Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H9acDANgeyAlQsGY4ArzoCtDRpM.roa
File: H9acDANgeyAlQsGY4ArzoCtDRpM.roa (raw, json)
Hash identifier: LZhgX6ocPq3Zo3sU0XMjV/XBE7BrLStPctUwFyDKXrA=
Subject key identifier: 1F:D6:9C:0C:03:60:7B:20:25:42:C1:98:E0:0A:F3:A0:2B:43:46:93
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 199D340A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H9acDANgeyAlQsGY4ArzoCtDRpM.roa
Signing time: Mon 09 May 2022 05:37:16 +0000
ROA not before: Mon 09 May 2022 05:37:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48266
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:350::/44 maxlen: 48
2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
2a06:a005:870::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429732874 (0x199d340a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 9 05:37:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fd69c0c03607b202542c198e00af3a02b434693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:96:1e:ee:e6:ac:d5:29:77:7f:f6:97:72:
1f:dc:e6:cc:fc:4b:65:b2:1f:ba:a5:17:70:05:7f:
54:07:36:af:33:fe:7f:9a:78:7f:d7:bd:bd:fc:3a:
94:60:5e:66:ff:c7:12:87:62:7b:05:92:99:43:23:
61:9a:c9:ed:11:6a:c7:1c:6f:2e:d6:9b:e0:2f:2c:
25:fd:ad:74:5e:fe:6e:c8:4c:76:68:22:d1:7a:29:
3b:9f:aa:4a:f9:4a:7f:ab:33:f2:be:a8:1a:13:a5:
ef:03:e3:39:05:0e:93:7c:e1:bf:a9:f1:b3:1b:60:
b5:3f:31:2b:6e:b0:55:82:75:c8:ec:db:da:7e:fa:
c7:bf:c7:ab:84:d8:40:18:8c:61:5c:ea:7f:63:57:
b2:f2:42:ec:e9:66:71:a5:e5:6a:ad:df:bd:a8:91:
21:8a:f9:32:a3:01:72:8b:37:42:12:8e:6c:5a:b6:
98:d9:e0:a8:a1:07:47:88:42:65:af:3f:ca:1f:75:
b5:2d:51:81:34:e4:b4:47:bd:32:91:23:5c:0d:d1:
13:47:cd:26:73:23:fd:f2:14:b4:a1:27:d0:f0:6f:
e2:4d:d7:44:7c:9e:3f:71:09:9f:d3:25:b9:d8:5c:
76:d4:30:28:8b:62:b7:d9:09:eb:89:b7:79:0d:f9:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:9C:0C:03:60:7B:20:25:42:C1:98:E0:0A:F3:A0:2B:43:46:93
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H9acDANgeyAlQsGY4ArzoCtDRpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
2a06:a005:350::/44
2a06:a005:870::/44
Signature Algorithm: sha256WithRSAEncryption
05:84:f6:7b:b0:5c:2a:62:81:f9:55:39:a2:34:a2:77:68:bd:
04:6c:50:65:b8:86:b5:ae:62:e0:fe:1a:7c:79:f2:b8:69:0b:
5d:6b:2a:7c:48:8e:8f:1d:05:d3:64:56:40:ee:69:b2:b8:6f:
21:a4:b1:2e:6d:3e:7e:a5:7f:13:40:ab:c1:29:47:c3:47:d1:
08:50:09:a8:76:66:5d:43:ba:2a:58:30:82:0d:d6:84:59:5e:
1d:24:6a:8f:95:a3:65:59:84:fe:04:99:cb:95:5a:22:21:25:
4f:7f:a1:80:68:39:b4:64:45:a8:b0:d6:0e:94:26:61:27:13:
75:f7:d9:9f:d4:76:50:93:d2:40:dc:5d:8b:22:3e:be:c8:06:
0d:19:e6:07:9a:24:19:a3:c1:0c:48:ad:f6:07:e2:4b:3c:bc:
c1:a6:45:29:76:5a:cd:43:f0:c5:2a:0e:8a:44:da:61:f9:8b:
99:66:c4:6c:1d:66:8c:0f:c0:44:36:13:1a:39:74:f1:c5:91:
e6:0b:b7:14:58:3d:66:36:c1:32:86:be:43:14:50:85:26:11:
75:31:91:6e:7b:1d:47:e4:9e:b6:55:8e:30:82:01:b2:31:35:
c5:89:89:e8:7e:5b:eb:65:75:33:fc:86:a0:5c:c6:e5:16:93:
4b:67:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org