Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JTftELdImu88G9yYmM4vPepdnUE.roa
File: JTftELdImu88G9yYmM4vPepdnUE.roa (raw, json)
Hash identifier: Ra3FcYoijc9YUIiW+Q/xLXSBYEBgHWkP/HxLzuMA22M=
Subject key identifier: 25:37:ED:10:B7:48:9A:EF:3C:1B:DC:98:98:CE:2F:3D:EA:5D:9D:41
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A0AD92C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JTftELdImu88G9yYmM4vPepdnUE.roa
Signing time: Tue 24 May 2022 13:17:14 +0000
ROA not before: Tue 24 May 2022 13:17:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203857
IP address blocks: 2a06:a005:5ec::/48 maxlen: 48
2a06:a005:11::/48 maxlen: 48
2a06:a005:a01::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:432::/48 maxlen: 48
2a06:a005:12::/48 maxlen: 48
2a06:a005:a02::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:10::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:856::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436918572 (0x1a0ad92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 24 13:17:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2537ed10b7489aef3c1bdc9898ce2f3dea5d9d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:de:71:31:55:a6:90:9f:57:58:ab:2c:0b:
fe:b1:81:71:ae:fe:89:25:61:0f:ab:24:5a:e4:9c:
a9:81:3f:3e:66:d0:05:60:02:b2:15:23:ee:f0:c4:
07:95:5d:8d:b8:33:6f:61:37:a9:fc:da:5e:8f:ab:
a9:49:0b:9b:f2:bc:1a:25:40:15:e5:89:68:a3:51:
13:a3:a6:39:b1:eb:dc:a6:ca:ee:5b:20:1a:6b:e6:
c7:7e:44:4c:79:a6:3b:ed:44:99:e1:e1:c8:47:78:
14:4c:3b:fe:02:8d:1e:5d:3e:98:32:4d:a6:30:a6:
7e:47:76:1a:36:2f:cb:f5:4d:ae:8b:04:68:e2:4b:
e4:6f:a7:11:f9:54:fc:97:76:23:0f:92:56:00:15:
02:44:02:af:69:61:df:34:08:ac:8f:5b:78:b2:db:
4e:5d:09:19:ef:d4:28:54:af:28:9c:9c:72:8d:92:
ad:a0:10:9d:4e:0e:ea:bf:cf:5e:d9:a6:1e:77:b5:
00:72:6c:ae:42:10:51:41:ef:77:a0:79:7e:56:ce:
0a:27:f9:4d:83:06:a2:0e:46:49:96:c8:43:76:4b:
a0:b6:04:6b:82:42:a9:d0:8f:b6:cb:79:88:8c:ed:
91:bb:b4:f3:e1:fd:92:27:48:1a:a3:80:de:9e:3a:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:ED:10:B7:48:9A:EF:3C:1B:DC:98:98:CE:2F:3D:EA:5D:9D:41
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JTftELdImu88G9yYmM4vPepdnUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
2a06:a005:432::/48
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::/48
2a06:a005:5e8::/45
2a06:a005:850::/47
2a06:a005:856::/48
2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:4b:2c:f2:c6:d5:62:74:e7:c4:7a:24:e2:2f:de:3f:67:b3:
bd:79:92:c8:9d:fb:9c:7a:2a:08:a3:cf:a9:c5:6c:54:ea:21:
73:df:0d:f4:92:07:b2:b9:04:41:58:29:b9:f0:fd:26:d6:f8:
c3:a6:59:b5:48:b6:84:55:c7:0b:4e:03:36:9f:ca:40:a0:a5:
0c:cf:ac:6c:ba:1b:e1:08:84:47:47:02:e5:e2:2a:65:4a:eb:
74:8a:d1:55:e6:9e:f1:1f:de:93:dd:1e:6d:90:c5:09:21:b8:
4b:c6:a0:59:1c:b7:86:e9:11:89:cc:94:b6:3c:d6:30:f9:b3:
6d:90:c9:b2:42:4f:b3:bd:0d:3d:00:67:0d:fd:ae:29:84:ff:
15:d1:34:76:ca:39:b1:cd:15:67:a0:05:cf:c0:3f:1b:41:0b:
b0:5d:c1:cc:02:2b:e2:51:9b:db:ec:9b:4f:79:e2:1d:73:7b:
39:2a:1c:92:2b:2b:51:1b:73:91:38:97:96:12:7f:7c:aa:8f:
d0:8a:3c:c1:0f:d4:3a:71:8e:3d:da:1e:bd:91:f0:db:3f:f5:
7d:36:f6:e4:11:6f:b8:65:cc:6e:94:d2:dd:87:fb:b8:12:ad:
83:24:92:e2:0e:62:96:a1:41:7f:1d:05:a0:71:c4:c4:ea:7d:
85:42:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:17 2023 by rpki-client on console-ams.rpki-client.org