Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lim0RTrVilRwurW8QGj56VW_N80.roa
File: Lim0RTrVilRwurW8QGj56VW_N80.roa (raw, json)
Hash identifier: 5AoJL+UwaxPos6Lm9kGJIZe7g78/1Kyv9VDEKv4ZGLk=
Subject key identifier: 2E:29:B4:45:3A:D5:8A:54:70:BA:B5:BC:40:68:F9:E9:55:BF:37:CD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E63606A8F28C5D68A50F4EE5A591C7C3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lim0RTrVilRwurW8QGj56VW_N80.roa
Signing time: Tue 06 Dec 2022 06:53:31 +0000
ROA not before: Tue 06 Dec 2022 06:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200993
IP address blocks: 2a06:a005:1d52::/48 maxlen: 48
2a06:a005:1160::/48 maxlen: 48
2a06:a005:855::/48 maxlen: 48
2a06:a005:1d53::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:36:06:a8:f2:8c:5d:68:a5:0f:4e:e5:a5:91:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 06:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e29b4453ad58a5470bab5bc4068f9e955bf37cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:ca:47:7e:73:6f:0a:e2:fc:b0:af:db:55:
e7:6b:a1:cb:54:48:fd:83:ea:a5:2a:a1:52:22:d8:
b4:67:c4:f2:80:d6:46:fa:27:10:f3:5d:e6:81:35:
14:8c:dd:b9:e5:08:7f:ba:a1:49:27:0d:3d:48:88:
6d:a8:62:41:13:ea:76:5e:68:52:53:59:7c:ee:10:
0b:0e:33:6b:c1:d1:0a:b9:ba:7e:88:c8:1c:e7:c2:
3a:69:a0:34:a4:94:35:74:91:a1:76:68:d5:a2:44:
68:ba:71:e7:3e:b1:78:b9:d0:30:3d:f9:51:7c:99:
b9:c9:d3:86:87:4e:05:4a:34:20:c3:15:19:b7:53:
69:4f:26:2e:c3:51:6a:9f:9a:7c:0c:b9:17:1d:d4:
62:6b:2f:c3:8d:4b:04:55:36:c9:47:34:02:90:87:
b9:55:11:b9:3a:2e:64:b6:4e:89:55:54:4e:3d:ec:
58:b1:85:90:89:6d:6a:23:a0:7c:d9:33:35:ca:ab:
85:f6:cf:72:1f:1b:c8:48:54:b4:6e:07:30:6a:50:
98:e2:3f:1d:4f:72:ba:d3:6f:97:ca:d2:65:96:14:
10:ba:9f:15:c8:09:61:bf:f5:92:19:21:16:5a:42:
22:69:51:ec:2e:4b:c0:17:ad:33:a9:1d:49:8b:91:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:B4:45:3A:D5:8A:54:70:BA:B5:BC:40:68:F9:E9:55:BF:37:CD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lim0RTrVilRwurW8QGj56VW_N80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:855::/48
2a06:a005:1160::/48
2a06:a005:1d52::/47
Signature Algorithm: sha256WithRSAEncryption
07:bb:8f:69:72:c3:fd:21:ff:12:22:c3:5d:86:e2:d0:4e:4e:
db:0a:a6:e6:11:49:c4:92:49:42:5c:d7:4c:5c:20:76:ec:b2:
aa:cd:0d:eb:50:1a:f7:86:15:ee:fc:ab:80:a9:54:ff:f7:e5:
59:38:b9:22:a7:19:5a:91:19:17:78:18:45:10:8e:bb:8e:8f:
59:c8:b4:0f:31:d1:0a:33:0d:11:5f:9d:f9:b9:de:ce:96:b1:
27:26:26:e8:48:46:5d:a7:11:b6:6b:d1:0c:50:3b:de:72:44:
7a:de:8e:b5:5c:b3:27:b5:80:20:98:1c:1a:22:33:8f:32:b0:
05:44:78:e5:5f:36:3d:ab:10:21:e0:91:d5:4b:1a:a8:3d:18:
1e:0f:1d:8b:e2:c8:dd:ae:04:50:17:db:17:ad:9b:aa:e9:ab:
41:1d:e5:34:88:c9:df:4b:bd:2e:5d:9a:45:cf:69:e3:8a:60:
d4:2e:55:a2:47:45:84:27:11:e2:8f:0b:31:c2:1c:cb:b6:41:
e3:8c:cd:95:9c:2b:c7:74:33:75:8b:75:b0:70:10:ad:59:6e:
c0:14:86:43:49:07:7e:cd:67:04:b3:18:ba:27:56:9f:ae:da:
c5:81:26:0e:4e:fb:2f:c0:e7:c0:e0:c8:67:95:8f:ea:52:1d:
76:fe:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org