Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K15V5yBplvrcMDyzkuQ7u3brwdM.roa
File: K15V5yBplvrcMDyzkuQ7u3brwdM.roa (raw, json)
Hash identifier: wQz0fOuFIdGvU8vuJGAObJDgDL2KVZrcIq/SEhGCLV0=
Subject key identifier: 2B:5E:55:E7:20:69:96:FA:DC:30:3C:B3:92:E4:3B:BB:76:EB:C1:D3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183805924A1F7D47D11A8CBD775382F7139
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K15V5yBplvrcMDyzkuQ7u3brwdM.roa
Signing time: Tue 27 Sep 2022 19:07:49 +0000
ROA not before: Tue 27 Sep 2022 19:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:59:24:a1:f7:d4:7d:11:a8:cb:d7:75:38:2f:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 27 19:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5e55e7206996fadc303cb392e43bbb76ebc1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:ad:95:6b:ed:04:c5:36:6c:fc:f9:19:54:
b3:39:f3:8b:a3:b7:70:71:78:7a:db:dc:64:d5:83:
11:3f:88:dd:49:80:eb:51:a5:ff:ac:8a:8e:58:05:
bd:73:92:f9:20:f8:93:8a:97:84:77:01:b7:fc:08:
86:a5:3a:e1:e8:19:58:4c:ee:d5:bf:fc:76:30:7f:
eb:a8:e0:f3:b5:fd:ed:4a:10:a3:36:8c:0b:19:c1:
2c:93:b2:e2:6c:a5:53:fe:a9:9a:f5:10:4d:1d:e9:
6c:21:b0:6c:51:19:a8:09:49:00:27:e9:75:c8:2a:
90:70:90:18:1e:49:28:32:e7:ea:41:0c:11:da:c9:
6d:34:cb:5a:df:cd:c3:50:c9:2b:cc:84:dc:8e:60:
f3:aa:48:85:97:7b:d9:7e:77:dc:cd:47:e3:96:37:
47:be:87:25:77:72:3c:63:f7:43:ef:1d:67:5e:93:
34:59:f1:51:64:b8:19:d7:f5:b2:35:2b:1b:ae:23:
7d:95:aa:62:f2:5c:5e:dc:4f:d2:87:28:03:85:b8:
67:51:5e:bc:0a:41:23:7b:7d:a4:f0:6e:88:3b:42:
4a:f6:c0:b8:1b:d9:85:9b:cd:78:73:55:65:a5:ac:
44:57:6c:ef:81:71:47:ad:e3:49:9c:ca:fc:a1:f6:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5E:55:E7:20:69:96:FA:DC:30:3C:B3:92:E4:3B:BB:76:EB:C1:D3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K15V5yBplvrcMDyzkuQ7u3brwdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
Signature Algorithm: sha256WithRSAEncryption
68:aa:a8:5c:c9:6c:1e:75:a3:16:34:a6:b1:f4:6b:3e:73:50:
94:7e:f3:4d:ba:d3:79:7b:83:37:3d:09:5c:90:03:38:e1:11:
dd:61:f6:5b:b7:65:a1:0c:5e:3c:3e:9b:8d:33:5f:65:f8:6a:
d0:3a:b5:db:3a:05:c5:3e:ad:aa:40:a0:1a:40:b0:06:68:b5:
66:88:5b:bd:db:a7:49:e1:e6:e6:f3:c9:5e:ce:d6:4b:eb:3b:
05:06:65:b2:31:89:f2:5c:67:af:91:f6:24:66:72:d6:a4:b8:
5d:cf:96:3d:4c:ff:f0:1a:d3:67:2f:11:84:32:20:84:2e:0e:
c7:16:8d:7a:3d:8e:53:5c:f4:36:21:cf:69:aa:9f:ad:32:e7:
3f:9f:78:e6:18:bf:3a:2d:6e:e6:31:70:e9:56:c6:2e:fb:2d:
fa:6a:91:19:4a:75:1a:59:65:f7:a5:08:24:fe:c8:3c:34:52:
4f:d2:d9:ff:99:39:16:ab:2d:36:ca:e7:03:eb:a4:9c:fa:38:
57:ed:70:1d:97:1e:59:49:4f:e0:c4:e0:2f:3f:4e:50:97:57:
e1:a0:95:6c:0a:c5:49:9e:94:af:5d:4b:86:56:6e:0c:84:67:
33:13:1e:7b:c6:a9:cd:35:88:3e:53:7d:42:ee:1e:c3:4e:aa:
d6:f4:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org