Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MQkNXEkSj-K17lFJmZ0kXzRu7GI.roa
File: MQkNXEkSj-K17lFJmZ0kXzRu7GI.roa (raw, json)
Hash identifier: 2dHf8qILOD3yv9yz1goSd5y5AdnufiHQtP1PWFz/Kgw=
Subject key identifier: 31:09:0D:5C:49:12:8F:E2:B5:EE:51:49:99:9D:24:5F:34:6E:EC:62
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181FCE192DE6CEECB8F15FD1631E7A269D8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MQkNXEkSj-K17lFJmZ0kXzRu7GI.roa
Signing time: Thu 14 Jul 2022 13:24:10 +0000
ROA not before: Thu 14 Jul 2022 13:24:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203967
IP address blocks: 2a06:a005:1270::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:e1:92:de:6c:ee:cb:8f:15:fd:16:31:e7:a2:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 14 13:24:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31090d5c49128fe2b5ee5149999d245f346eec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:a3:91:f6:90:5a:24:d8:40:69:34:6b:6f:
95:82:f0:95:f2:67:73:b7:ba:cf:55:75:71:3e:fc:
92:91:36:cb:8a:d8:9e:e6:3b:84:0c:fa:d8:b5:97:
16:c2:dc:8d:01:c6:96:52:89:91:64:64:3f:e2:5d:
df:2f:9b:ba:15:9d:c0:12:8b:69:ad:7b:8c:27:84:
09:58:29:ce:52:98:f9:21:03:c3:de:a0:ac:2c:7f:
ec:52:5a:49:40:87:a4:92:5c:a2:cc:a3:47:40:21:
ab:dd:95:07:31:5b:f6:22:a4:0a:5f:ee:08:40:c4:
57:89:b5:2b:ab:2c:b9:04:13:74:88:99:34:d9:6f:
40:98:7b:0d:ff:32:9c:50:1a:8a:c7:c6:e7:0a:08:
a4:a6:95:61:97:9e:0f:90:19:ef:46:f2:a6:36:90:
28:20:b5:37:23:e3:e5:dd:44:e2:18:55:12:5b:0a:
8d:5a:16:fb:d1:67:11:8b:84:f5:e1:c3:10:d8:7a:
89:81:44:c9:30:92:f8:d8:51:9a:1b:86:db:52:76:
87:cc:f9:cd:f6:00:64:4b:85:8e:bf:71:aa:f1:c4:
83:de:18:3b:0f:77:f3:17:e3:aa:a5:80:a0:88:01:
4a:86:2b:4c:26:f7:c7:82:5b:0f:9f:50:b8:bf:27:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:0D:5C:49:12:8F:E2:B5:EE:51:49:99:9D:24:5F:34:6E:EC:62
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MQkNXEkSj-K17lFJmZ0kXzRu7GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1270::/46
Signature Algorithm: sha256WithRSAEncryption
0c:21:3f:97:f2:b0:91:cc:fd:72:51:55:d6:94:54:90:e1:56:
9f:f4:f6:ff:d7:8f:1a:b3:1b:29:b5:a0:21:fa:50:6f:de:f2:
4e:06:b4:b5:71:6c:f9:99:c2:b9:22:88:45:9c:04:52:d2:d3:
56:ec:33:e7:6c:be:5d:8f:86:4e:24:c5:58:16:e0:0c:3e:12:
80:21:bd:d5:2c:03:6e:11:14:61:d7:e0:93:f0:08:98:11:c1:
f4:ad:5a:af:24:86:f4:18:99:61:fe:a8:d0:7c:88:bd:64:82:
d8:1f:11:a2:5f:1c:00:75:7c:84:14:43:6a:9e:da:0f:73:22:
1a:75:9f:55:c1:a4:6e:27:ce:e6:b4:62:bb:41:73:0d:07:62:
92:be:f3:bb:be:0a:c4:7e:c4:bc:04:90:e8:ba:67:54:e1:b8:
36:22:56:ba:06:64:9a:ad:ae:a2:a3:1f:23:58:dc:4c:30:75:
03:d3:bc:54:56:e3:53:85:98:c3:d1:c8:71:0f:cb:8b:59:25:
cd:3f:1c:97:f7:06:78:26:b9:2f:4f:f1:4f:c8:1e:58:53:f7:
90:bd:aa:69:35:37:b6:da:88:1d:3a:31:bd:53:09:34:46:14:
54:73:94:fb:af:3e:50:20:9f:ca:5f:3c:a6:78:9a:46:1c:31:
8d:68:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org