Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F4jDYJB-F9CxQ2HPo7SlDbhNDOs.roa
File: F4jDYJB-F9CxQ2HPo7SlDbhNDOs.roa (raw, json)
Hash identifier: +4fp71X2UU6W611qpjXJTexKzxbnImQAlq3/TLF4St4=
Subject key identifier: 17:88:C3:60:90:7E:17:D0:B1:43:61:CF:A3:B4:A5:0D:B8:4D:0C:EB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 192C2B8C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F4jDYJB-F9CxQ2HPo7SlDbhNDOs.roa
Signing time: Wed 04 May 2022 12:18:13 +0000
ROA not before: Wed 04 May 2022 12:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138211
IP address blocks: 2a06:a005:510::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:7c0::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422325132 (0x192c2b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 4 12:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1788c360907e17d0b14361cfa3b4a50db84d0ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:2b:d4:76:4d:65:71:4f:09:78:cc:b4:a3:
cf:5c:03:38:97:4b:4f:c3:85:b0:a2:26:88:d4:af:
71:6f:eb:34:32:2b:94:f3:0b:87:1a:a1:e2:02:fe:
4b:4a:92:3e:fd:94:73:a4:09:3e:0e:99:87:33:bb:
a1:75:e0:17:ff:12:45:c2:d7:ad:91:ac:8c:e8:d4:
b1:0f:6b:3c:f9:19:57:f4:53:d3:f8:c1:b5:a7:3d:
cd:38:dc:d2:2e:d6:19:12:77:ac:95:8e:6b:d7:9c:
c6:ff:30:a7:b2:74:f6:1d:29:e2:ee:5a:a3:75:54:
24:ba:47:b8:0e:17:40:f7:ca:ae:e9:ed:d5:c1:21:
44:b0:ef:34:18:e0:d0:7c:b7:33:00:fa:c8:85:af:
b2:d4:24:3a:15:e4:92:54:42:46:47:cd:4e:00:44:
98:d3:80:dc:4d:4d:57:f8:18:6f:73:d5:fa:41:d9:
13:db:7f:9b:4a:e1:c2:38:3c:4c:4a:aa:26:38:02:
16:45:64:65:66:e2:29:f2:1c:0f:c2:c2:ac:bc:be:
13:d0:9d:8c:88:8d:44:6c:9f:57:fd:fb:cd:2c:5a:
37:5f:b7:49:06:63:e0:29:6e:73:e2:5d:c8:df:3c:
7a:e2:81:20:ee:cd:b6:5d:0f:3e:35:57:26:3b:91:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:88:C3:60:90:7E:17:D0:B1:43:61:CF:A3:B4:A5:0D:B8:4D:0C:EB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F4jDYJB-F9CxQ2HPo7SlDbhNDOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:54f:ffff:ffff:ffff:ffff:ffff
2a06:a005:7c0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:15:a5:ba:4d:6d:72:8b:ba:b6:2c:ac:dc:42:0a:e1:ea:3c:
7f:27:fd:6f:eb:7b:68:2f:4d:c2:a7:ca:a7:89:81:1b:e0:de:
ce:bd:b6:a8:9c:a4:e1:32:e3:83:c4:c5:65:ec:4b:00:bf:c8:
b6:8f:f7:0f:fa:b2:53:98:08:f5:eb:0d:a8:44:bf:7c:0d:23:
78:75:c9:59:99:1d:2f:53:30:7a:67:e0:55:05:1e:82:16:91:
c1:15:94:ea:4b:65:c3:ff:19:4e:22:80:31:9b:6e:99:8a:80:
08:1a:48:aa:94:ba:67:99:4f:90:49:f0:38:82:12:4b:f2:b3:
d1:82:bf:3c:50:1d:8e:69:7e:1d:6b:31:bb:b0:99:49:b5:78:
6a:24:d0:48:16:59:41:c4:e1:2d:98:45:cc:a8:6b:ae:a5:e4:
f9:9c:bf:9e:e3:64:e0:e5:33:c5:2e:a5:9a:da:68:46:36:26:
d7:51:72:0e:fe:12:21:1b:ae:d7:35:7a:73:0d:f7:8e:4d:cb:
cb:5f:26:7c:1f:ab:35:11:14:2a:8d:25:17:78:9d:37:ed:1b:
93:1a:3c:de:08:23:58:99:06:1e:a3:1e:09:92:52:c0:d3:95:
e5:36:1a:29:c5:4b:c3:cb:00:b6:99:05:e0:e0:12:10:38:fd:
c5:36:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org