Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OJmwCi_6PBn7VYzYWYAC2DaCLik.roa
File: OJmwCi_6PBn7VYzYWYAC2DaCLik.roa (raw, json)
Hash identifier: cTX2fQBtXQ/E63VQo7nYFAz8sqRG8MU1p79MyHSZtsY=
Subject key identifier: 38:99:B0:0A:2F:FA:3C:19:FB:55:8C:D8:59:80:02:D8:36:82:2E:29
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CFD0D7ED0CADB90BD0D9E4D8C842C5F2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OJmwCi_6PBn7VYzYWYAC2DaCLik.roa
Signing time: Thu 01 Dec 2022 22:31:21 +0000
ROA not before: Thu 01 Dec 2022 22:31:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:a005:487::/48 maxlen: 48
2a06:a005:5af::/48 maxlen: 48
2a06:a005:22e0::/44 maxlen: 48
2a06:a005:22d0::/44 maxlen: 48
2a06:a005:1d40::/44 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
2a05:dfc7:8800::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:d0:d7:ed:0c:ad:b9:0b:d0:d9:e4:d8:c8:42:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 22:31:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3899b00a2ffa3c19fb558cd8598002d836822e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:d2:6e:ed:65:b7:1d:d6:4a:13:db:d1:ed:
f6:0f:f6:58:5d:ec:aa:28:47:bd:f4:ab:a8:00:29:
5e:e9:14:ab:54:d5:da:61:03:2e:9f:79:ae:d5:1e:
69:88:b2:52:13:12:82:66:28:8c:ba:33:3a:66:3f:
4a:67:5a:96:c5:58:de:14:e3:fa:36:d7:11:3d:59:
61:91:28:86:83:80:40:7a:09:87:67:fa:88:91:11:
be:89:ab:42:99:66:f0:f0:93:85:5c:67:36:3b:d1:
60:3d:a5:2d:96:a5:67:5a:cf:ed:3c:8e:44:94:66:
25:e3:3b:2b:69:69:66:d6:49:3c:fa:fd:ad:d8:da:
64:11:d3:51:00:fb:2b:d0:11:3c:3e:e0:ce:9a:0e:
49:8c:5c:63:60:60:ac:36:5c:04:49:6e:12:d4:33:
89:70:71:0e:fd:2a:20:bf:27:2b:a5:f4:4a:e4:73:
e3:b7:dd:c9:f0:54:5b:9a:dc:96:8a:9f:8d:a0:bd:
90:1a:c5:b3:7c:38:4b:4f:01:e2:29:a8:90:3a:31:
c5:dd:d0:98:7e:d7:29:da:64:89:54:4f:c0:45:e6:
0d:a2:0f:cc:c5:7b:ee:50:aa:ac:4a:1f:76:d2:95:
b0:fb:7b:42:a0:d8:14:1f:a2:1a:6f:1c:55:86:a4:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:B0:0A:2F:FA:3C:19:FB:55:8C:D8:59:80:02:D8:36:82:2E:29
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OJmwCi_6PBn7VYzYWYAC2DaCLik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a05:dfc7:8800::/39
2a06:a005:487::/48
2a06:a005:5af::/48
2a06:a005:1d40::/44
2a06:a005:22d0::-2a06:a005:22ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:87:ba:32:af:38:99:e7:d6:ed:ba:28:b9:1d:36:30:ba:34:
47:6e:a8:68:ed:29:e1:96:99:d8:82:3a:eb:58:5e:ba:a2:54:
0c:1b:7e:16:da:ad:ab:66:e2:2e:85:b6:a2:d1:04:7a:34:25:
e4:18:e8:5d:50:88:05:4c:86:76:13:ab:a3:95:56:8a:bd:f8:
79:02:e7:50:94:bb:98:af:47:8a:ed:7d:f8:40:5b:36:cd:15:
11:69:5a:a8:c0:12:12:e3:0f:0a:47:be:4d:98:81:a6:be:4c:
dd:f4:27:7a:fd:e9:14:46:a9:32:01:de:e8:d7:cd:0b:5e:34:
0f:b7:37:01:d4:c7:d7:c3:09:77:f6:a2:c3:8e:ef:8a:ed:fc:
a2:0d:d0:71:73:87:35:78:5e:40:80:e5:cf:1f:38:b0:71:26:
16:37:51:f6:43:d8:92:cf:42:5b:fe:38:fa:42:c1:c0:b9:b1:
d4:83:39:72:8c:57:95:de:c0:37:ec:7e:55:f9:c4:c9:60:f5:
4c:a0:a1:ef:4a:dd:be:37:46:41:89:12:b2:15:98:7b:e2:c8:
3a:37:bb:fe:25:af:bf:1c:c8:e5:26:21:da:8a:76:26:74:d6:
a1:a5:19:f8:35:4f:60:62:2d:cd:ef:94:9a:21:21:6e:55:9f:
62:89:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org