Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa
File: IlRLIGdwLlxicD047OYNef5Y9go.roa (raw, json)
Hash identifier: VhWCIQ6LeL2gj/LVWnuggK1PE1zv9zhOxwpd4jSrcIU=
Subject key identifier: 22:54:4B:20:67:70:2E:5C:62:70:3D:38:EC:E6:0D:79:FE:58:F6:0A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E8088052AD29B9ACC7B3808281C77EA6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa
Signing time: Tue 06 Dec 2022 15:23:01 +0000
ROA not before: Tue 06 Dec 2022 15:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200890
IP address blocks: 2a0a:6040:d400::/40 maxlen: 48
2a06:a005:1b60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:08:80:52:ad:29:b9:ac:c7:b3:80:82:81:c7:7e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 15:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22544b2067702e5c62703d38ece60d79fe58f60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:5d:b7:fa:e9:ba:78:e1:fb:93:18:10:e7:
e7:ac:8f:fd:e0:dd:27:6e:4c:2a:78:99:f1:39:f4:
48:d1:b8:67:14:2c:b4:54:e9:51:82:b1:86:f3:d6:
34:37:83:8e:f9:ab:b4:bb:f4:c1:5e:e4:58:12:24:
ff:53:73:3d:95:04:ee:bf:00:75:76:31:f7:93:da:
77:5b:9e:53:f0:19:e0:d9:e1:1e:2d:96:65:e7:92:
c4:0b:e9:e1:d5:04:07:b6:38:98:07:08:de:af:9c:
4c:75:1e:29:59:b3:2a:60:67:ad:25:af:fc:4a:b5:
b4:70:a9:cb:bb:70:18:ef:65:65:07:77:05:01:90:
8a:39:4b:7e:b4:fd:aa:cf:aa:c8:40:a6:8c:e3:a1:
a7:13:13:82:5b:7c:66:70:0d:7f:3f:41:7c:35:08:
90:25:a7:03:ce:76:ec:20:92:0a:8e:92:c7:7c:99:
e8:9c:6c:cf:8a:65:6f:87:16:28:35:53:3c:35:40:
e9:f8:d3:bb:9a:66:51:6f:92:e9:fb:f6:18:0f:3a:
11:60:32:e4:35:c4:43:28:14:d1:8c:1e:01:c0:b3:
47:16:91:8d:aa:91:7f:ae:ed:a1:8c:de:3f:f7:2f:
a4:89:6d:3d:52:85:14:ef:c3:c6:9b:53:ff:1c:9c:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:4B:20:67:70:2E:5C:62:70:3D:38:EC:E6:0D:79:FE:58:F6:0A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b60::/44
2a0a:6040:d400::/40
Signature Algorithm: sha256WithRSAEncryption
60:74:5a:8a:dc:57:c9:95:d2:61:0b:c6:aa:10:12:96:7a:df:
e0:eb:ee:69:72:d5:90:92:60:b1:88:cc:45:99:e2:82:7c:b8:
00:8a:0a:a1:97:20:70:23:7e:50:42:2a:e3:b2:82:2a:fe:50:
c7:fe:46:00:4f:3c:74:50:04:f6:09:dc:42:fd:4d:5f:fa:53:
f6:9b:83:dd:89:16:af:e0:15:92:1b:8f:f1:d9:00:19:d5:da:
93:19:4c:a7:88:53:75:24:68:b1:15:1f:02:b0:97:78:39:80:
92:69:0e:b1:6b:d5:8d:3c:f3:72:8d:43:6b:46:3f:85:27:81:
cf:4d:2f:e5:0d:8b:80:5e:40:3f:08:92:f5:54:51:85:c3:3d:
9e:1d:8d:97:58:19:95:ca:1f:65:82:96:d6:b1:18:01:c0:c5:
b0:26:d6:11:f6:bf:1f:de:d2:b2:27:80:06:9e:92:c9:0b:dc:
83:c5:bd:d2:9d:f1:c0:46:4f:c8:0b:c6:f3:6f:2d:c8:16:76:
45:1e:79:04:c2:d9:33:74:87:9a:17:4a:cb:0e:3d:00:7b:0e:
96:62:ed:5e:87:38:c9:7b:64:d6:c8:af:2b:ef:e2:98:6d:55:
e8:33:d7:eb:68:04:c3:b0:9e:c0:99:04:1a:ec:d8:45:d6:c7:
18:04:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org