Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8QnqD-zZYRt1InxDof_O3HX0OQ8.roa
File: 8QnqD-zZYRt1InxDof_O3HX0OQ8.roa (raw, json)
Hash identifier: pF4LFMfcQlfSxPNQTCh2zUPkeUJnMHJnTaBSg1UnSqg=
Subject key identifier: F1:09:EA:0F:EC:D9:61:1B:75:22:7C:43:A1:FF:CE:DC:75:F4:39:0F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01832D5B597C994BC3B7DC2CF8F459062D1E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8QnqD-zZYRt1InxDof_O3HX0OQ8.roa
Signing time: Sun 11 Sep 2022 16:21:44 +0000
ROA not before: Sun 11 Sep 2022 16:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204901
IP address blocks: 2a06:a005:1c20::/44 maxlen: 48
2a06:a005:1690::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2d:5b:59:7c:99:4b:c3:b7:dc:2c:f8:f4:59:06:2d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 11 16:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f109ea0fecd9611b75227c43a1ffcedc75f4390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:51:ee:59:1e:a0:a7:16:cc:5c:0d:c9:9d:
5f:d4:24:55:2f:b0:cc:21:4d:4e:b6:cd:28:f6:a3:
77:bf:bc:ed:1a:ee:fe:45:80:9f:67:d6:be:a4:e8:
14:cc:7b:98:ea:a1:ec:74:55:91:89:c2:1a:e3:fa:
15:b8:8b:c9:ae:b6:b5:0c:cf:93:67:17:f9:35:ec:
82:20:71:9b:1e:82:0d:bd:35:0e:a2:1a:b4:f4:66:
66:19:6b:84:a1:d3:05:ab:76:b5:b4:fa:97:e5:96:
87:c5:bd:f0:bd:fe:03:52:5d:28:f3:4b:bd:28:9f:
93:37:15:5f:a1:d8:ac:f6:d8:3a:a4:3e:2a:4f:0e:
36:4e:e6:1c:68:2b:b0:4e:af:b4:c4:96:46:a7:2f:
2b:11:31:ba:29:8a:d5:67:84:bf:e4:95:6d:e1:66:
92:e6:ec:80:50:16:f5:2d:69:94:53:bc:26:3c:30:
57:bc:08:4c:00:20:69:75:4b:17:1b:6b:7f:34:e1:
9a:e0:77:2f:35:53:1e:fa:df:be:be:c0:cc:73:2d:
f7:76:00:9e:dc:69:ce:af:64:d6:e9:17:87:b3:67:
8c:82:7d:da:f6:1e:dd:fa:5e:96:97:7a:c3:de:9d:
6d:ea:a0:43:32:ef:7e:b8:84:0b:9b:bd:9a:0b:ee:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:EA:0F:EC:D9:61:1B:75:22:7C:43:A1:FF:CE:DC:75:F4:39:0F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8QnqD-zZYRt1InxDof_O3HX0OQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1690::/44
2a06:a005:1c20::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
44:72:d5:0d:59:6e:d1:96:f4:a9:c9:e7:38:ae:a0:5e:ac:ef:
3d:ff:1c:9a:f7:73:3d:05:c3:79:ca:05:4f:00:b2:c4:15:af:
fa:b7:2a:da:4e:35:e7:0e:ca:45:1c:8a:82:9a:3e:5c:7d:05:
f3:42:20:38:65:51:4c:8d:a0:d3:77:e9:44:a3:35:0b:12:5f:
5d:0e:08:3e:40:c5:51:e8:8c:c5:29:02:46:8a:c4:0f:ab:c1:
78:c3:ea:00:0b:46:51:8f:78:7b:31:09:c3:09:0b:9b:e9:0e:
34:f7:7a:7f:c3:5b:7f:1f:8b:f9:c4:14:5f:77:89:19:35:e9:
8b:2f:64:97:de:7c:84:1e:d3:f6:fa:37:93:6e:1b:53:87:19:
2f:24:34:87:e7:24:28:42:e7:e0:af:eb:2e:e4:9c:35:4b:73:
86:af:e1:6d:e2:99:cb:5b:64:f3:6e:3e:30:00:86:64:fd:8e:
ab:7d:a6:2f:ba:21:f0:3d:1f:7c:8b:1b:79:5f:22:9b:4f:2f:
5a:bf:93:2b:b3:cb:46:43:24:5a:cb:2e:b0:b5:af:e1:f9:b2:
3f:f3:73:e8:82:08:85:79:1a:b8:c7:52:2d:99:10:3c:40:50:
5e:0a:ba:56:11:d9:23:e6:96:2a:94:b3:1f:3b:7d:b1:48:2c:
43:86:de:81
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYMtW1l8mUvDt9ws+PRZBi0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTExMTYyMTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTA5ZWEwZmVjZDk2MTFiNzUyMjdjNDNhMWZmY2VkYzc1ZjQzOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCFR7lkeoKcWzFwNyZ1f1CRVL7DM
IU1Ots0o9qN3v7ztGu7+RYCfZ9a+pOgUzHuY6qHsdFWRicIa4/oVuIvJrra1DM+T
Zxf5NeyCIHGbHoINvTUOohq09GZmGWuEodMFq3a1tPqX5ZaHxb3wvf4DUl0o80u9
KJ+TNxVfodis9tg6pD4qTw42TuYcaCuwTq+0xJZGpy8rETG6KYrVZ4S/5JVt4WaS
5uyAUBb1LWmUU7wmPDBXvAhMACBpdUsXG2t/NOGa4HcvNVMe+t++vsDMcy33dgCe
3GnOr2TW6ReHs2eMgn3a9h7d+l6Wl3rD3p1t6qBDMu9+uIQLm72aC+5qFQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPEJ6g/s2WEbdSJ8Q6H/ztx19DkPMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvOFFucUQtelpZUnQxSW54RG9mX08zSFgwT1E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgagBRaQ
AwcEKgagBRwgAwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQBEctUNWW7RlvSp
yec4rqBerO89/xya93M9BcN5ygVPALLEFa/6tyraTjXnDspFHIqCmj5cfQXzQiA4
ZVFMjaDTd+lEozULEl9dDgg+QMVR6IzFKQJGisQPq8F4w+oAC0ZRj3h7MQnDCQub
6Q4093p/w1t/H4v5xBRfd4kZNemLL2SX3nyEHtP2+jeTbhtThxkvJDSH5yQoQufg
r+su5Jw1S3OGr+Ft4pnLW2Tzbj4wAIZk/Y6rfaYvuiHwPR98ixt5XyKbTy9av5Mr
s8tGQyRayy6wta/h+bI/83PoggiFeRq4x1ItmRA8QFBeCrpWEdkj5pYqlLMfO32x
SCxDht6B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org