Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NemSendG6ZDcH7wdLjmMinQ--mQ.roa
File: NemSendG6ZDcH7wdLjmMinQ--mQ.roa (raw, json)
Hash identifier: g5uGCiNRmgqxuk+HB0JHx+Zq76Y4yBALUuwoSYczdJU=
Subject key identifier: 35:E9:92:7A:77:46:E9:90:DC:1F:BC:1D:2E:39:8C:8A:74:3E:FA:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018323C519EC583904D6C3CAE57F1EDEE780
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NemSendG6ZDcH7wdLjmMinQ--mQ.roa
Signing time: Fri 09 Sep 2022 19:41:03 +0000
ROA not before: Fri 09 Sep 2022 19:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211144
IP address blocks: 2a06:a005:5b4::/48 maxlen: 48
2a06:a005:431::/48 maxlen: 48
2a06:a005:127a::/48 maxlen: 48
2a06:a005:a07::/48 maxlen: 48
2a06:a005:440::/44 maxlen: 48
2a06:a005:9f0::/44 maxlen: 48
2a06:a005:18::/48 maxlen: 48
2a06:a005:2d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:c5:19:ec:58:39:04:d6:c3:ca:e5:7f:1e:de:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 9 19:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35e9927a7746e990dc1fbc1d2e398c8a743efa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:17:61:db:74:33:eb:a5:2e:5e:3e:9f:14:
e1:7d:47:a5:e2:c5:e0:81:cf:4b:d4:6b:03:ba:24:
75:ec:b9:2f:2a:88:c3:40:ba:04:1a:fc:72:ad:c9:
c1:0c:11:73:0f:11:ac:55:cc:5a:06:23:d9:d5:7d:
7c:f5:fa:7f:9e:f7:c7:fb:60:40:d2:48:69:49:ba:
5c:6a:7d:c3:78:5e:bd:42:f3:5d:7f:9d:54:82:02:
4b:75:75:98:3f:a8:05:89:04:21:ec:fe:52:34:f1:
7a:96:5c:c2:67:16:1a:9b:77:8e:3b:83:50:82:05:
00:a0:3c:f2:57:bf:a7:a5:6a:33:b9:8e:f1:fb:ec:
41:38:28:a5:a8:2b:cb:f0:48:7a:8b:ad:e2:b4:c5:
ba:18:b3:0e:cd:c8:1a:ec:5c:a9:40:7b:46:a7:0b:
c6:12:df:c5:7c:18:94:58:aa:0c:9c:3b:c9:fc:cc:
b3:38:88:3d:9b:74:bb:5a:bb:e6:45:ae:4f:82:21:
52:ac:02:44:ca:b2:23:e9:09:e8:cf:46:73:93:6e:
02:74:ff:76:d6:97:c0:9b:85:ec:ac:68:2a:1a:96:
bd:bc:5f:c0:c9:d3:1a:db:2e:ec:7b:f6:44:25:54:
ef:fe:b7:90:5b:67:8a:28:ea:29:46:13:17:26:65:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:92:7A:77:46:E9:90:DC:1F:BC:1D:2E:39:8C:8A:74:3E:FA:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NemSendG6ZDcH7wdLjmMinQ--mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:2d0::/48
2a06:a005:431::/48
2a06:a005:440::/44
2a06:a005:5b4::/48
2a06:a005:9f0::/44
2a06:a005:a07::/48
2a06:a005:127a::/48
Signature Algorithm: sha256WithRSAEncryption
48:83:be:8d:d1:29:2b:d8:35:83:6d:e4:f6:f4:7d:f2:61:41:
4b:89:cd:cd:2f:b1:ed:9e:f6:32:23:b4:aa:f9:78:13:7d:10:
54:de:c9:1e:d2:1d:18:86:d0:92:7f:eb:80:47:a0:59:83:bf:
69:e6:e4:fa:8c:b2:d3:9f:f9:41:b7:d6:26:09:59:ec:51:5c:
c7:b9:07:2f:01:79:35:9a:4b:ef:1a:aa:be:c5:31:1f:dd:f4:
1f:c7:28:5f:ab:d3:f5:b1:13:bd:cb:62:ac:49:e7:e1:7b:0d:
c1:7a:8e:ce:a2:b0:41:c5:e7:09:02:44:6b:35:53:a5:9f:22:
92:a3:2d:a9:b9:ba:6c:de:52:55:7e:00:e2:12:b0:1c:d6:fc:
d2:b0:72:20:fe:98:53:6a:45:24:fb:fd:91:68:29:c6:dc:b6:
93:26:55:6a:7e:5d:39:b6:70:3b:57:c7:f9:d7:55:0e:a9:33:
43:53:c2:8a:95:3f:7b:a9:ea:c1:90:8c:39:cb:0c:b4:99:fb:
79:24:b5:65:2d:bf:29:fd:03:96:13:0c:45:b5:8a:81:0a:6c:
90:1d:b9:3b:5c:7c:47:4e:25:cf:02:07:ee:88:a1:69:78:3a:
f8:6d:d7:8b:cd:5c:dc:33:bb:21:eb:a9:e2:94:19:74:6a:82:
f5:6e:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org