Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IFL13lmtEBCuAyVzy-bXMVIyhd0.roa
File: IFL13lmtEBCuAyVzy-bXMVIyhd0.roa (raw, json)
Hash identifier: w6P+JQCGYe0ShUIy0bVmKErZnUsrztFBsHLCK7o27bM=
Subject key identifier: 20:52:F5:DE:59:AD:10:10:AE:03:25:73:CB:E6:D7:31:52:32:85:DD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D4B73E6500908FCB9C901686AFD2ACA3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IFL13lmtEBCuAyVzy-bXMVIyhd0.roa
Signing time: Fri 02 Dec 2022 21:21:29 +0000
ROA not before: Fri 02 Dec 2022 21:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201217
IP address blocks: 2a06:a005:8a0::/44 maxlen: 48
2a06:a005:2470::/44 maxlen: 48
2a06:a005:1c78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:b7:3e:65:00:90:8f:cb:9c:90:16:86:af:d2:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 2 21:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2052f5de59ad1010ae032573cbe6d731523285dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:d0:63:23:3b:6f:a2:8f:9d:50:91:c1:db:
a9:17:9c:6f:01:5e:0f:4f:aa:5a:ae:a6:de:87:6d:
42:82:11:e5:40:70:53:41:e3:d0:d0:49:00:39:1e:
35:13:ca:17:d6:43:05:79:08:ab:67:51:26:39:a7:
86:4d:34:5f:71:1c:1d:b9:fb:44:0c:44:d6:63:4f:
21:90:85:90:24:a0:3a:cb:c2:a3:b7:45:76:13:a7:
b9:29:9e:4b:1d:62:32:d6:03:d4:df:51:86:1c:fe:
84:81:13:64:d7:b6:4c:7b:bc:e7:25:b1:75:5c:6f:
90:41:2b:63:5e:f4:07:16:cd:f5:18:4c:aa:f3:34:
73:d0:d0:df:43:50:4d:f5:01:0e:0b:e6:9e:91:21:
f2:4c:85:5a:91:57:3c:5a:dc:db:5e:b3:41:3f:db:
34:b1:78:19:4b:af:0b:ce:00:4d:b5:35:cf:f3:13:
44:73:ae:47:db:8b:8e:bb:60:8d:7f:8e:ba:de:63:
90:a2:d9:70:3e:19:03:b0:d2:85:cd:5b:eb:41:2f:
12:2f:e0:c5:b2:8f:97:41:a0:10:bf:52:7d:05:88:
6b:c9:7b:6c:1c:e5:b0:eb:44:9c:65:82:c6:46:a1:
00:6b:01:6f:c8:3c:f3:b9:19:1e:39:c1:01:1c:98:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:F5:DE:59:AD:10:10:AE:03:25:73:CB:E6:D7:31:52:32:85:DD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IFL13lmtEBCuAyVzy-bXMVIyhd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8a0::/44
2a06:a005:1c78::/48
2a06:a005:2470::/44
Signature Algorithm: sha256WithRSAEncryption
5e:d7:55:d9:3c:68:d9:21:51:f6:b1:96:d7:e4:7f:b2:1f:bf:
76:fa:b5:99:15:73:7b:ac:f8:a4:de:cc:38:82:b0:ca:29:3c:
9f:95:87:46:7b:d1:e9:6e:86:7b:3e:21:7d:df:62:62:67:ed:
bb:98:d6:84:f5:0c:ca:c2:f2:7b:e8:55:1f:fd:7a:91:a1:f5:
de:a0:42:66:d0:dd:76:7c:5b:d5:03:29:0e:36:36:26:e8:7d:
23:c7:35:f9:d7:ec:67:88:47:91:ad:a2:80:41:d8:86:01:af:
45:dc:56:37:c0:8f:e3:9b:29:e6:f5:be:b4:05:0f:79:04:e6:
be:f6:70:06:0d:f2:53:16:c5:4f:35:a2:e2:2b:15:4e:e9:35:
e6:51:d1:1f:b5:a6:21:c3:e6:90:8b:f1:14:bc:e5:a0:37:31:
3e:0a:d3:54:3f:5c:97:2e:19:24:44:10:d6:71:bd:72:5b:65:
bd:2a:30:66:ff:dc:bc:be:c2:12:ca:35:03:47:76:a0:00:58:
ca:5a:25:72:7b:3d:d9:3f:4c:75:89:de:42:b1:4a:37:46:d4:
52:75:18:d1:69:73:7e:24:6c:6e:23:41:a8:f5:e9:f2:08:86:
19:f0:dd:4b:35:c8:28:46:a5:ab:77:b5:54:c5:fd:ee:da:9e:
5c:35:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org