Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I4PF7H99MmC3jSYU58vDYlVTv7Y.roa
File: I4PF7H99MmC3jSYU58vDYlVTv7Y.roa (raw, json)
Hash identifier: Ec9brCi0+VK1Tt0Z4r36NTsNfKDlJvldHKkHmzsHick=
Subject key identifier: 23:83:C5:EC:7F:7D:32:60:B7:8D:26:14:E7:CB:C3:62:55:53:BF:B6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B4ECAAF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I4PF7H99MmC3jSYU58vDYlVTv7Y.roa
Signing time: Fri 24 Jun 2022 11:50:59 +0000
ROA not before: Fri 24 Jun 2022 11:50:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59474
IP address blocks: 2a06:a005:f30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458148527 (0x1b4ecaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 24 11:50:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2383c5ec7f7d3260b78d2614e7cbc3625553bfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:c0:60:20:f6:01:11:19:3c:35:d2:32:4c:
e4:1c:a9:39:7b:5e:f1:e2:97:0f:50:85:00:d6:8d:
c8:6d:14:f0:c6:3e:29:ee:09:d8:6f:2c:39:b2:c3:
09:bd:37:24:63:0a:a4:48:5d:3e:14:28:ed:5d:8e:
c7:db:35:96:ed:01:7b:f5:5e:b5:3e:f9:c3:aa:73:
eb:fe:c5:d3:7a:85:13:9d:25:13:50:fc:42:c6:c1:
2b:6b:26:c3:77:b1:88:06:fa:82:20:b0:fa:6a:61:
bf:67:9d:47:30:80:a0:ef:76:4b:ce:19:fd:8b:f4:
8f:32:86:c5:e9:7b:9e:72:cf:10:e1:a6:1d:d5:dc:
2e:9f:1a:76:55:fc:82:5b:31:ca:a6:0a:86:4f:b1:
e1:38:5c:b5:11:29:e4:01:10:17:06:aa:0c:ed:0f:
a5:a4:06:b5:2c:66:69:32:2e:4a:a1:b8:49:97:db:
1d:4e:f8:0c:24:ac:2e:50:63:9b:da:ae:29:ea:bd:
04:bc:e7:b1:34:d6:57:0b:16:b3:2e:bf:84:2c:87:
a7:dc:b7:64:12:d4:c8:37:d0:8b:e3:61:1e:78:67:
92:3f:2e:66:70:6d:80:28:ac:5e:da:2c:c3:80:ad:
5f:e0:0f:13:2a:c5:a7:42:24:a5:60:9f:e1:af:ed:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:C5:EC:7F:7D:32:60:B7:8D:26:14:E7:CB:C3:62:55:53:BF:B6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I4PF7H99MmC3jSYU58vDYlVTv7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f30::/44
Signature Algorithm: sha256WithRSAEncryption
5b:ac:fc:0b:38:7a:93:39:76:4e:e2:36:c7:8b:20:32:20:e4:
64:68:7e:28:b9:eb:de:14:15:61:5f:04:22:6b:7e:e6:db:7f:
84:cd:48:33:8f:88:32:69:7a:37:d2:9a:ec:be:5c:e6:5e:ed:
e2:b8:21:66:da:21:a0:92:c4:ae:e0:a7:7b:09:0b:c7:16:11:
93:9b:87:20:fb:6e:46:39:87:75:db:74:5c:98:cb:02:c3:ee:
74:8c:5c:71:3e:cd:14:10:42:c0:7e:c2:2a:3e:64:d4:fa:1e:
cd:cc:f1:61:81:b4:74:91:3e:18:a3:0f:4d:65:b7:54:d6:1a:
b4:9e:6a:27:fa:5f:93:06:1b:a1:62:85:63:ab:1c:c5:8a:a5:
be:36:da:f7:26:93:13:d9:98:aa:f9:1d:be:eb:42:68:98:29:
4f:b2:f6:72:13:45:4a:64:f7:35:91:8f:ea:4b:18:68:b9:79:
e2:b9:7f:f8:43:ee:19:36:9f:9f:cf:7b:ba:e6:c4:b2:9e:d8:
a7:18:1a:30:cf:5b:93:9e:03:e7:b6:73:27:35:4d:15:60:d7:
c1:c5:4f:8e:08:02:09:b4:56:a4:4a:a9:e5:0b:28:97:78:2b:
55:62:f7:8d:34:a6:67:1b:8a:5b:b4:12:5f:70:e3:b1:b8:04:
15:37:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org