Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OpzxM2IXDpJ5b9IB7DyXk5FH0ms.roa
File: OpzxM2IXDpJ5b9IB7DyXk5FH0ms.roa (raw, json)
Hash identifier: cbSHlBld6ebnZYHlDgLC8vfIQo/SuHqcR6rMhj3rbUc=
Subject key identifier: 3A:9C:F1:33:62:17:0E:92:79:6F:D2:01:EC:3C:97:93:91:47:D2:6B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845767653E0FC13CBA6AAF426EC78B3448
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OpzxM2IXDpJ5b9IB7DyXk5FH0ms.roa
Signing time: Tue 08 Nov 2022 13:21:44 +0000
ROA not before: Tue 08 Nov 2022 13:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201517
IP address blocks: 2a0a:6040:fd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:67:65:3e:0f:c1:3c:ba:6a:af:42:6e:c7:8b:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 8 13:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a9cf13362170e92796fd201ec3c97939147d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:ab:b3:89:bf:3a:11:58:e4:25:16:83:15:
fd:7f:4e:88:61:fc:9b:04:f2:22:bd:4b:5f:f9:8b:
09:be:aa:90:93:da:82:2e:11:c7:f0:a5:af:b5:4d:
65:c5:0c:82:e1:6a:ec:96:a3:1e:13:a2:bb:12:6e:
7f:11:b6:f1:69:84:10:22:6a:da:17:4d:7e:64:81:
1c:eb:0d:40:83:b5:d8:b6:d9:da:91:f7:6d:c5:f6:
b6:c2:cf:e7:80:f8:5d:90:dc:5c:9b:7f:2a:49:57:
17:26:42:18:8b:ea:54:c5:f1:15:f5:8e:34:ef:41:
72:f4:06:14:a4:26:5e:ef:b2:a5:7d:50:86:91:06:
fd:0c:43:d9:43:55:4d:5c:34:2e:45:4b:75:35:bf:
52:64:0d:a2:21:4d:c3:c0:08:11:f3:66:22:fd:f6:
7d:b3:a3:f3:33:ea:3b:d6:88:92:e3:01:98:ef:3a:
b6:fd:e3:25:2e:ef:c5:da:b1:b8:31:02:ff:42:a7:
6a:22:55:db:bc:d5:12:18:22:a2:ab:ac:6c:dd:bc:
41:e4:a4:c7:a7:18:5a:38:c5:7a:d2:3b:ba:3c:b2:
98:7b:66:02:7f:31:93:16:dd:3a:54:68:de:2c:c8:
cd:64:3e:93:1f:cb:b2:a4:94:8f:e5:a1:25:b1:fa:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:F1:33:62:17:0E:92:79:6F:D2:01:EC:3C:97:93:91:47:D2:6B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OpzxM2IXDpJ5b9IB7DyXk5FH0ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
73:c5:e3:62:c4:01:9a:a6:b6:7c:b4:d0:8f:93:87:42:25:f8:
75:de:e5:9d:92:2b:13:28:2e:ae:76:55:72:97:65:9d:75:30:
0e:fc:23:2e:e6:4a:02:0f:77:25:74:a1:27:37:0a:80:22:46:
70:83:b4:45:73:f4:07:89:04:4b:c0:88:84:78:8b:74:a8:67:
e2:db:dc:d2:0c:6e:79:0d:5a:cd:24:74:bd:df:97:8e:14:40:
db:0e:8a:5e:54:5c:32:de:af:37:0c:80:83:33:e0:86:47:7f:
72:27:be:2c:5b:90:dc:50:d2:20:43:95:42:c3:14:ee:a2:ef:
1d:7c:6e:2c:93:71:a5:49:19:d3:ea:50:93:66:e4:11:04:77:
75:3f:61:d4:16:11:93:74:48:34:cf:b8:d5:fa:02:81:63:fd:
4c:ef:34:43:4f:42:30:35:7b:87:76:bb:c0:0d:65:a8:89:a9:
05:3b:a6:59:74:6c:48:a4:5e:f1:93:83:2b:2e:73:07:87:0e:
a3:82:96:ab:70:51:13:7d:21:e5:dc:15:5b:28:2b:50:a3:58:
e8:c5:ea:d4:f3:7e:27:ad:fc:6c:a7:e8:fc:e3:6d:86:da:19:
b9:47:55:2e:7f:92:8a:c8:8c:9d:75:26:45:7e:0e:0d:48:ee:
1e:1d:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org