Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa
File: AnFohNRtZf1IjS6l5E7DwttqX_c.roa (raw, json)
Hash identifier: ZE+oriw9P3ovcoI2nZJecv5crZb1NLA19LxfR4SXgpU=
Subject key identifier: 02:71:68:84:D4:6D:65:FD:48:8D:2E:A5:E4:4E:C3:C2:DB:6A:5F:F7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182D634A3F68E7B390855040CFAA2E578FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa
Signing time: Thu 25 Aug 2022 18:12:30 +0000
ROA not before: Thu 25 Aug 2022 18:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:18d0::/44 maxlen: 48
2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:34:a3:f6:8e:7b:39:08:55:04:0c:fa:a2:e5:78:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 25 18:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02716884d46d65fd488d2ea5e44ec3c2db6a5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:28:35:f9:d8:80:bf:bb:ab:cc:90:25:13:
c8:17:4e:7f:1c:13:34:0f:a2:76:b8:55:23:b0:2b:
6f:ed:4c:54:84:df:88:41:0e:94:64:1d:d8:3d:2b:
08:24:ab:3e:a5:c3:8e:19:99:17:98:d4:83:8a:5f:
03:ff:8a:1f:60:73:9f:08:fd:45:f9:89:18:5a:bb:
45:5e:76:89:19:b9:03:01:2b:75:ee:12:f7:96:c3:
9e:f3:a7:70:e1:2d:90:f5:18:9e:12:d6:c8:5d:73:
05:ff:4f:09:59:62:cd:b2:f2:07:3c:85:20:fa:37:
ba:bb:63:1f:d0:be:59:16:0c:51:7f:24:b1:30:92:
e9:3f:ae:ba:c1:0a:d6:d2:d5:f8:5c:b1:17:e7:7e:
27:7e:11:8e:30:7a:70:fb:c8:7b:b6:ba:a5:b4:c5:
f9:4e:15:dd:bb:27:39:bb:9a:c5:da:dd:de:ae:a4:
1b:84:b1:6d:1c:ce:71:dc:35:a8:64:dd:a3:f9:90:
c1:cf:a5:73:4b:0a:6e:7e:20:0a:3e:83:37:47:9f:
02:7f:bf:af:82:f4:c8:f3:be:18:ca:c4:7e:67:da:
e0:95:a0:cb:9d:1f:35:d7:27:01:21:c1:27:ee:a5:
3a:34:fc:78:c3:3c:be:11:d2:6f:2e:53:5b:29:fd:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:68:84:D4:6D:65:FD:48:8D:2E:A5:E4:4E:C3:C2:DB:6A:5F:F7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
2a06:a005:18d0::/44
Signature Algorithm: sha256WithRSAEncryption
90:c7:23:ca:98:31:e1:95:0c:dd:26:65:6d:01:cf:43:07:55:
09:e7:7e:db:87:fc:6e:35:d0:36:f7:31:6f:e1:14:9e:bc:c3:
e8:a7:41:30:1c:a3:e0:7a:38:44:fd:e2:e4:6b:2f:ac:50:e4:
db:49:93:10:10:11:20:5d:bc:98:ce:64:eb:d8:d6:11:a2:2b:
fb:1a:72:c8:9d:2b:13:be:27:64:58:5a:34:c9:c1:32:88:fb:
a4:c6:5a:80:0f:e0:f2:d4:50:f2:7a:75:4e:45:18:b9:d2:af:
1f:57:e4:a4:9d:bc:27:e8:5d:7e:93:3d:21:f6:1c:68:e4:8c:
6a:bf:ed:53:aa:dd:da:6b:e2:c5:38:4b:67:77:4d:29:f8:a9:
84:a6:e1:53:8e:2a:e2:74:35:c4:ac:c8:c2:82:cb:69:04:e3:
a1:35:70:5e:7c:5d:81:ba:01:af:5b:a7:d9:17:3c:9c:0a:c1:
34:6b:dc:36:67:d3:08:28:d8:1d:59:01:9a:8d:54:8c:74:8a:
e4:0f:b9:a8:d3:31:d7:a5:6a:03:fe:bd:18:51:49:25:23:1d:
f6:a3:ab:20:bb:11:5c:34:01:db:0a:29:ca:ac:53:f8:7e:5e:
6d:6b:7b:56:c2:b0:6f:8b:1d:fa:2c:dc:b9:c4:5b:2f:12:93:
3f:e1:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org