Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa
File: B_3_LIxWZRqvIA6vGaNbH63sKLI.roa (raw, json)
Hash identifier: 0iu6Yg17SJq4puwZ1tVG6RYuSFp+zsqBby5uPbrXl/k=
Subject key identifier: 07:FD:FF:2C:8C:56:65:1A:AF:20:0E:AF:19:A3:5B:1F:AD:EC:28:B2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181DC2F1C80F5675A8D807BCA1DB1D4A8D0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa
Signing time: Fri 08 Jul 2022 05:01:23 +0000
ROA not before: Fri 08 Jul 2022 05:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204992
IP address blocks: 2a06:a005:a11::/48 maxlen: 48
2a06:a005:5f3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:2f:1c:80:f5:67:5a:8d:80:7b:ca:1d:b1:d4:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 8 05:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07fdff2c8c56651aaf200eaf19a35b1fadec28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:39:99:c7:05:dc:69:5c:96:92:92:83:ee:
d0:d2:7b:a0:9b:a3:39:71:f8:d2:79:22:68:f5:bf:
f5:a5:fc:5a:00:d0:b2:a3:64:18:4f:29:a9:41:28:
71:a1:22:d6:45:e3:06:45:a4:50:1f:b9:8f:76:62:
70:cf:d9:5f:eb:be:32:67:9c:fe:26:c0:fa:07:53:
ba:75:24:69:b1:8e:8c:8e:96:92:75:b6:37:cf:76:
75:fd:a1:ff:26:2f:fd:63:6c:7c:2d:e8:53:b3:a8:
ee:a1:97:9d:90:77:d4:85:18:fa:97:19:5e:7f:e9:
60:6c:e7:86:25:d4:aa:4b:e3:5c:a4:89:d2:a7:c9:
b4:a4:5c:70:d0:2e:d4:80:04:79:70:3d:d6:05:35:
32:19:91:a8:7d:5c:80:2a:6e:1e:92:84:9b:fc:38:
3e:f9:37:aa:5c:12:64:90:fd:b3:ce:6d:02:48:cb:
83:ab:6e:db:e8:25:17:8e:0b:8f:a0:46:fd:45:27:
1a:34:c0:34:3a:67:f0:af:f7:5c:f0:27:ef:d1:e2:
0a:3e:10:fc:5a:8a:04:59:ba:d4:38:7e:ce:15:7e:
20:31:a9:08:0b:b5:23:f6:f4:b1:6b:31:6c:74:1c:
f6:8e:39:30:bf:52:87:72:72:30:22:ba:76:22:7f:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:FF:2C:8C:56:65:1A:AF:20:0E:AF:19:A3:5B:1F:AD:EC:28:B2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f3::/48
2a06:a005:a11::/48
Signature Algorithm: sha256WithRSAEncryption
81:d8:2f:68:85:c1:30:b4:17:8c:5a:67:21:d7:8a:e2:40:1f:
5f:a9:8a:cb:b5:59:e3:32:17:9a:79:93:15:75:8e:c4:56:01:
99:b4:fe:6f:f5:f7:74:f4:cd:50:30:7c:0f:b7:8e:8e:91:a7:
07:59:d7:9c:9e:92:13:e4:b7:b6:b3:d3:40:f9:a5:1f:d3:81:
07:e5:9a:1b:d7:3e:4f:3c:e0:8a:7d:25:50:16:97:fa:ae:09:
34:a4:1c:10:62:b6:5e:04:40:50:2f:c7:0f:7e:8e:ee:77:e8:
f6:c5:99:96:ff:b0:7b:27:71:df:cc:3d:4f:72:df:df:e9:31:
e3:e9:77:12:6e:58:cc:d0:63:35:b0:05:29:03:a4:55:b2:12:
77:7e:81:ff:97:08:57:73:74:08:db:3b:95:9d:3f:ef:af:25:
a1:17:7f:e6:ef:d9:69:fb:ac:6f:60:ed:f1:6e:aa:51:53:23:
23:f6:83:01:51:9f:26:5e:f7:9c:75:a3:b9:62:40:6a:24:d0:
80:62:5b:4f:92:d5:58:65:87:45:7b:d7:dc:52:10:71:69:c5:
3d:a4:d6:7f:f7:ff:cc:a8:11:ba:39:54:ca:62:8f:24:8d:fe:
33:f6:62:64:2d:78:1d:01:76:eb:93:f7:99:e7:93:c2:63:fa:
5e:b2:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org