Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa
File: B5JMguFDBOjPtDqBa30EOMvb2SY.roa (raw, json)
Hash identifier: U9Opgpol1WD4BHsnqJqdQzrP1/1s7vsDsHt6uFqdYKg=
Subject key identifier: 07:92:4C:82:E1:43:04:E8:CF:B4:3A:81:6B:7D:04:38:CB:DB:D9:26
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184ED328738BEB91E661894C0F3DCFFEF7D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa
Signing time: Wed 07 Dec 2022 15:27:02 +0000
ROA not before: Wed 07 Dec 2022 15:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
2a06:a005:25e0::/44 maxlen: 48
2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:32:87:38:be:b9:1e:66:18:94:c0:f3:dc:ff:ef:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 15:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07924c82e14304e8cfb43a816b7d0438cbdbd926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:68:9e:24:d9:77:6c:8f:ea:80:b8:5c:b6:
4c:f8:7f:12:2f:38:d2:14:ab:6a:eb:32:16:10:bb:
51:fb:95:1c:44:71:aa:66:58:9b:63:77:d0:1d:9c:
3b:59:03:39:8c:25:94:05:fc:35:93:b2:84:c7:a2:
71:eb:c1:60:12:1b:34:fe:81:10:11:19:f2:0a:f6:
9a:ca:6a:02:1b:8b:5b:da:5e:33:d3:fd:69:b9:96:
28:59:7a:88:31:e2:73:b6:ae:26:6f:bc:c1:b6:02:
df:66:48:2e:46:e9:a1:c9:f1:81:84:7e:83:00:5d:
5a:d0:c8:24:c8:24:cb:13:a3:35:0d:6d:fe:aa:4e:
6a:1e:df:4e:45:e1:c9:7c:28:51:fd:f0:46:c4:38:
f7:4c:57:10:a4:52:17:34:bd:ef:73:3a:15:8d:da:
1e:68:42:ec:0b:43:91:79:87:75:3a:e4:99:ce:7f:
46:17:b8:08:3a:f9:b8:cb:05:a0:97:67:70:41:99:
4d:92:4d:e0:84:14:cc:2b:ea:ea:61:9e:fe:9b:76:
2e:ac:57:25:3c:45:8e:b6:7a:37:a9:c4:45:e8:12:
e7:45:fd:2e:12:44:a9:b9:5f:1b:27:ca:58:fc:9e:
a8:47:26:b9:ec:64:e0:7d:9c:93:b1:fe:ff:d0:aa:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:4C:82:E1:43:04:E8:CF:B4:3A:81:6B:7D:04:38:CB:DB:D9:26
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
2a06:a005:25e0::/44
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
0c:12:9e:62:33:84:6c:e2:ca:00:13:9c:54:25:75:63:b5:2d:
8a:9c:f9:52:48:d4:54:f5:a4:bf:4a:65:1f:4d:e5:60:6a:d3:
ca:92:93:38:b0:87:8d:90:da:37:b5:97:a6:70:68:81:ef:8d:
f8:85:3b:99:62:f8:a2:9a:ce:5e:22:1b:c9:77:25:d9:4a:fb:
c4:34:ef:f0:e2:52:d6:e3:49:f1:70:4b:eb:cc:63:49:19:b2:
ee:16:68:79:b0:4c:6e:58:58:6b:e4:34:30:b3:b6:95:7a:e7:
4e:fc:64:40:3f:91:73:dc:aa:52:a2:ee:1f:fb:5e:82:17:c6:
b5:06:c3:66:2d:ca:33:2e:47:78:a6:c6:05:ee:8e:c7:65:ab:
9e:05:be:f0:9e:4d:f9:43:be:c9:9b:95:b7:a4:dc:d2:9c:0a:
e8:cc:b8:84:4a:8a:cb:79:f4:8b:29:50:f7:c4:ca:43:cd:af:
cd:69:ae:ce:b2:1c:20:c3:5b:89:41:fe:89:9c:7e:93:f9:20:
4b:0c:3f:3c:94:19:ca:99:79:91:5a:ec:52:64:d2:0b:17:e3:
b5:b6:54:75:54:53:f7:81:1b:2a:cb:b7:c6:b4:a7:c6:31:e0:
eb:85:42:2a:d9:94:ae:ca:67:d7:c6:e1:6a:cb:52:a8:67:70:
c1:19:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org