Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LKedy4749R_6AN1HJ0RysUvJfkI.roa
File: LKedy4749R_6AN1HJ0RysUvJfkI.roa (raw, json)
Hash identifier: ugwNJG/rSPO2b4Er2ez7Xhbl54g5sJQAtK6DuIDioao=
Subject key identifier: 2C:A7:9D:CB:8E:F8:F5:1F:FA:00:DD:47:27:44:72:B1:4B:C9:7E:42
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CFD0D94A1E32AB7C07CAC3887F8C2C66
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LKedy4749R_6AN1HJ0RysUvJfkI.roa
Signing time: Thu 01 Dec 2022 22:31:21 +0000
ROA not before: Thu 01 Dec 2022 22:31:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:d0:d9:4a:1e:32:ab:7c:07:ca:c3:88:7f:8c:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 22:31:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca79dcb8ef8f51ffa00dd47274472b14bc97e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:11:1c:43:db:f6:ad:45:06:4a:7b:ad:2b:
92:19:43:00:71:d1:0f:e7:d2:31:4c:1a:db:83:cc:
36:5b:7e:9b:f5:78:d0:c1:4f:69:75:a5:26:cc:a6:
93:26:40:22:b7:8d:a7:23:c2:d0:cc:74:51:76:ca:
d8:c1:5f:f6:a3:b4:c6:97:a0:2b:b3:e6:4c:d6:96:
59:a6:5a:07:1a:d8:1f:c5:81:f7:11:a7:a7:fb:a9:
73:f0:3c:23:04:b8:02:62:c8:0e:4b:65:a3:56:2d:
08:d0:a7:88:4e:33:5d:08:9e:25:fd:5f:8c:0f:8d:
89:12:75:ee:6a:62:9f:00:2c:4d:d7:23:23:04:66:
a1:5e:25:cf:5a:39:df:cf:9d:68:dc:41:e8:f6:f9:
00:a6:13:19:a9:4a:05:87:27:a5:64:7b:60:83:84:
ef:eb:99:11:d6:0f:24:ab:9d:fb:32:3d:12:0d:1d:
d3:5b:55:d0:ce:86:ea:54:ca:2c:fe:65:e2:19:3a:
4a:d5:35:b3:9c:b5:6b:79:5e:ee:89:ab:09:3a:de:
a7:dc:0b:ad:66:b8:9b:47:f0:dc:08:70:f7:2f:43:
82:da:da:34:57:73:92:30:04:0f:ea:f1:a5:0f:a0:
bc:2f:a7:f3:88:3b:c0:cf:96:6b:e8:66:75:69:87:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:9D:CB:8E:F8:F5:1F:FA:00:DD:47:27:44:72:B1:4B:C9:7E:42
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LKedy4749R_6AN1HJ0RysUvJfkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:6400::/40
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:2480::/44
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
8e:4f:dd:d9:19:56:41:2e:83:bc:54:b4:8e:3e:10:67:ba:f0:
e2:d9:84:d3:4f:df:a6:f8:77:96:c2:63:13:c4:13:fb:93:d2:
93:97:54:92:4d:6a:cb:41:4e:19:57:5f:c1:e3:07:b6:fe:e0:
ea:0b:59:c5:cb:e3:82:bd:4a:29:dd:02:d1:44:9f:78:77:ae:
e8:3a:51:30:5f:ad:f1:88:17:3f:7e:fc:53:f3:c1:8a:df:0c:
2e:24:2a:c8:9d:ec:5f:1d:a7:ca:9a:11:8c:d9:a0:8c:7d:5e:
e7:00:18:6d:c5:39:76:66:b9:f4:c8:96:be:5e:6b:0a:76:dc:
34:7d:cb:1d:12:98:78:61:04:5a:ae:7a:64:d6:c4:cd:e8:2c:
04:da:35:c6:f2:6d:91:8a:62:fc:86:d9:3d:56:e4:b0:30:f6:
37:04:1a:9d:a5:a6:06:04:cb:65:28:d6:c6:d3:ec:1a:c6:fe:
a7:9d:fa:d9:f3:5d:b7:ff:a1:2f:02:1d:45:b0:07:a3:a7:79:
33:c7:8c:a0:cd:93:9a:16:cb:b9:04:d0:e5:4d:6c:20:2e:10:
b2:50:53:f1:ae:a4:87:e3:88:4d:f4:d6:1f:62:4a:04:af:ac:
fb:38:66:d2:3b:21:0d:a0:3b:87:72:f6:8b:57:b2:31:43:11:
18:45:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org