Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa
File: A3ifdb3PEai8oVZEWb0mgQTGfjo.roa (raw, json)
Hash identifier: Lyl4uhrO3F0heBQOgJFbg4ilh991Nj7uVzux6tRwsuw=
Subject key identifier: 03:78:9F:75:BD:CF:11:A8:BC:A1:56:44:59:BD:26:81:04:C6:7E:3A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15B8D3B2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa
Signing time: Sat 01 Jan 2022 05:59:04 +0000
ROA not before: Sat 01 Jan 2022 05:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141694
IP address blocks: 2a06:a001:a0c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364434354 (0x15b8d3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03789f75bdcf11a8bca1564459bd268104c67e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:27:0a:ee:34:8d:fc:72:ca:20:5c:16:5d:
c1:c3:5b:28:47:ce:e3:b1:ff:bf:ff:b2:59:23:31:
24:61:7f:0f:37:88:52:b9:55:89:4e:2b:db:c8:8b:
7a:7d:51:9e:d1:ba:6b:6d:cc:86:02:e5:f3:e6:0f:
d6:86:1b:17:8a:3b:63:c9:88:73:ca:8d:b6:40:37:
9d:b4:e9:41:23:9d:0b:0e:35:2d:a3:58:3b:fa:ac:
37:3d:8a:71:ca:ba:d3:0b:2b:63:b6:34:46:ba:98:
f6:c8:2f:2e:c4:ae:5e:9c:db:c4:9e:fe:7c:d3:2d:
45:c6:2e:ee:f0:ad:8a:ae:07:2d:09:f9:e5:5d:cf:
04:e9:6d:2c:5d:8a:d8:56:02:04:f5:07:b9:0d:79:
a8:b5:3e:43:c3:d3:c9:30:89:c5:05:d2:d4:05:91:
a7:45:56:3a:6d:a2:d6:ee:df:75:6e:f4:79:f7:ef:
88:0f:97:98:42:38:e8:35:6e:e4:46:9e:51:f5:c9:
c0:c7:6e:7c:f2:17:28:8e:76:dc:1d:4d:5b:63:ff:
c1:8f:75:d3:c8:7d:91:c4:73:d8:61:86:26:2d:08:
38:5b:fc:d2:0c:74:39:5f:b8:23:aa:7d:4f:69:f1:
73:97:03:1a:a8:0e:c2:23:2f:22:6c:f1:24:a9:82:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:9F:75:BD:CF:11:A8:BC:A1:56:44:59:BD:26:81:04:C6:7E:3A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a0c0::/44
Signature Algorithm: sha256WithRSAEncryption
74:09:4c:d6:8c:54:64:ea:39:56:a4:5b:3f:17:c5:e1:6a:54:
a1:f8:f5:85:ec:24:2a:26:1d:1a:7e:55:dd:db:99:6a:b4:1a:
39:d0:e1:28:53:93:f3:09:f8:7c:ac:a6:1e:e1:da:e2:33:9f:
26:4e:7d:fd:0b:6f:f7:71:d8:a6:64:a1:0f:10:2d:e9:b1:a7:
23:e9:14:43:67:a8:5d:df:61:c0:0f:52:38:a6:ef:dd:70:cc:
80:43:b4:f9:a1:47:ae:8b:ab:ff:62:96:28:0c:ee:84:e3:ad:
71:40:18:d6:64:25:a1:92:18:b4:96:63:e8:c8:80:d0:27:8c:
fd:73:9f:e1:93:8a:36:ea:34:04:7e:a3:d9:83:f2:c8:ac:42:
ca:74:7d:b5:71:2e:4d:0b:84:89:74:18:02:b3:1a:73:e9:fd:
a6:19:ef:69:77:bd:26:ef:c9:c6:22:a9:ae:1b:88:76:b0:34:
4e:5c:2f:41:69:b3:98:e3:f9:49:8d:c8:bd:fc:10:47:4c:39:
7d:2a:3f:64:53:51:b1:10:ea:3f:2f:52:3b:8a:04:ff:cb:29:
75:df:65:d3:0a:c3:b0:f7:f2:b2:ea:52:c9:ff:cc:72:32:e5:
c9:dc:b1:8b:51:19:08:83:f2:4f:ed:4d:25:53:b5:0f:59:2f:
aa:14:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org