Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IaEJbCMnwc4jjyJSFKxp2anOgJQ.roa
File: IaEJbCMnwc4jjyJSFKxp2anOgJQ.roa (raw, json)
Hash identifier: G3CchKcWx8z7aiUfZDUk+elrP/jrQSO0m5MoQZrpF9k=
Subject key identifier: 21:A1:09:6C:23:27:C1:CE:23:8F:22:52:14:AC:69:D9:A9:CE:80:94
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18874270
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IaEJbCMnwc4jjyJSFKxp2anOgJQ.roa
Signing time: Fri 22 Apr 2022 08:17:36 +0000
ROA not before: Fri 22 Apr 2022 08:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205539
IP address blocks: 2a06:a005:4df::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411517552 (0x18874270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 22 08:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21a1096c2327c1ce238f225214ac69d9a9ce8094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:42:f4:6c:bc:1e:2c:ba:f4:c2:81:6c:00:
4a:90:6d:2e:92:9c:c3:62:70:7e:2f:54:f5:d8:ca:
92:ad:24:2c:2f:9a:8f:52:38:34:33:a6:7c:36:2e:
b5:82:80:20:4e:e3:b4:98:2c:c7:e5:64:5e:87:41:
31:c6:12:ef:a2:ac:f6:8e:42:84:7c:13:5f:52:03:
dc:58:c4:dd:96:59:57:ac:3b:50:d6:b5:33:90:06:
d5:32:53:85:eb:d1:b4:82:57:c1:a0:f3:42:92:8e:
d1:36:72:80:22:3f:44:08:4c:4a:16:bf:b4:0a:04:
e4:a7:7c:14:2b:12:66:b6:e4:11:3c:6a:2d:44:12:
30:2a:f8:97:38:fd:65:ed:37:15:e6:6f:e5:d2:3d:
44:4e:b0:83:10:b0:f1:5f:57:98:ed:93:67:f1:c8:
80:f3:2f:a4:30:60:b1:bb:97:b2:b7:10:b7:94:86:
9d:ef:8d:78:75:c9:da:f6:c0:77:bd:fc:80:4d:40:
0a:bf:03:c8:6a:76:45:64:0b:39:66:f5:e3:01:87:
20:d8:7c:8e:65:88:00:45:4f:03:94:de:b7:16:4a:
74:dc:1c:c7:ce:dd:29:c7:eb:c1:e2:0d:0a:14:48:
2a:65:48:74:04:03:f0:d7:e3:cb:ed:0d:ca:e2:9d:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:09:6C:23:27:C1:CE:23:8F:22:52:14:AC:69:D9:A9:CE:80:94
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IaEJbCMnwc4jjyJSFKxp2anOgJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4df::/48
Signature Algorithm: sha256WithRSAEncryption
6d:ad:a9:f1:88:bb:56:3e:d6:a4:dc:9f:23:d5:b5:1d:5d:0e:
5a:e6:4d:d4:7e:c0:22:e9:ff:16:28:e5:36:15:eb:00:92:c4:
5f:7a:f4:b3:ce:a5:30:fe:55:be:8f:80:18:fc:be:94:09:ad:
f6:a8:72:e0:7f:ce:9b:50:a5:89:88:9d:2a:3b:1c:ef:51:0d:
39:fa:9e:13:38:b5:72:80:49:f4:06:2f:ff:24:44:8a:d6:c8:
7b:71:ac:e3:15:e3:f7:3f:10:c2:9e:74:b9:4d:a1:c1:f9:2a:
d9:02:5f:d1:67:89:98:1d:b3:6f:0c:37:67:92:13:f1:ea:f5:
93:dc:b2:46:8e:a7:08:68:30:56:86:07:41:cc:cc:e2:ce:91:
ef:63:23:d4:e8:f4:b4:ea:1d:e3:c9:26:98:0c:d5:41:c1:0c:
1d:4f:08:91:9e:30:03:85:c7:92:c2:18:49:65:ef:a6:a7:8d:
cf:0e:39:f5:5c:ce:16:03:31:6d:15:85:3d:7a:92:42:b0:a1:
d1:6a:b5:69:99:50:1a:0a:91:e2:0b:1a:85:07:67:f4:b0:4a:
0f:32:21:c6:dd:c0:e5:ce:c3:ef:6e:69:9d:2e:a5:e0:f0:b2:
b5:d4:0f:c0:56:91:e6:0e:87:a4:a2:c7:e5:d4:3e:b5:73:94:
88:8f:1e:5e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGIdCcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
MjA4MTczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjFhMTA5NmMyMzI3
YzFjZTIzOGYyMjUyMTRhYzY5ZDlhOWNlODA5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUsQvRsvB4suvTCgWwASpBtLpKcw2Jwfi9U9djKkq0kLC+a
j1I4NDOmfDYutYKAIE7jtJgsx+VkXodBMcYS76Ks9o5ChHwTX1ID3FjE3ZZZV6w7
UNa1M5AG1TJThevRtIJXwaDzQpKO0TZygCI/RAhMSha/tAoE5Kd8FCsSZrbkETxq
LUQSMCr4lzj9Ze03FeZv5dI9RE6wgxCw8V9XmO2TZ/HIgPMvpDBgsbuXsrcQt5SG
ne+NeHXJ2vbAd738gE1ACr8DyGp2RWQLOWb14wGHINh8jmWIAEVPA5TetxZKdNwc
x87dKcfrweINChRIKmVIdAQD8Nfjy+0NyuKdUV8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQhoQlsIyfBziOPIlIUrGnZqc6AlDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0lhRUpiQ01ud2M0amp5SlNGS3hwMmFuT2dKUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUE3zANBgkqhkiG9w0BAQsF
AAOCAQEAba2p8Yi7Vj7WpNyfI9W1HV0OWuZN1H7AIun/FijlNhXrAJLEX3r0s86l
MP5Vvo+AGPy+lAmt9qhy4H/Om1CliYidKjsc71ENOfqeEzi1coBJ9AYv/yREitbI
e3Gs4xXj9z8Qwp50uU2hwfkq2QJf0WeJmB2zbww3Z5IT8er1k9yyRo6nCGgwVoYH
QczM4s6R72Mj1Oj0tOod48kmmAzVQcEMHU8IkZ4wA4XHksIYSWXvpqeNzw459VzO
FgMxbRWFPXqSQrCh0Wq1aZlQGgqR4gsahQdn9LBKDzIhxt3A5c7D725pnS6l4PCy
tdQPwFaR5g6HpKLH5dQ+tXOUiI8eXg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org