Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BqJI_wh1REsRVuqyMQQ9PhboPU8.roa
File: BqJI_wh1REsRVuqyMQQ9PhboPU8.roa (raw, json)
Hash identifier: PTL286OCwGDJ9Rwc65yAR9XUswMQ65VCDHbMQ97Z4dg=
Subject key identifier: 06:A2:48:FF:08:75:44:4B:11:56:EA:B2:31:04:3D:3E:16:E8:3D:4F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EC764E2B3D32EB7E659A38BA9CBC6F4A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BqJI_wh1REsRVuqyMQQ9PhboPU8.roa
Signing time: Wed 07 Dec 2022 12:01:26 +0000
ROA not before: Wed 07 Dec 2022 12:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200800
IP address blocks: 2a0a:6040:a200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:76:4e:2b:3d:32:eb:7e:65:9a:38:ba:9c:bc:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 12:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06a248ff0875444b1156eab231043d3e16e83d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:af:f2:3d:ad:a0:b4:29:68:d8:d7:70:e9:
6a:70:dd:db:bb:f8:72:02:3b:94:86:ab:80:08:3b:
d2:d5:9a:b2:b3:e2:8f:76:80:87:ab:fd:c3:87:0a:
a0:cb:60:a4:2f:83:b7:77:4f:d0:03:0f:4c:cb:34:
a5:6a:d2:61:b3:fb:a9:ae:6d:43:5a:19:23:ef:37:
03:79:3a:76:bd:08:16:1d:6d:23:d4:4f:a9:dc:61:
15:79:5e:39:3f:ff:53:64:f5:dc:a0:36:d9:45:22:
f6:4a:d2:99:13:08:fd:36:32:f4:29:7a:c3:06:16:
53:a8:55:37:20:54:ce:b7:50:56:47:0c:ef:fd:81:
aa:79:0e:8b:49:b1:55:a9:fc:0c:0d:6a:8e:9f:9d:
bf:07:3e:4b:0f:bc:f6:9b:06:7a:e2:86:6f:00:fa:
ac:9e:8c:f6:47:d2:a4:6a:b6:8c:bd:f5:95:f5:26:
2e:59:c0:10:52:05:be:8e:86:cc:8c:22:81:c1:b4:
33:51:ff:9a:5d:7e:b8:18:ee:b4:f1:ef:e3:46:58:
3d:71:43:7a:a3:08:22:97:4d:f0:24:ef:fe:9a:be:
6d:ee:21:6f:6a:6e:36:57:88:58:e6:62:e9:3f:d9:
a0:70:7e:7e:d2:47:39:e2:2a:78:cd:64:f6:9a:6f:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:48:FF:08:75:44:4B:11:56:EA:B2:31:04:3D:3E:16:E8:3D:4F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BqJI_wh1REsRVuqyMQQ9PhboPU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a200::/40
Signature Algorithm: sha256WithRSAEncryption
18:ff:14:9d:8e:e9:d4:f5:b4:d0:e5:47:63:67:22:aa:03:7f:
34:9a:84:0e:a7:13:89:c2:da:b1:d0:dc:64:71:2c:f5:91:e0:
a3:6f:20:31:51:75:a7:24:15:7e:2c:e0:9e:f4:50:27:5d:7d:
3a:82:a1:68:1e:59:6e:ec:7d:85:5e:2f:9d:20:18:ad:84:01:
94:39:c9:4b:b6:89:df:4c:db:84:c2:e6:e0:b9:c7:96:7d:58:
75:3a:49:61:1e:71:0d:8a:cc:81:1b:4b:fa:7b:c1:ef:5b:5c:
a4:ca:ad:cd:bb:dd:a4:ef:d4:78:d0:de:98:35:c9:75:cb:d4:
5b:2d:2b:31:bc:a7:0b:f3:9f:26:55:f0:90:68:bf:8e:76:d0:
22:6e:59:35:10:df:59:fe:a1:eb:b5:91:c0:57:39:f8:3c:d4:
98:d8:b8:3a:a2:98:bf:13:6e:3b:2c:4d:55:f4:fd:4f:dc:89:
5c:93:2d:8b:8c:9f:40:7e:11:bd:37:1e:e4:a5:ce:09:fd:cf:
95:53:69:5a:cd:1e:68:29:a7:2b:a6:1f:a2:03:82:eb:0e:17:
93:b9:5b:04:dc:42:cd:30:02:cd:bf:5c:67:c3:24:0f:31:19:
70:8f:69:bc:6e:9a:dd:b9:ad:bb:d0:df:b8:fa:1e:3c:3e:1c:
cb:34:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org