Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa
File: IOwolSN81Y9siuVeUV8hynTg-Dk.roa (raw, json)
Hash identifier: aevWdj2QcG217m8FKk8cxfJH9vWEYD/S42fo1xRpPOQ=
Subject key identifier: 20:EC:28:95:23:7C:D5:8F:6C:8A:E5:5E:51:5F:21:CA:74:E0:F8:39
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19D78AC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa
Signing time: Sun 15 May 2022 13:50:41 +0000
ROA not before: Sun 15 May 2022 13:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149506
IP address blocks: 2a06:a005:8b0::/44 maxlen: 48
2a06:a005:8c0::/44 maxlen: 48
2a06:a005:8d0::/44 maxlen: 48
2a06:a005:990::/44 maxlen: 48
2a06:a005:9a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433556162 (0x19d78ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 15 13:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20ec2895237cd58f6c8ae55e515f21ca74e0f839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:0e:c4:51:3c:fa:9e:54:c1:7d:e1:16:4b:
1e:87:74:94:e5:42:96:c1:c0:73:85:85:c3:89:f2:
8d:00:37:59:45:bd:98:2d:b1:ed:90:53:d4:0b:4c:
c5:fe:66:aa:91:97:15:6e:09:85:26:16:15:72:80:
0a:23:39:ea:4d:2b:de:f4:41:d1:4d:17:8d:5a:99:
45:97:19:c3:07:4b:1f:95:2d:6a:2f:ad:91:1c:be:
12:fa:bf:5f:b9:a2:90:38:c2:11:3b:f6:e4:fc:6e:
32:ca:3e:7b:e6:3b:27:88:41:58:2e:80:1b:02:de:
42:99:bc:39:52:d8:37:19:3b:f1:9a:eb:20:40:1f:
24:85:70:35:28:2a:e6:3d:78:22:31:e1:8b:02:fe:
d7:f9:5e:81:d9:19:b3:b7:bc:00:c1:ed:d2:d4:34:
f5:6c:45:99:1e:38:01:bc:5f:3b:97:ad:64:2d:99:
89:d8:18:32:91:51:48:75:89:6e:63:83:3d:5c:17:
42:5e:5d:8a:19:07:9f:32:7e:19:6b:f2:ca:22:61:
c9:b5:ea:e3:e1:1f:2f:ee:39:a5:f9:f0:d9:70:6d:
f2:82:eb:8f:0d:41:2e:97:30:f7:76:3b:e2:40:bd:
22:a1:2d:18:2a:1a:2f:f1:f7:41:36:78:a9:89:de:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:28:95:23:7C:D5:8F:6C:8A:E5:5E:51:5F:21:CA:74:E0:F8:39
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8b0::-2a06:a005:8df:ffff:ffff:ffff:ffff:ffff
2a06:a005:990::-2a06:a005:9af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:33:9f:ab:8f:a3:40:0f:74:32:58:aa:1c:40:4b:ab:ea:90:
58:d3:64:d7:9a:d4:b2:65:f3:44:41:00:cc:b3:26:0c:0e:b7:
7d:da:78:77:c3:e0:ea:ff:46:fb:e6:80:0f:98:7a:59:63:8d:
05:49:5a:16:9e:e1:bd:a9:79:db:74:19:22:7a:a2:7f:29:14:
d7:ad:6b:93:07:70:ed:ad:d6:b7:5f:9a:e0:4a:3a:c9:df:b2:
ec:24:a8:94:c3:38:13:26:dc:64:ed:ad:86:cb:0e:04:52:fb:
9d:a3:ae:90:ac:fd:d7:0a:46:ec:6d:58:38:9c:71:08:e8:8c:
32:93:a1:f2:88:e8:ae:52:c3:b0:e8:32:b6:01:0d:d9:19:b8:
c3:4d:9b:8c:2e:03:ae:94:dc:99:4c:45:1a:0d:00:67:d4:91:
5b:70:42:cf:41:ed:6e:ad:46:7a:65:a9:9a:ca:6f:3b:66:6e:
ea:9c:cb:7b:fb:4b:8d:7c:6e:14:18:68:fe:4a:90:85:89:5b:
b5:66:17:16:f9:79:49:d9:00:0d:0e:13:65:1d:cd:b0:8e:00:
68:03:5b:9a:5b:17:47:70:b1:74:d1:a9:1d:3e:56:9b:df:97:
97:7c:b4:6e:2f:dc:88:ab:cd:71:64:07:89:75:a5:58:85:e4:
b2:ed:d2:30
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEGdeKwjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUx
NTEzNTA0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBlYzI4OTUyMzdj
ZDU4ZjZjOGFlNTVlNTE1ZjIxY2E3NGUwZjgzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGjDsRRPPqeVMF94RZLHod0lOVClsHAc4WFw4nyjQA3WUW9
mC2x7ZBT1AtMxf5mqpGXFW4JhSYWFXKACiM56k0r3vRB0U0XjVqZRZcZwwdLH5Ut
ai+tkRy+Evq/X7mikDjCETv25PxuMso+e+Y7J4hBWC6AGwLeQpm8OVLYNxk78Zrr
IEAfJIVwNSgq5j14IjHhiwL+1/legdkZs7e8AMHt0tQ09WxFmR44AbxfO5etZC2Z
idgYMpFRSHWJbmODPVwXQl5dihkHnzJ+GWvyyiJhybXq4+EfL+45pfnw2XBt8oLr
jw1BLpcw93Y74kC9IqEtGCoaL/H3QTZ4qYneUO8CAwEAAaOCAiswggInMB0GA1Ud
DgQWBBQg7CiVI3zVj2yK5V5RXyHKdOD4OTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0lPd29sU044MVk5c2l1VmVVVjhoeW5UZy1Eay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwLgQCAAIwKDASAwcEKgagBQiwAwcFKgagBQjAMBID
BwQqBqAFCZADBwQqBqAFCaAwDQYJKoZIhvcNAQELBQADggEBABczn6uPo0APdDJY
qhxAS6vqkFjTZNea1LJl80RBAMyzJgwOt33aeHfD4Or/RvvmgA+YelljjQVJWhae
4b2pedt0GSJ6on8pFNeta5MHcO2t1rdfmuBKOsnfsuwkqJTDOBMm3GTtrYbLDgRS
+52jrpCs/dcKRuxtWDiccQjojDKTofKI6K5Sw7DoMrYBDdkZuMNNm4wuA66U3JlM
RRoNAGfUkVtwQs9B7W6tRnplqZrKbztmbuqcy3v7S418bhQYaP5KkIWJW7VmFxb5
eUnZAA0OE2UdzbCOAGgDW5pbF0dwsXTRqR0+Vpvfl5d8tG4v3IirzXFkB4l1pViF
5LLt0jA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org