKz3jcSNKBw.roa
Signing time: Wed 07 Dec 2022 07:15:02 +0000
ROA not before: Wed 07 Dec 2022 07:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211877
IP address blocks: 2a06:a005:ed0::/44 maxlen: 48
2a06:a005:d40::/44 maxlen: 48
2a06:a005:20b0::/44 maxlen: 48
2a06:a005:20a0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:70:18:8c:b3:56:a7:55:df:9b:40:f4:a3:b3:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 07:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a8d91f85839d4f4aa75c5a54acf78dc48d281c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:78:bc:11:63:6a:5a:6d:5e:7a:27:f2:d1:
31:83:ff:dd:76:39:49:1e:69:5a:8c:02:e6:38:19:
2f:03:17:f6:6e:93:e2:30:7e:25:87:2a:93:00:00:
ca:b3:ad:fe:16:01:49:8b:32:78:ea:b9:a3:57:82:
b7:ee:8c:18:8c:22:b2:61:12:5e:02:33:1f:d2:ae:
9a:07:8d:1f:2f:2c:4c:52:6c:44:03:44:8d:fd:a1:
6e:30:cc:e6:81:26:38:eb:7d:ae:e4:54:62:dc:36:
9e:f4:ff:dd:79:38:17:fa:21:fe:94:d4:3c:7e:0f:
17:a6:2b:d1:17:00:b3:6a:2d:46:ef:7b:5e:47:70:
62:27:da:e9:8d:d7:47:8f:17:1c:8c:16:ca:59:4d:
c7:b6:d5:81:0d:0e:f5:4b:10:47:2e:7d:fe:8b:c5:
c8:f0:05:a3:6b:a5:8a:49:ed:5a:d1:a9:73:d4:e0:
e5:e5:e1:21:92:84:f3:bf:56:88:fa:bd:2f:60:e5:
b6:40:8c:cc:58:40:95:8f:a6:16:f1:09:b6:85:92:
0c:17:cc:bf:83:35:f6:7e:73:61:8b:26:34:78:2c:
10:f5:85:86:f6:59:18:a7:25:e3:9d:2f:c2:3c:04:
e4:22:8c:0f:6e:01:6c:7f:e8:d6:a7:50:14:d3:68:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:D9:1F:85:83:9D:4F:4A:A7:5C:5A:54:AC:F7:8D:C4:8D:28:1C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8KjZH4WDnU9Kp1xaVKz3jcSNKBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
2a06:a005:20a0::/43
Signature Algorithm: sha256WithRSAEncryption
6d:55:74:ed:9e:12:a3:10:14:78:e7:1b:5d:f7:2e:ac:01:c5:
a9:0f:8d:de:4f:8f:69:ae:f6:a5:63:cd:b5:90:18:ec:2e:89:
3e:39:0d:fb:e5:35:51:66:e3:68:ff:73:7c:90:16:80:3b:63:
f0:4d:61:33:ad:c4:bb:7a:0c:5e:8c:02:7e:64:03:cd:a8:ef:
c5:4d:6c:4c:8c:cf:4c:a7:6f:4e:33:03:f1:f7:43:b5:b3:a9:
12:35:fd:67:de:04:8a:c2:1a:06:67:76:d8:e2:5e:e4:3f:1a:
8d:a0:f0:9b:d7:ba:05:4a:72:b2:d3:08:a2:0e:d6:7a:81:4a:
71:d6:77:40:bb:0d:8a:c4:b0:ca:6f:4b:80:d2:b3:26:9d:30:
74:b2:62:63:07:a8:7f:eb:1d:bf:4d:a4:86:69:38:87:5b:99:
f3:3d:67:fe:00:11:bf:26:1b:94:5a:ad:52:0b:03:67:13:57:
96:4f:4b:1f:67:dd:33:a3:3c:2c:e0:67:96:b2:30:e8:61:42:
74:89:b6:9c:f7:ee:60:76:6a:50:f8:5c:c8:23:8f:e8:63:a9:
06:2d:5b:3e:a5:ef:8c:ef:73:ee:99:8e:f5:3a:58:a1:2c:a8:
ce:ab:9b:71:7a:ef:24:7a:20:43:57:13:76:da:4e:35:be:99:
d7:7c:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org