Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HxxXGH1Vta3MOVi1dbXPO56_LQU.roa
File: HxxXGH1Vta3MOVi1dbXPO56_LQU.roa (raw, json)
Hash identifier: Thswy0yfE0FlhEnog9YNJqN6r6OrZEP6MzmN1RSWOu0=
Subject key identifier: 1F:1C:57:18:7D:55:B5:AD:CC:39:58:B5:75:B5:CF:3B:9E:BF:2D:05
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1BC62987
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HxxXGH1Vta3MOVi1dbXPO56_LQU.roa
Signing time: Tue 05 Jul 2022 08:00:25 +0000
ROA not before: Tue 05 Jul 2022 08:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203156
IP address blocks: 2a06:a005:1160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465971591 (0x1bc62987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 5 08:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f1c57187d55b5adcc3958b575b5cf3b9ebf2d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:72:d5:79:14:66:14:c2:61:5a:c3:3e:3b:
8c:59:92:0a:58:3d:c4:30:6d:16:90:a4:6c:94:73:
f7:f6:59:2e:f0:26:06:a8:6f:40:a2:a1:92:26:b8:
64:8b:04:23:43:01:46:0c:55:d1:b9:e1:82:49:ab:
4d:ad:16:8b:64:82:5f:e0:d8:8f:ba:0e:b7:b6:b9:
cf:35:cb:27:9b:06:2c:10:3a:52:fd:c7:66:54:77:
d3:57:85:0a:ac:9c:ed:d9:18:39:b6:b9:34:0b:58:
80:3c:dd:d1:22:d8:1b:6b:bd:02:8e:1a:36:ae:8f:
8d:0a:f3:a4:b7:0e:59:fd:36:67:0a:0c:9f:79:a0:
7a:9e:86:a1:9e:69:8c:91:18:e0:ef:45:3f:7f:80:
81:cc:b2:90:6f:27:b8:5e:89:af:eb:e6:a5:d6:39:
d2:cc:8d:49:e2:05:38:c4:29:21:d3:5b:24:27:a3:
b7:03:4f:ad:df:ea:1b:83:53:21:93:0f:da:4c:72:
b7:af:39:2e:1d:f1:58:ee:a4:00:0f:da:04:e4:4d:
1a:51:e9:b1:e5:ef:90:f1:a1:32:64:ce:7c:cc:da:
e1:36:8e:1e:c2:8b:38:c5:cd:34:d0:b1:fb:98:c3:
87:87:f4:6b:96:58:93:31:88:eb:e2:dc:27:f6:e4:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:57:18:7D:55:B5:AD:CC:39:58:B5:75:B5:CF:3B:9E:BF:2D:05
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HxxXGH1Vta3MOVi1dbXPO56_LQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1160::/44
Signature Algorithm: sha256WithRSAEncryption
21:e5:c4:21:4a:68:02:e5:54:29:e7:b1:3f:9b:88:23:16:bb:
89:50:8b:20:ce:be:10:97:5f:d2:d1:ae:85:71:55:62:8b:7d:
c3:a4:20:a4:19:66:6f:32:6b:b4:5e:ea:87:1c:5a:05:12:39:
1f:32:54:a4:58:00:b4:23:a6:f6:3f:b8:cb:24:fd:da:cc:70:
98:a8:03:dc:51:b8:71:ac:be:78:53:5b:ea:fc:8b:95:80:29:
26:4f:eb:92:fc:45:ba:3d:53:55:80:25:21:66:a5:58:2b:af:
a0:b3:ca:df:c6:52:37:cf:25:da:a4:cd:08:6c:51:d7:00:f7:
d4:3e:b9:da:65:33:29:e3:72:67:b8:11:4f:93:bb:79:2a:e7:
d8:13:fd:bb:76:ef:c1:ad:4d:90:05:7c:be:c5:7e:9f:2f:d4:
d1:85:23:b7:07:38:52:af:0b:8c:be:db:49:fb:c3:20:a0:02:
a5:f0:6f:9f:77:e0:48:f9:ce:77:8e:b7:e3:e3:40:5b:59:6c:
ba:8f:81:0c:f8:d2:43:98:63:52:85:19:03:55:8d:3a:11:3e:
6d:6c:ce:d8:71:4d:82:1f:66:c9:9a:7f:50:e6:08:7d:4b:58:
b3:d8:80:7b:71:93:a0:75:ca:42:72:da:d2:e4:4a:c1:74:1e:
f0:99:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org