Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa
File: I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa (raw, json)
Hash identifier: Gqbefi/l3S9dwDChXQZrJjlwzGo2lg+v+V6Sy4V5I10=
Subject key identifier: 23:A9:CC:43:59:09:8F:F2:28:44:E0:A6:3C:ED:64:E0:E4:29:F1:B1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01841FB2574DA42C9C3DE711F861376EA302
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa
Signing time: Fri 28 Oct 2022 17:44:51 +0000
ROA not before: Fri 28 Oct 2022 17:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201763
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:2010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:b2:57:4d:a4:2c:9c:3d:e7:11:f8:61:37:6e:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 28 17:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23a9cc4359098ff22844e0a63ced64e0e429f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:3c:80:b3:64:ba:86:c6:0e:b9:29:83:c6:
f8:ee:61:82:5c:f3:ab:a5:71:b3:5f:4c:87:f9:94:
b2:ec:b4:0d:46:65:bb:d3:70:56:3e:b3:a1:bc:e3:
99:6e:70:a0:4a:dc:c0:1b:32:c5:05:91:c5:97:d9:
7c:ff:f2:e3:36:c7:f2:50:3a:06:a8:c5:80:46:62:
a1:a6:5b:cb:a3:dd:7b:2e:08:3d:70:42:6d:b8:a9:
75:87:ca:85:8a:45:e9:be:35:e2:68:03:30:25:4b:
21:58:31:7a:6a:52:cd:8d:fc:f4:de:32:35:cc:ed:
cf:ad:d4:15:1e:cb:59:17:41:04:63:7a:3b:a1:b6:
b5:c2:95:06:95:f2:f4:02:32:e9:47:18:49:32:51:
6e:77:aa:ff:1b:0e:97:9e:23:11:33:10:c7:e3:46:
1b:d0:2f:e0:97:86:c4:ec:1f:79:79:6d:78:e8:ea:
b9:0b:b5:6f:ab:e3:d7:c0:b2:34:38:a6:d2:91:b8:
a7:ae:e5:ad:d1:2e:c9:26:c9:6a:8e:1b:27:02:ac:
1f:21:17:5b:c2:5a:1a:b2:6d:11:d6:72:29:32:de:
86:85:58:eb:55:74:fb:c5:aa:a9:ec:5b:ff:e4:eb:
ea:ae:c1:4f:9b:9a:2e:5b:61:9d:fc:6a:c4:f5:f1:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:CC:43:59:09:8F:F2:28:44:E0:A6:3C:ED:64:E0:E4:29:F1:B1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150a::/48
2a06:a005:2010::/44
Signature Algorithm: sha256WithRSAEncryption
78:4a:2e:28:4c:ac:01:25:0b:23:8b:5b:07:09:61:0f:9b:f4:
0d:4d:68:4e:73:7c:e3:64:67:9f:69:d0:42:c3:48:e6:7b:1e:
97:43:11:2c:13:aa:3c:16:f9:43:38:27:c9:f2:32:65:2b:08:
cb:a2:8e:80:b9:41:73:54:83:80:e0:76:1c:b6:90:b2:c7:19:
84:c5:3e:8d:35:57:65:d3:2f:1d:be:4d:d2:c9:d8:ae:01:96:
be:ee:06:82:21:a7:6b:0a:ee:8d:1e:fb:de:f2:63:3e:ab:5e:
d1:0d:0f:36:3e:0a:19:45:16:da:a8:9e:f7:07:d2:d3:c3:48:
6b:1e:47:86:3f:c5:b9:bf:a7:62:1c:e6:57:dc:51:9b:dc:96:
63:90:a3:ea:d7:60:36:0c:2d:85:af:9e:dd:21:91:c0:c0:cd:
1f:4d:c7:2a:05:cc:0b:5e:1d:b2:50:bd:93:35:63:02:e0:cc:
1c:a7:93:06:d6:ff:a2:a9:3a:0a:47:32:a2:f2:c8:2b:d5:b7:
f8:b3:e1:37:00:4f:18:24:0f:6c:7a:01:78:87:c6:5b:3b:34:
98:ee:10:7b:cd:fd:dd:b2:cb:7c:b1:6d:32:cd:15:d7:ff:be:
37:f4:0a:3f:3c:b9:c4:7e:77:da:75:4e:d4:52:cd:fd:6b:17:
2d:06:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org