Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FwDdLJhqrRw-4q5sS8zZL1voKFQ.roa
File: FwDdLJhqrRw-4q5sS8zZL1voKFQ.roa (raw, json)
Hash identifier: jmlbi3d21u1z2Q3tYo0EFu4rEYdiZikKCKCD5LJrjgc=
Subject key identifier: 17:00:DD:2C:98:6A:AD:1C:3E:E2:AE:6C:4B:CC:D9:2F:5B:E8:28:54
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182B22E5337CCE09E82095D4CCED31135B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FwDdLJhqrRw-4q5sS8zZL1voKFQ.roa
Signing time: Thu 18 Aug 2022 18:19:16 +0000
ROA not before: Thu 18 Aug 2022 18:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a06:a005:45c::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:2e:53:37:cc:e0:9e:82:09:5d:4c:ce:d3:11:35:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 18 18:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1700dd2c986aad1c3ee2ae6c4bccd92f5be82854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:f1:e8:c0:d5:22:fd:1f:5b:d5:e7:9f:bb:
37:a9:02:14:d3:57:79:47:6b:71:f3:ab:b1:f6:5b:
12:b2:dd:a3:61:3a:b0:aa:ce:ea:2f:a7:66:ab:34:
58:5c:43:2a:78:d4:7e:cb:b4:dc:98:3e:4b:6c:dc:
ab:95:5b:1b:ff:88:b3:32:e4:53:2d:0d:3e:d2:f5:
58:d1:f7:7a:d5:1a:4b:9c:db:99:56:67:85:b5:27:
4e:27:0e:11:34:79:fe:c3:e9:3e:e2:db:24:e6:2c:
45:a6:03:94:37:10:2d:c6:f9:8c:9f:9c:f7:f4:a6:
18:00:d7:73:92:74:fc:b7:26:5f:40:31:26:fe:dd:
75:79:9d:13:77:23:46:b7:08:a0:ee:fc:45:08:ec:
b4:12:f3:37:5e:0d:4e:3a:0d:fd:46:09:44:d9:88:
25:9c:c4:ce:b1:6d:62:87:a3:d5:08:37:bd:37:00:
d6:c4:c8:d0:cc:88:e6:e5:36:b3:dc:97:43:3d:58:
1c:42:86:d5:3f:a3:65:ab:69:bd:65:a1:d0:d7:87:
ef:5d:25:d6:dd:43:dd:3f:be:ee:05:b9:d5:da:38:
8c:6c:8e:8c:f8:d6:23:34:3f:6c:34:a2:29:31:ef:
91:4e:28:88:54:f8:32:93:10:60:b8:81:1b:38:d5:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:DD:2C:98:6A:AD:1C:3E:E2:AE:6C:4B:CC:D9:2F:5B:E8:28:54
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FwDdLJhqrRw-4q5sS8zZL1voKFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:45c::/48
2a06:a005:480::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a0:8e:93:9e:f3:14:39:11:6e:ae:12:e0:05:68:76:94:f7:
44:64:1e:7c:57:19:a3:1a:d5:8f:d1:d2:c6:63:9f:d5:e8:56:
f2:fb:c4:06:b4:d7:21:02:35:fa:ac:06:b0:dd:e9:de:0d:b4:
95:af:d3:e4:aa:c8:7d:73:47:ea:fe:bb:c6:98:79:c9:b4:e2:
f1:b5:e8:94:30:64:47:b4:2d:31:29:61:b4:9e:91:64:24:db:
52:d0:05:6e:43:41:e9:39:47:a5:3a:5e:fc:51:8a:63:7c:51:
9c:36:cc:88:db:c6:c3:69:9d:e0:ad:36:55:47:63:87:75:1f:
53:df:8d:12:ec:04:ff:0b:91:23:b8:88:78:76:fb:4c:1f:75:
e0:d5:58:83:92:c4:28:d9:97:ab:b9:b2:d0:a8:78:26:32:3f:
2a:90:5a:4d:72:34:78:04:64:fe:71:b6:d8:02:da:e5:a7:85:
ff:40:23:c8:4d:de:fb:2d:1c:be:db:94:35:da:b6:9d:fa:78:
21:d5:84:b0:fe:9e:c2:ec:d4:b5:9f:37:81:cf:af:8c:ac:31:
5f:8c:9e:e3:79:4b:f0:b2:e0:01:22:7b:4d:49:d7:d9:53:02:
b0:13:03:ac:db:6c:1f:5d:ae:fc:23:a3:3d:0b:1b:29:8c:45:
6b:79:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org