Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVsyw4DyqGcv67tnpMpZahfjal4.roa
File: JVsyw4DyqGcv67tnpMpZahfjal4.roa (raw, json)
Hash identifier: JW+vZUd2OxWsb3FPX2qfCKqgKR/5KVZCrY5PYXIe17Y=
Subject key identifier: 25:5B:32:C3:80:F2:A8:67:2F:EB:BB:67:A4:CA:59:6A:17:E3:6A:5E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183B953DE594A47670E97313AE3AF9470AB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVsyw4DyqGcv67tnpMpZahfjal4.roa
Signing time: Sat 08 Oct 2022 20:40:24 +0000
ROA not before: Sat 08 Oct 2022 20:40:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203915
IP address blocks: 2a06:a005:ba8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:53:de:59:4a:47:67:0e:97:31:3a:e3:af:94:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 8 20:40:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=255b32c380f2a8672febbb67a4ca596a17e36a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:cd:47:e6:91:2d:4a:ec:1b:63:ab:f3:02:
8b:33:a9:b4:9c:e5:61:6a:50:6e:00:5b:3e:c3:2d:
94:b7:ae:34:91:a3:15:b1:a9:71:96:c2:f3:fb:9c:
be:c7:45:f7:83:2c:c3:0c:fe:29:e1:83:f1:33:15:
05:82:af:17:d0:74:55:89:af:09:32:61:a9:ed:c3:
ea:e6:4d:37:af:b6:63:4c:d0:41:ef:2f:60:78:58:
cf:56:e6:7d:c1:c6:16:cf:17:3b:54:a1:98:ca:b7:
c3:42:47:31:b9:a4:10:c5:d7:c1:ac:0d:6d:8a:42:
27:62:89:5b:aa:bd:14:bc:8a:a1:07:70:d9:df:c2:
b0:a4:e2:b5:4b:17:28:bb:8f:4b:ca:43:94:50:9c:
59:1d:67:de:aa:54:04:7b:61:b8:c2:66:52:dc:75:
42:24:70:9f:dd:07:73:26:1d:72:e8:8c:78:e4:f0:
71:52:80:57:5c:6f:9c:ab:63:db:21:f3:1e:de:cd:
f5:c3:a6:38:40:f8:d7:1b:74:94:9f:74:5c:eb:e2:
22:e9:1c:45:a0:08:fb:b7:0e:64:58:06:95:58:cc:
77:ad:d5:80:5f:a4:4e:32:ee:8a:e9:fe:66:6c:96:
e7:c2:3a:c6:9e:c3:3e:e6:21:e4:fa:1c:51:b3:26:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:32:C3:80:F2:A8:67:2F:EB:BB:67:A4:CA:59:6A:17:E3:6A:5E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVsyw4DyqGcv67tnpMpZahfjal4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba8::/48
Signature Algorithm: sha256WithRSAEncryption
0b:0b:32:da:48:98:a2:27:d2:94:26:3f:8b:ca:0c:23:c5:0d:
1a:74:dc:b2:23:1c:e4:e0:e9:5b:a6:79:fe:c9:c1:aa:f1:ac:
39:6c:a6:df:e8:77:e9:04:a2:a0:ac:a0:ec:6b:4e:7e:53:5c:
13:9b:1d:72:47:66:d7:5d:49:51:4f:74:55:9a:76:2c:aa:4f:
d8:80:94:ca:d8:94:23:86:2f:24:dc:bc:02:b4:24:4b:9f:29:
41:6a:88:92:25:5b:c0:55:39:2d:05:5f:90:8c:45:05:3e:ee:
48:55:c8:67:17:6b:27:74:f7:f8:8e:f3:8f:a7:b8:da:18:48:
43:26:ff:d5:bd:53:36:c6:17:66:c4:7e:28:5e:fa:20:6b:bf:
9b:96:d5:d2:96:fb:fa:80:e8:0a:a4:db:09:5e:fa:e3:9f:dc:
9b:1f:e7:e8:45:e8:8b:d0:b7:1a:22:19:bc:19:02:81:ce:98:
89:cc:95:7f:0f:f9:bd:b9:f7:a7:55:85:0d:13:64:c5:35:46:
23:be:ec:e0:76:7c:c1:07:23:65:03:b2:2d:bd:dc:09:95:ca:
8f:5f:93:24:6a:24:aa:06:d8:1c:07:e7:8b:3c:7a:3c:5d:5a:
5b:91:d1:7b:75:71:7b:af:05:4d:ae:32:e9:63:2b:7e:04:6c:
c9:bb:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org