Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DNMGGKlFRVFQeyfCPU9RifhynRs.roa
File: DNMGGKlFRVFQeyfCPU9RifhynRs.roa (raw, json)
Hash identifier: qq9BOZWBR1dOrHV3GLzzpIxMhgOp7DLnTUJOgWnQ1H8=
Subject key identifier: 0C:D3:06:18:A9:45:45:51:50:7B:27:C2:3D:4F:51:89:F8:72:9D:1B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183FB286B9F34579D060AC0940062C973A2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DNMGGKlFRVFQeyfCPU9RifhynRs.roa
Signing time: Fri 21 Oct 2022 15:27:53 +0000
ROA not before: Fri 21 Oct 2022 15:27:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211877
IP address blocks: 2a06:a005:ed0::/44 maxlen: 48
2a06:a005:d40::/44 maxlen: 48
2a06:a005:20b0::/44 maxlen: 48
2a06:a005:20a0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:28:6b:9f:34:57:9d:06:0a:c0:94:00:62:c9:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 21 15:27:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cd30618a9454551507b27c23d4f5189f8729d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8b:d8:a3:43:01:a1:34:e6:0f:9b:a0:67:5a:
93:d2:32:e6:5e:5f:45:df:8b:f2:f9:e5:34:a8:80:
6c:ee:6c:71:e4:78:09:9a:14:9b:dc:a7:52:bd:84:
c7:a6:6b:3e:0b:6f:66:3d:4e:a7:12:5b:8b:4d:2d:
b6:5e:dd:6b:4c:04:e4:77:cf:a4:51:e9:1f:6f:74:
59:16:68:23:73:6b:f1:29:00:53:06:d4:77:f7:30:
7e:f1:f6:7c:6f:d1:86:96:80:e1:ef:a1:fa:c1:89:
c2:9c:44:0c:c0:25:8d:6c:c6:79:35:8c:b8:fa:5f:
43:88:8e:1a:e9:95:a9:f3:3f:1d:db:54:ba:bb:b2:
a4:54:8c:ba:af:a6:2f:1c:51:cf:82:72:d7:7d:54:
bd:ac:a8:32:59:ec:79:6a:c7:dd:19:5f:db:5b:f6:
22:6a:fa:8e:9b:b9:a1:c0:5e:7d:36:38:fc:07:c8:
e4:c7:4b:d9:d3:c0:f3:ae:ac:a2:22:43:32:9a:01:
39:93:0c:e6:0d:f4:73:35:28:41:49:dc:a3:4f:70:
c5:11:78:ff:0c:b4:ac:4a:a7:0c:2c:de:d9:a2:a7:
3a:ba:73:6d:ee:7d:17:1b:04:ac:f1:6d:be:38:da:
ff:51:88:d0:4b:aa:dc:0d:4e:9b:a9:21:85:f6:11:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:06:18:A9:45:45:51:50:7B:27:C2:3D:4F:51:89:F8:72:9D:1B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DNMGGKlFRVFQeyfCPU9RifhynRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
2a06:a005:20a0::/43
Signature Algorithm: sha256WithRSAEncryption
8b:27:f9:f5:8f:f3:ae:9c:a6:b5:3a:82:32:b3:06:06:d0:56:
94:4c:ec:0f:2d:25:84:3a:c9:b2:41:ec:67:35:23:43:8c:10:
26:ae:79:5a:06:95:c0:10:21:8d:4a:3e:4e:ce:e0:07:47:f2:
11:c0:bf:e1:9e:32:d1:09:65:3a:d5:ed:33:69:75:bb:b6:8f:
db:ae:f4:52:73:b7:a6:22:d4:da:44:3f:ae:cb:52:69:64:b5:
a4:03:c6:62:f7:ae:3b:4a:55:7d:5d:28:ad:41:69:3c:b7:83:
eb:d6:e5:33:5a:86:28:7c:55:0b:22:4a:87:ac:4f:ae:89:b7:
47:cf:49:d2:09:23:5f:78:f5:6a:f4:8b:fd:5c:79:f9:57:a0:
60:58:59:00:79:9c:11:58:4a:6e:7b:66:ef:74:25:39:51:de:
22:38:c4:51:a2:55:51:12:70:f5:be:84:5e:3b:f7:e4:aa:f8:
6f:c9:c5:16:ee:ea:33:c4:9e:06:a5:c4:4d:87:79:46:78:cd:
68:50:dc:97:5c:7a:e3:7c:f5:d4:6a:29:f3:4f:5a:5b:1f:d8:
a9:d6:8e:dc:39:f0:89:f5:09:e3:58:4b:0a:f5:40:89:4e:d9:
dd:8a:e9:19:b6:08:53:1d:4a:65:50:8d:e9:5a:14:a3:a8:0f:
84:0b:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org