Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fs4JApjD2Ym590kkqVYhGcbp9ss.roa
File: Fs4JApjD2Ym590kkqVYhGcbp9ss.roa (raw, json)
Hash identifier: SHSRLQhp9kobVJvluv6CI0vBjaeTdXD1B5eqMDDIc6g=
Subject key identifier: 16:CE:09:02:98:C3:D9:89:B9:F7:49:24:A9:56:21:19:C6:E9:F6:CB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1BA707CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fs4JApjD2Ym590kkqVYhGcbp9ss.roa
Signing time: Fri 01 Jul 2022 16:32:25 +0000
ROA not before: Fri 01 Jul 2022 16:32:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149835
IP address blocks: 2a06:a005:10a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463931342 (0x1ba707ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 1 16:32:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16ce090298c3d989b9f74924a9562119c6e9f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:86:ab:6b:b5:bb:d8:ec:e3:f1:2e:32:cb:
b8:46:77:05:07:56:70:8b:bd:30:18:a0:c0:96:fc:
2e:a4:d5:dd:7b:43:09:33:9d:b6:18:05:72:21:7e:
ba:de:0c:a1:b3:2b:74:7d:67:99:82:74:3b:4b:8f:
92:c8:55:7f:a6:b7:63:e1:04:7e:64:68:47:57:81:
31:47:79:b8:fd:2b:19:50:06:f4:ba:e0:90:0b:e0:
db:aa:de:04:ec:77:ce:4f:c1:b1:b1:81:64:94:39:
1a:37:0c:73:d5:cf:2e:a6:05:66:2a:94:10:bf:63:
6c:1e:cc:d2:79:b3:4d:2e:2f:23:7a:47:95:a5:7b:
c0:42:15:5e:0e:c8:0e:75:2f:eb:40:47:0b:5e:37:
57:f9:84:57:c7:e0:75:e1:b7:32:91:c2:0b:4d:78:
ca:ef:79:93:60:9f:a8:40:ea:9a:e6:1e:33:9d:c1:
a4:7e:3b:89:20:64:f8:79:88:20:00:ca:62:92:05:
fd:51:ca:9d:6d:e9:99:e3:d9:b0:68:e6:b9:69:95:
f8:7a:9b:0d:08:a9:7b:45:02:10:1d:f0:48:ad:20:
6f:ab:0c:48:19:e8:2e:02:d0:f7:47:85:73:a7:2d:
80:fc:1d:d6:2c:a6:26:25:8a:68:54:0a:95:65:87:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:09:02:98:C3:D9:89:B9:F7:49:24:A9:56:21:19:C6:E9:F6:CB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fs4JApjD2Ym590kkqVYhGcbp9ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10a0::/44
Signature Algorithm: sha256WithRSAEncryption
40:ff:6f:54:18:12:74:71:f7:cb:66:22:0d:f9:8c:3d:36:21:
9a:99:df:3d:30:ea:4d:f1:65:5e:36:d2:44:43:19:53:80:46:
86:ea:49:a5:75:a2:a0:7f:c4:76:a5:07:b4:ef:c6:75:2d:f4:
5c:ed:87:db:dd:0b:88:bc:f3:a3:02:22:a9:f8:d3:a4:df:e9:
a2:3d:f0:c0:f7:69:b5:76:ed:b8:79:54:87:f4:65:a0:40:23:
3e:59:89:af:ff:dc:6c:3b:af:6f:4e:3a:bc:cf:fe:c4:cd:37:
3d:f0:3f:23:ce:5a:76:a7:d6:24:fb:87:67:d5:6c:d1:61:d9:
b2:f4:6a:4d:10:5e:ed:1e:9b:51:32:b1:30:cf:d2:4b:2c:4b:
c7:65:1d:fd:91:39:f7:91:04:32:11:ad:33:2e:ed:df:bd:03:
16:7a:a6:c9:76:a8:5d:f9:ec:74:cf:ee:a3:0f:9b:b6:13:8c:
33:bb:e9:7c:dd:1f:3a:59:e1:00:f3:ca:c9:1d:dc:51:36:e8:
94:17:52:28:c3:08:5f:24:3c:10:65:5a:ad:bd:b1:e5:99:4a:
ed:a8:01:a2:36:3e:38:71:b5:ce:ab:11:22:c6:8e:93:ba:e3:
fd:88:fd:20:a3:79:46:6f:65:1b:2b:4d:14:29:8e:63:5a:b4:
6d:1a:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org