Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa
File: IPnFHD1XnQXKRqvcH2VTabr8o8s.roa (raw, json)
Hash identifier: WmBTXfMoCklHMZtUscZUd9EPXJa4zKLpmIFJLkv7Tao=
Subject key identifier: 20:F9:C5:1C:3D:57:9D:05:CA:46:AB:DC:1F:65:53:69:BA:FC:A3:CB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A4AC15C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa
Signing time: Mon 30 May 2022 12:05:15 +0000
ROA not before: Mon 30 May 2022 12:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211360
IP address blocks: 2a06:a005:1f::/48 maxlen: 48
2a06:a005:aa0::/44 maxlen: 48
2a06:a005:ab0::/44 maxlen: 48
2a06:a005:ac0::/44 maxlen: 48
2a06:a005:a90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441106780 (0x1a4ac15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 30 12:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20f9c51c3d579d05ca46abdc1f655369bafca3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:e4:bf:80:ed:b3:92:ce:c4:12:3e:f3:e2:
9e:4d:d6:49:79:08:29:1c:d2:50:d4:02:60:10:af:
d5:a4:e1:81:0b:b1:6a:f3:4a:77:63:a8:3e:51:71:
cf:a5:77:9c:56:ff:34:82:de:fb:ac:95:71:9c:3c:
97:ae:a8:4e:19:80:cb:c7:84:c4:af:98:39:51:c8:
2c:7b:95:c0:9a:ae:cd:ec:d1:c3:6c:21:40:9d:0f:
40:d5:7a:f4:f0:c4:38:f2:8e:90:2d:0a:b6:aa:5c:
c7:6e:f8:54:12:07:80:00:5a:9b:e3:cf:25:c9:e8:
01:7d:0a:be:38:8c:7a:43:ef:2e:95:b1:ee:de:97:
bb:9a:d5:7f:05:bd:49:9a:06:59:b5:f0:0f:ed:f6:
7f:8a:3c:64:eb:e6:a4:e1:b7:fb:f5:f7:b4:96:18:
d9:67:ac:37:df:5b:09:32:a7:d4:39:e3:32:f7:60:
16:8b:5b:14:49:b3:58:4c:07:59:30:35:c6:64:9c:
fc:93:1b:dd:35:cf:47:90:1a:1f:39:c5:8e:04:dc:
1b:ae:98:1a:70:c7:90:c0:bf:43:b8:b1:f5:a1:ab:
0d:0d:65:44:e8:14:e4:9b:0e:69:4e:ef:dd:7e:01:
26:8d:b4:70:f1:21:8e:47:66:09:26:7d:a4:0c:d8:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:C5:1C:3D:57:9D:05:CA:46:AB:DC:1F:65:53:69:BA:FC:A3:CB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f::/48
2a06:a005:a90::-2a06:a005:acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:1f:38:71:25:43:c3:28:48:11:3e:f9:65:76:98:d2:61:f2:
08:a0:3b:e7:56:e8:17:c4:49:05:aa:d7:aa:a1:b8:44:d3:a4:
a0:23:38:e8:e5:be:ba:bd:a3:e4:24:fa:0e:09:15:77:b1:67:
5f:6b:3c:f7:df:af:9d:8f:8e:b2:5c:98:b1:12:a4:1c:52:75:
77:3a:38:72:4f:c4:7c:c6:47:e0:67:f8:8a:b2:79:22:fe:8f:
f2:22:74:02:d6:54:3c:73:01:76:be:5b:33:11:21:fc:59:66:
98:1d:c3:66:96:9d:03:09:53:22:a6:79:83:66:2c:74:47:c0:
ea:a8:d2:d5:15:40:5a:44:0f:41:26:ef:8d:ee:f3:b0:88:61:
17:28:58:a2:c8:c2:0f:d7:d9:23:0f:0b:89:ee:3e:cd:df:0c:
21:c0:6f:da:0a:9e:64:1c:6e:ad:1f:65:5d:f7:a2:4d:40:7d:
3a:75:88:75:46:c4:74:58:63:0d:85:92:56:02:b6:7f:33:65:
87:8a:1e:ee:6c:42:f6:21:ad:02:a1:49:6d:6c:ef:17:93:ba:
16:18:a2:ee:51:94:59:67:a2:32:82:ad:cf:c0:b4:03:1d:9e:
5f:b6:78:01:b9:c8:af:c0:22:97:15:26:6b:10:00:ac:43:37:
bf:db:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org