Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JxCRH50yfV69ub525qNCZ7WGFxI.roa
File: JxCRH50yfV69ub525qNCZ7WGFxI.roa (raw, json)
Hash identifier: paEkij983L0rZMfMIUQTZ+C/xeqZWbk2n/sWcWaWUZg=
Subject key identifier: 27:10:91:1F:9D:32:7D:5E:BD:B9:BE:76:E6:A3:42:67:B5:86:17:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845CC946413C46DF5A1610F1390CD2A2CB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JxCRH50yfV69ub525qNCZ7WGFxI.roa
Signing time: Wed 09 Nov 2022 14:26:45 +0000
ROA not before: Wed 09 Nov 2022 14:26:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:c9:46:41:3c:46:df:5a:16:10:f1:39:0c:d2:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 9 14:26:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2710911f9d327d5ebdb9be76e6a34267b5861712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:bf:f4:8a:ec:ec:95:fd:1b:f4:4c:b8:01:
6e:94:74:e8:70:c9:93:f4:dc:17:71:87:3d:13:98:
9c:b5:17:bd:10:b9:f7:8e:f9:ea:87:a7:eb:36:40:
96:e3:eb:df:bb:f5:ed:63:d2:a1:e6:87:33:f3:df:
b2:75:32:c4:a4:71:ef:c8:63:b4:79:63:ef:67:d9:
70:52:46:09:51:02:7c:c2:d6:7a:e9:2c:de:77:b2:
b1:4b:b8:b5:42:d7:fb:d5:e7:0c:8c:ee:10:34:7e:
6a:c5:f7:1a:88:88:19:64:b8:0c:4b:c6:74:23:07:
68:e3:30:e3:57:f5:d7:40:21:3b:10:9b:12:1c:b5:
91:d0:c8:3a:b4:f8:cd:d5:8b:55:e3:53:17:a9:8e:
55:de:5d:f6:93:7e:f2:57:fb:ea:89:e4:60:53:10:
08:52:9e:b3:56:b1:ac:f9:61:a8:d3:09:28:59:b4:
21:29:20:d8:ca:b9:b4:e2:c2:a4:bc:13:b1:a9:3d:
d7:b1:f5:3b:8b:fa:0e:c7:a0:95:20:1e:2a:0e:5c:
52:67:71:ec:99:05:90:fa:c2:df:3b:54:d0:4d:fd:
e1:7b:5a:1a:8c:2a:6b:d2:07:3f:c9:45:ea:83:23:
90:29:a1:24:53:08:96:9b:6f:46:57:3b:4c:7c:22:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:10:91:1F:9D:32:7D:5E:BD:B9:BE:76:E6:A3:42:67:B5:86:17:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JxCRH50yfV69ub525qNCZ7WGFxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
43:63:c8:e5:78:95:c2:fc:8d:d3:7f:aa:b7:0f:45:48:d8:4c:
7a:33:ee:77:e0:a0:02:9e:60:aa:a8:15:ce:c6:06:03:b0:ee:
6d:c7:ea:28:f7:51:b3:0d:6d:b4:f7:5a:79:49:87:ae:66:01:
05:c0:8c:ff:1a:ab:d9:ac:40:80:34:75:9f:24:7c:df:0f:90:
96:a9:b9:6c:61:0c:d9:d0:44:1e:c3:15:df:bd:86:73:28:5b:
6b:72:f0:4f:69:35:25:21:76:83:6b:28:30:99:a6:86:35:46:
43:1e:dd:dc:86:79:98:08:fd:97:e6:61:d0:01:ad:76:64:e8:
9a:ca:4c:44:72:bc:95:5a:93:6f:71:8e:59:88:35:c1:23:f8:
11:cd:4b:95:ea:93:ca:2d:36:39:35:37:3e:bf:11:f8:23:cb:
bd:ae:27:fc:88:84:ea:1d:13:79:f0:76:cc:e3:9a:60:eb:eb:
e1:a7:66:f6:e9:48:12:50:26:87:85:75:c3:c7:2a:16:3a:70:
75:2b:25:22:43:49:14:7e:eb:46:b7:44:1c:99:9e:4f:28:2c:
42:6e:4b:a4:df:38:82:00:b7:03:99:ce:2d:4a:b2:64:06:55:
90:d6:59:fe:c0:44:ce:67:8d:2e:39:ed:63:69:51:81:56:5f:
f0:08:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org