Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MuozpAZ21hZRExmYuaBAjgXD2KI.roa
File: MuozpAZ21hZRExmYuaBAjgXD2KI.roa (raw, json)
Hash identifier: joxA88L5xJK4XHb5S9i9GvLo3Aly8ZXraMU4wi5UmDw=
Subject key identifier: 32:EA:33:A4:06:76:D6:16:51:13:19:98:B9:A0:40:8E:05:C3:D8:A2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19E55232
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MuozpAZ21hZRExmYuaBAjgXD2KI.roa
Signing time: Wed 18 May 2022 13:25:17 +0000
ROA not before: Wed 18 May 2022 13:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205432
IP address blocks: 2a06:a005:5e2::/48 maxlen: 48
2a06:a005:85c::/47 maxlen: 48
2a06:a005:9d0::/44 maxlen: 48
2a06:a005:680::/44 maxlen: 48
2a06:a005:6a0::/44 maxlen: 48
2a06:a005:690::/44 maxlen: 48
2a06:a005:1a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434459186 (0x19e55232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 18 13:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ea33a40676d61651131998b9a0408e05c3d8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:4a:c2:8d:5d:e5:61:11:4e:41:3b:8c:0b:
54:82:7a:d6:54:94:e6:66:39:21:33:03:f5:59:a8:
b5:4a:55:38:29:f5:1e:c4:bf:b1:93:eb:43:87:c5:
1e:68:c9:7c:fc:c2:07:41:20:cd:5f:f3:ea:b3:c6:
3c:05:92:e7:d3:18:27:76:aa:18:cb:ee:90:ff:bd:
57:4a:4a:18:32:0a:1f:6c:87:d3:57:3c:68:e9:02:
b7:94:9e:58:1c:d8:e4:a5:dd:7d:dc:42:6c:e0:49:
36:17:5d:3f:35:e5:42:8f:66:9f:9b:57:67:2d:c4:
78:25:8b:42:83:54:50:af:1c:17:82:07:3e:56:5c:
49:7e:44:da:b2:d4:b4:be:03:09:47:2f:56:f4:1e:
f0:75:eb:be:5c:e9:8e:06:94:0f:62:9a:85:a9:bb:
34:d1:a5:66:e3:73:93:a6:26:6a:93:fb:e2:d3:c0:
3b:44:d6:71:2d:60:8f:cd:ee:ed:0c:c3:00:23:ae:
14:3e:7f:a4:58:d9:30:e9:33:03:09:06:57:d8:b2:
2c:d0:24:01:9d:0b:bb:0d:36:2e:ea:1f:23:0d:2c:
41:0a:68:0d:cc:09:c5:55:97:36:82:84:67:3b:87:
f7:b5:e7:ee:95:2a:ff:04:c0:61:8b:46:1f:58:4d:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:33:A4:06:76:D6:16:51:13:19:98:B9:A0:40:8E:05:C3:D8:A2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MuozpAZ21hZRExmYuaBAjgXD2KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a::/47
2a06:a005:5e2::/48
2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff
2a06:a005:85c::/47
2a06:a005:9d0::/44
Signature Algorithm: sha256WithRSAEncryption
13:7d:3a:8f:3a:55:89:06:1d:4b:41:43:f4:74:6d:a5:a9:ad:
0f:42:90:cf:97:73:98:da:cb:f2:b6:af:4f:0a:86:cf:a8:55:
09:47:ec:4f:af:bf:1a:dd:e5:37:a9:99:fa:f4:ab:93:16:58:
52:10:82:e5:70:c5:36:ab:f8:c4:55:01:5d:97:6a:a9:91:15:
3e:1d:07:10:86:93:cb:66:29:16:3f:72:cb:b6:c1:b4:cc:49:
9d:b0:9d:4e:fb:f1:ff:3d:79:69:05:d2:82:83:70:1f:83:56:
c3:70:73:60:a0:0c:5b:2d:5b:09:09:b3:be:7f:81:81:95:cc:
e8:71:50:5a:04:cc:22:ec:3c:a5:6f:43:ca:13:2e:62:07:ed:
e7:17:5e:29:16:41:75:8f:76:c7:19:c5:e4:75:72:ee:69:01:
5e:e8:70:ee:c0:64:f1:fd:27:4e:56:3b:bb:3e:f6:11:73:65:
e4:bc:0d:b5:f0:99:e9:e2:83:00:71:c6:ee:cb:f6:f8:7b:bc:
a9:73:1a:92:ab:53:4f:09:0e:9b:33:3b:65:96:0f:d7:f6:44:
40:a6:7c:bf:06:1c:30:9e:4b:12:b3:f3:4c:ec:f4:94:d9:67:
af:ab:5f:a7:ac:5c:79:d4:40:79:64:46:9e:b2:89:74:13:53:
87:ca:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:17 2023 by rpki-client on console-ams.rpki-client.org