Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa
File: IIava-UjjY9EU77O-9FRMbOYrn4.roa (raw, json)
Hash identifier: 80yCfu9ilwiZVAwtHmhNFqsdjKJ2p0P4Rat9HNEW5Hs=
Subject key identifier: 20:86:AF:6B:E5:23:8D:8F:44:53:BE:CE:FB:D1:51:31:B3:98:AE:7E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018256490BABABD69A3611272CE0010B5D8F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa
Signing time: Sun 31 Jul 2022 22:03:23 +0000
ROA not before: Sun 31 Jul 2022 22:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208548
IP address blocks: 2a06:a000:300::/40 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:49:0b:ab:ab:d6:9a:36:11:27:2c:e0:01:0b:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 31 22:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2086af6be5238d8f4453becefbd15131b398ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:bc:94:85:aa:86:ce:f9:ac:ad:aa:96:fe:
b5:95:31:06:66:7b:49:94:45:0b:d0:ea:59:8a:ef:
dc:31:3c:b5:be:47:dd:8b:6a:3e:b5:1c:ed:b9:ab:
6d:44:27:87:a2:4f:d4:a9:dd:e7:e8:80:94:58:8c:
17:37:98:fd:e5:6b:f7:1c:01:8a:12:be:b2:79:f4:
ff:3b:e3:50:bf:be:f9:d8:5f:19:d0:3a:14:af:a2:
be:f7:46:a9:6f:2a:d0:a6:76:73:3c:d9:19:44:1e:
4d:5f:c3:93:3e:62:7d:3f:d7:6a:26:28:1d:39:f6:
41:01:b2:b7:17:36:4c:d7:9b:7e:dd:da:dd:4e:29:
a0:e0:c3:bb:50:ab:4b:37:f2:7d:65:a5:15:2c:13:
4b:b0:94:1f:c8:f3:ac:52:6e:d9:83:6e:43:6e:38:
a0:20:c2:50:09:37:50:d4:57:08:2b:6c:d6:fc:d0:
b4:f1:f5:b6:38:22:b1:8c:0e:ca:e7:fd:d3:76:f3:
32:02:0a:44:82:4f:8d:0b:9d:bc:b3:2f:ba:b6:a8:
e8:b9:ed:37:bc:9f:5d:91:b3:b0:60:65:a7:9d:10:
3a:c7:7d:8d:14:e0:8f:b5:b4:a1:76:01:73:15:15:
55:a5:6c:97:fd:71:59:e4:04:ea:52:86:78:65:47:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:86:AF:6B:E5:23:8D:8F:44:53:BE:CE:FB:D1:51:31:B3:98:AE:7E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:300::/40
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a0:10:96:af:e1:ac:7a:33:6b:1c:de:72:c8:3a:a9:78:e1:55:
bd:fb:e7:e2:9f:b8:06:94:45:7f:5e:64:ed:26:4d:bc:de:e1:
e7:4c:68:7a:ea:1c:69:24:56:e5:90:24:66:b4:5a:1a:cb:fd:
66:a7:93:78:16:e3:bd:03:3d:c6:b5:96:63:6c:4c:6b:d1:84:
a7:28:9b:01:6e:32:3f:7e:91:4a:20:54:a0:92:9e:bf:63:a1:
69:01:1b:cd:4e:e0:18:ba:e7:d9:ad:de:42:1a:db:85:cc:8e:
78:c8:e3:6b:3d:f2:11:5d:23:81:5b:06:b3:8f:f7:2d:bb:76:
82:49:68:52:23:9b:d3:0a:03:2a:bf:89:fe:0c:4f:98:d2:13:
d9:af:df:dd:8e:c3:39:27:56:7a:19:d1:3d:51:64:d4:c8:05:
f3:96:35:3f:26:74:4e:01:15:88:0f:93:06:6d:07:d0:8d:d2:
18:05:8a:53:d5:bd:88:20:2c:7c:b4:db:70:11:52:25:f5:68:
e2:d0:32:93:6c:9f:c3:97:73:d7:5f:b8:c7:72:01:63:5a:db:
fd:81:4a:15:aa:c0:3f:63:3b:6e:d0:6f:d6:42:7b:b0:38:c4:
a2:5c:4f:d8:45:42:01:48:78:d0:bf:e9:af:ff:dc:9c:33:c5:
e6:64:e1:82
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYJWSQurq9aaNhEnLOABC12PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzMxMjIwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDg2YWY2YmU1MjM4ZDhmNDQ1M2JlY2VmYmQxNTEzMWIzOThhZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRK8lIWqhs75rK2qlv61lTEGZntJ
lEUL0OpZiu/cMTy1vkfdi2o+tRztuattRCeHok/Uqd3n6ICUWIwXN5j95Wv3HAGK
Er6yefT/O+NQv7752F8Z0DoUr6K+90apbyrQpnZzPNkZRB5NX8OTPmJ9P9dqJigd
OfZBAbK3FzZM15t+3drdTimg4MO7UKtLN/J9ZaUVLBNLsJQfyPOsUm7Zg25Dbjig
IMJQCTdQ1FcIK2zW/NC08fW2OCKxjA7K5/3TdvMyAgpEgk+NC528sy+6tqjoue03
vJ9dkbOwYGWnnRA6x32NFOCPtbShdgFzFRVVpWyX/XFZ5ATqUoZ4ZUcFcQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFCCGr2vlI42PRFO+zvvRUTGzmK5+MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSUlhdmEtVWpqWTlFVTc3Ty05RlJNYk9Zcm40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgagAAMD
BwAqB1TCsAswDQYJKoZIhvcNAQELBQADggEBAKAQlq/hrHozaxzecsg6qXjhVb37
5+KfuAaURX9eZO0mTbze4edMaHrqHGkkVuWQJGa0WhrL/Wank3gW470DPca1lmNs
TGvRhKcomwFuMj9+kUogVKCSnr9joWkBG81O4Bi659mt3kIa24XMjnjI42s98hFd
I4FbBrOP9y27doJJaFIjm9MKAyq/if4MT5jSE9mv392OwzknVnoZ0T1RZNTIBfOW
NT8mdE4BFYgPkwZtB9CN0hgFilPVvYggLHy023ARUiX1aOLQMpNsn8OXc9dfuMdy
AWNa2/2BShWqwD9jO27Qb9ZCe7A4xKJcT9hFQgFIeNC/6a//3JwzxeZk4YI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org