Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jox6R5BLBohOoZzOplpGfP5nKSA.roa
File: Jox6R5BLBohOoZzOplpGfP5nKSA.roa (raw, json)
Hash identifier: CaVILLSUh9nn8LbPiCWAJosW3d62ynH1/C4puLvSyHo=
Subject key identifier: 26:8C:7A:47:90:4B:06:88:4E:A1:9C:CE:A6:5A:46:7C:FE:67:29:20
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184922DAD0DDD7926731760C55634300AF8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jox6R5BLBohOoZzOplpGfP5nKSA.roa
Signing time: Sat 19 Nov 2022 23:16:17 +0000
ROA not before: Sat 19 Nov 2022 23:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203113
IP address blocks: 2a06:a005:2260::/44 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:22f0::/44 maxlen: 48
2a06:a005:8c0::/44 maxlen: 48
2a06:a005:2310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:92:2d:ad:0d:dd:79:26:73:17:60:c5:56:34:30:0a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 19 23:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268c7a47904b06884ea19ccea65a467cfe672920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:9e:01:8b:14:f5:78:83:75:71:13:d9:f0:
fd:da:9b:d9:68:6b:fe:86:84:ad:bc:86:f7:0a:86:
df:6a:0d:82:63:1a:23:57:c7:d7:41:16:82:75:3b:
8c:14:a3:70:cd:36:72:8f:be:b5:bd:dc:28:08:7f:
99:ca:1d:f1:f3:76:8b:24:8f:67:59:f9:fc:f1:a8:
70:60:33:2a:7e:f4:ab:1a:3d:4c:73:f1:fc:4f:23:
cc:6e:86:b6:24:f3:21:b4:c6:35:f8:ea:d5:29:ba:
5c:0d:27:6f:10:59:c3:fa:cf:d5:6a:38:95:6f:82:
79:01:a3:3c:2c:f0:73:27:34:5a:d0:4a:76:86:00:
54:69:25:51:12:77:01:c4:d8:1d:4e:40:c4:eb:c5:
43:df:70:89:f6:d1:f1:0d:70:aa:f4:44:1e:08:77:
cf:4a:7f:1d:24:04:80:fe:29:c6:0f:61:c6:c7:03:
2d:99:eb:3a:e0:3a:40:93:d5:d6:09:96:1c:e2:d9:
33:a0:e8:4d:a9:83:09:03:3c:e4:72:36:ec:b5:92:
c2:01:87:7e:d3:69:0a:08:13:df:19:57:22:0c:a0:
64:6c:7c:40:0d:8e:c1:1b:5f:bd:3d:ad:86:95:bb:
d1:a6:a1:f1:0c:98:1c:2f:1a:42:7e:3b:5a:00:b8:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:7A:47:90:4B:06:88:4E:A1:9C:CE:A6:5A:46:7C:FE:67:29:20
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jox6R5BLBohOoZzOplpGfP5nKSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a06:a005:22f0::/44
2a06:a005:2310::/44
Signature Algorithm: sha256WithRSAEncryption
46:b3:77:a3:09:83:0d:ad:00:9b:53:c5:cb:3a:22:24:a5:f5:
cc:ba:e6:fb:5a:ce:9e:ee:9d:63:a5:df:9c:ca:6b:cc:87:0c:
24:fd:b3:16:e7:ba:36:12:77:cc:5c:84:95:61:b9:fd:d5:8e:
f9:a8:fa:4f:bc:b8:12:65:df:f1:3c:89:d9:7d:07:08:68:82:
f5:f2:d9:5f:8e:74:7c:0b:90:e0:d5:1c:00:ab:de:fe:32:0f:
fe:75:94:e2:33:09:ff:54:48:25:fe:9d:4a:d3:4f:6a:b9:b8:
7e:8c:5c:5c:22:89:ba:d9:e0:d1:b3:b8:8e:b1:d0:d6:86:c0:
bf:83:db:40:8b:d7:29:63:66:b4:6a:2e:33:d9:43:ab:c9:6a:
3f:4e:ff:d9:c8:54:58:33:9d:e3:20:c9:2c:e9:e1:9e:9d:fe:
ac:54:74:e1:46:51:a9:1f:c7:32:7a:b8:fa:b9:23:1c:e8:83:
62:6b:59:76:99:15:a1:01:ec:9b:d6:59:67:89:25:00:36:f9:
0a:a7:69:8c:7b:a5:e1:bc:04:87:a7:21:f0:03:5a:43:63:15:
00:2b:58:7c:2c:39:fe:25:27:36:6d:1c:39:a5:96:25:3d:cc:
ca:09:23:50:ae:c6:e8:66:c2:56:cb:93:f6:ea:2e:52:58:48:
43:41:22:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org