Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa
File: 8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa (raw, json)
Hash identifier: rHXMVZHIl9xkaHvi3GWQlXUO6246vg6XY862MVWbitg=
Subject key identifier: F2:56:81:B6:83:4C:77:63:A4:D5:5C:09:EF:D3:1B:E5:4D:62:1B:1D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845E252AD911D3B760B5B69D5E0FD1E869
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa
Signing time: Wed 09 Nov 2022 20:46:44 +0000
ROA not before: Wed 09 Nov 2022 20:46:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203113
IP address blocks: 2a06:a005:2260::/44 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:8c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:25:2a:d9:11:d3:b7:60:b5:b6:9d:5e:0f:d1:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 9 20:46:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f25681b6834c7763a4d55c09efd31be54d621b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:b9:51:66:50:c9:67:06:15:d3:49:1a:d0:
ee:da:cb:b1:25:4a:50:41:a0:28:4d:16:fe:bb:d9:
08:fa:bb:6c:17:e1:3a:82:58:f7:bc:f6:8d:ea:c9:
fb:95:c7:56:03:bc:b9:7a:f3:17:f7:4d:2a:32:bf:
8d:55:f2:94:11:08:e1:9c:6e:bf:ef:8b:f5:a1:5a:
f4:45:37:bb:be:55:d1:79:23:95:8b:6a:87:4b:d6:
7d:03:21:91:91:d4:75:e7:03:f6:cc:b4:27:c2:80:
ec:50:f5:5a:a4:67:7f:42:6e:71:c3:53:ef:29:3b:
f6:ed:cb:6f:0d:b5:6d:f7:86:48:e0:0e:d3:5f:4f:
ad:dc:d2:6f:00:a8:d0:bf:19:03:66:f8:dd:c8:a2:
a9:3d:eb:7a:95:17:30:ab:99:0c:78:67:af:b3:24:
71:c2:e4:ae:29:fb:51:39:ee:ca:07:32:1e:e2:92:
2d:8e:58:84:1e:5c:c7:2c:8d:74:48:6d:cc:7e:7a:
5c:ba:65:bc:1b:bd:95:1d:67:a3:98:95:c7:95:e1:
b0:d6:de:dc:18:8f:69:2f:14:d6:21:cb:62:fa:24:
9f:92:9f:31:12:03:85:6a:ae:2f:cf:2d:a1:ea:cd:
20:30:32:98:5b:9c:7a:fa:9d:9e:a3:23:43:0d:80:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:81:B6:83:4C:77:63:A4:D5:5C:09:EF:D3:1B:E5:4D:62:1B:1D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:b0:b4:80:ab:2e:d3:df:01:26:24:e2:e3:ab:64:0a:f2:9e:
db:aa:b0:f9:31:52:41:2a:e0:54:16:46:27:98:d2:9b:1f:0b:
60:71:99:db:c2:34:3d:47:00:3d:16:c1:64:51:15:80:6a:b1:
f9:8a:71:20:4d:b1:ac:11:aa:b4:b4:13:85:24:2d:f4:8f:b2:
f6:f9:d2:52:15:7c:74:d4:ce:b5:96:18:cc:8b:0d:80:92:de:
17:e9:26:49:74:d2:c7:fa:c6:ff:4e:a8:e3:e1:f4:56:a0:b4:
bc:66:d0:a5:5c:2e:1f:b6:62:b1:23:cb:db:26:71:29:58:60:
48:e0:b2:e3:42:5e:0f:23:d1:39:0c:b9:a8:55:7f:da:47:dd:
b0:7f:ec:9c:6c:25:ad:86:e3:0f:07:3c:aa:4b:d0:10:7b:7c:
10:42:ec:83:9c:1b:58:f8:89:df:1d:e5:aa:2d:51:98:03:36:
6a:3a:07:7a:16:ec:d4:6f:9d:ac:a2:b8:10:e1:7f:2c:a2:f9:
f4:d7:99:b1:29:c2:2e:af:ab:51:53:a5:60:86:38:7b:22:85:
38:fb:85:a4:f4:19:ad:80:f6:b8:f1:84:ef:63:b1:99:13:1c:
f4:d1:9a:74:e2:85:d5:a1:33:74:4d:23:a6:45:f0:0d:2b:55:
5d:a0:3f:a2
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYReJSrZEdO3YLW2nV4P0ehpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTA5MjA0NjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjU2ODFiNjgzNGM3NzYzYTRkNTVjMDllZmQzMWJlNTRkNjIxYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqq5UWZQyWcGFdNJGtDu2suxJUpQ
QaAoTRb+u9kI+rtsF+E6glj3vPaN6sn7lcdWA7y5evMX900qMr+NVfKUEQjhnG6/
74v1oVr0RTe7vlXReSOVi2qHS9Z9AyGRkdR15wP2zLQnwoDsUPVapGd/Qm5xw1Pv
KTv27ctvDbVt94ZI4A7TX0+t3NJvAKjQvxkDZvjdyKKpPet6lRcwq5kMeGevsyRx
wuSuKftROe7KBzIe4pItjliEHlzHLI10SG3MfnpcumW8G72VHWejmJXHleGw1t7c
GI9pLxTWIcti+iSfkp8xEgOFaq4vzy2h6s0gMDKYW5x6+p2eoyNDDYDZuQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFPJWgbaDTHdjpNVcCe/TG+VNYhsdMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvOGxhQnRvTk1kMk9rMVZ3Sjc5TWI1VTFpR3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcEKgagBQjA
MBIDBwQqBqAFIlADBwQqBqAFImAwDQYJKoZIhvcNAQELBQADggEBAEOwtICrLtPf
ASYk4uOrZAryntuqsPkxUkEq4FQWRieY0psfC2BxmdvCND1HAD0WwWRRFYBqsfmK
cSBNsawRqrS0E4UkLfSPsvb50lIVfHTUzrWWGMyLDYCS3hfpJkl00sf6xv9OqOPh
9FagtLxm0KVcLh+2YrEjy9smcSlYYEjgsuNCXg8j0TkMuahVf9pH3bB/7JxsJa2G
4w8HPKpL0BB7fBBC7IOcG1j4id8d5aotUZgDNmo6B3oW7NRvnayiuBDhfyyi+fTX
mbEpwi6vq1FTpWCGOHsihTj7haT0Ga2A9rjxhO9jsZkTHPTRmnTihdWhM3RNI6ZF
8A0rVV2gP6I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org