Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Gh_lIFAXnLhI_CrL3ZInch8_llc.roa
File: Gh_lIFAXnLhI_CrL3ZInch8_llc.roa (raw, json)
Hash identifier: FEXou+/pD33h192yCzM+xsfzPwZuJgQ9yHYlxhrdYCg=
Subject key identifier: 1A:1F:E5:20:50:17:9C:B8:48:FC:2A:CB:DD:92:27:72:1F:3F:96:57
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01827FDC55F8942250B62A1E90ADD8085DD7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Gh_lIFAXnLhI_CrL3ZInch8_llc.roa
Signing time: Mon 08 Aug 2022 23:48:42 +0000
ROA not before: Mon 08 Aug 2022 23:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204374
IP address blocks: 2a06:a005:5a7::/48 maxlen: 48
2a06:a005:85f::/48 maxlen: 48
2a06:a005:1090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7f:dc:55:f8:94:22:50:b6:2a:1e:90:ad:d8:08:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 8 23:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a1fe52050179cb848fc2acbdd9227721f3f9657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:c4:88:b2:5c:3f:09:c5:2e:8f:f2:38:1f:
d3:f1:8c:fb:18:2c:b0:c6:b3:56:7c:83:85:52:f4:
c4:71:33:3c:8c:c0:0c:86:db:dc:29:e2:0f:fe:ec:
b4:57:de:13:15:15:76:72:a6:c8:39:81:89:e3:ba:
6d:f6:f0:bd:c6:79:7a:df:39:0c:9f:9d:78:59:23:
2b:46:86:a1:02:94:da:96:85:9c:c6:77:ff:15:fc:
07:65:ad:9d:a5:e0:46:c1:f7:01:11:ad:d3:e6:c2:
7b:46:fb:f8:fd:ec:96:01:09:e8:eb:01:2e:52:36:
36:65:7a:49:8b:c3:eb:f9:4e:3a:e6:eb:de:29:ef:
53:15:e6:e1:d0:23:93:92:ce:18:2c:93:fb:32:fb:
d5:5e:22:16:eb:87:b2:b9:f9:ff:25:41:00:0c:3f:
5c:a0:fa:46:14:b3:89:ed:5d:ec:d0:ff:02:b2:5a:
df:70:03:dc:dc:4e:e2:e4:0b:97:0a:eb:66:ee:bd:
85:f7:0a:99:b5:70:19:22:21:fe:13:99:9f:50:8c:
03:2a:c1:fb:b5:a1:f3:e4:ec:01:f9:af:11:fe:70:
ee:6a:f1:da:3e:06:57:28:09:e5:e8:a2:09:31:6d:
c5:73:85:06:b5:de:8e:8b:1e:33:46:fc:9b:4b:ba:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:E5:20:50:17:9C:B8:48:FC:2A:CB:DD:92:27:72:1F:3F:96:57
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Gh_lIFAXnLhI_CrL3ZInch8_llc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a7::/48
2a06:a005:85f::/48
2a06:a005:1090::/44
Signature Algorithm: sha256WithRSAEncryption
8a:cf:0b:80:1c:98:26:0e:1d:d6:dc:91:49:3b:d0:c1:eb:d8:
13:a8:bf:d8:81:9d:88:c3:c1:15:aa:40:c4:7f:37:2d:4a:42:
9a:a1:56:73:68:8b:92:29:60:b0:41:c8:cd:78:66:af:74:c5:
40:95:9d:6f:a4:61:3e:de:b0:0e:f2:e4:c4:fc:64:71:dc:1a:
6b:ed:e1:a1:c5:a2:b1:ba:10:ea:4f:71:de:e6:2a:7d:d6:4b:
74:fc:64:7d:e5:42:34:18:49:75:66:1f:16:df:f8:ee:c4:58:
37:5c:a2:46:dd:72:c3:2d:9a:80:b9:36:d5:52:14:e4:7c:76:
cc:1d:d3:b7:4f:8a:16:7f:a3:7a:f7:45:34:9b:cb:48:80:61:
3b:55:e4:0b:9e:1f:ff:59:a1:fe:24:2d:63:e2:47:e3:fa:75:
1f:f6:81:14:be:48:1b:e6:43:a1:62:ab:dd:5b:da:06:b5:b1:
c9:9d:f9:66:e8:31:1a:b8:2c:5c:86:27:c4:7d:51:d3:4a:04:
5d:e9:d2:8a:3b:26:48:28:ef:c6:5e:c8:dc:81:a3:04:0d:e1:
47:b0:9c:f4:d2:19:7e:99:7d:cf:c1:c5:46:74:4a:b0:f1:3d:
0f:12:a0:37:1d:a1:da:ad:be:fb:bf:fc:ab:87:d1:37:f2:54:
55:9c:3d:e4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYJ/3FX4lCJQtioekK3YCF3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODA4MjM0ODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTFmZTUyMDUwMTc5Y2I4NDhmYzJhY2JkZDkyMjc3MjFmM2Y5NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLnEiLJcPwnFLo/yOB/T8Yz7GCyw
xrNWfIOFUvTEcTM8jMAMhtvcKeIP/uy0V94TFRV2cqbIOYGJ47pt9vC9xnl63zkM
n514WSMrRoahApTaloWcxnf/FfwHZa2dpeBGwfcBEa3T5sJ7Rvv4/eyWAQno6wEu
UjY2ZXpJi8Pr+U465uveKe9TFebh0COTks4YLJP7MvvVXiIW64eyufn/JUEADD9c
oPpGFLOJ7V3s0P8CslrfcAPc3E7i5AuXCutm7r2F9wqZtXAZIiH+E5mfUIwDKsH7
taHz5OwB+a8R/nDuavHaPgZXKAnl6KIJMW3Fc4UGtd6Oix4zRvybS7reLQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBof5SBQF5y4SPwqy92SJ3IfP5ZXMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvR2hfbElGQVhuTGhJX0NyTDNaSW5jaDhfbGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgagBQWn
AwcAKgagBQhfAwcEKgagBRCQMA0GCSqGSIb3DQEBCwUAA4IBAQCKzwuAHJgmDh3W
3JFJO9DB69gTqL/YgZ2Iw8EVqkDEfzctSkKaoVZzaIuSKWCwQcjNeGavdMVAlZ1v
pGE+3rAO8uTE/GRx3Bpr7eGhxaKxuhDqT3He5ip91kt0/GR95UI0GEl1Zh8W3/ju
xFg3XKJG3XLDLZqAuTbVUhTkfHbMHdO3T4oWf6N690U0m8tIgGE7VeQLnh//WaH+
JC1j4kfj+nUf9oEUvkgb5kOhYqvdW9oGtbHJnflm6DEauCxchifEfVHTSgRd6dKK
OyZIKO/GXsjcgaMEDeFHsJz00hl+mX3PwcVGdEqw8T0PEqA3HaHarb77v/yrh9E3
8lRVnD3k
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org