Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P4U452EP6VnVMJWQ8oXNIZQp71M.roa
File: P4U452EP6VnVMJWQ8oXNIZQp71M.roa (raw, json)
Hash identifier: QVYIL4IhaKDibx74kCdWr26WOnC8uxXXQYgjr9GLdXQ=
Subject key identifier: 3F:85:38:E7:61:0F:E9:59:D5:30:95:90:F2:85:CD:21:94:29:EF:53
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D001B05259259B92FEABF09357653BB3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P4U452EP6VnVMJWQ8oXNIZQp71M.roa
Signing time: Thu 01 Dec 2022 23:24:42 +0000
ROA not before: Thu 01 Dec 2022 23:24:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200975
IP address blocks: 2a0a:6040:f500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d0:01:b0:52:59:25:9b:92:fe:ab:f0:93:57:65:3b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 23:24:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f8538e7610fe959d5309590f285cd219429ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:a2:b8:cd:ce:42:f3:70:a7:88:1c:1e:ab:
73:ab:3f:27:dc:a6:bf:c3:29:f6:a4:9a:33:26:47:
95:ae:98:67:ca:ff:c7:22:71:2a:d6:ba:35:2c:6b:
25:aa:31:52:c5:74:65:09:6e:65:7b:be:bb:6f:26:
5a:bf:84:81:89:b8:98:05:3f:b1:1e:fe:40:d6:30:
3f:37:86:72:c7:bd:dc:e3:05:3b:b8:76:11:6d:37:
e1:c7:1a:5a:89:41:82:fe:a1:e3:fd:58:24:c3:a5:
df:52:e5:39:86:37:bd:18:64:47:2f:23:98:61:4e:
3f:e5:46:62:97:f1:12:7f:a8:d8:68:15:5a:24:97:
f5:32:3f:70:ee:16:04:ee:7c:58:e0:45:ca:07:9e:
90:7d:6d:7b:90:40:33:b8:9b:a1:c5:cc:40:a1:bf:
9e:12:ee:08:57:e9:1f:31:42:c5:ff:d6:35:b3:e0:
49:b7:55:e2:b5:19:71:05:aa:ee:53:46:17:e8:08:
bd:3f:80:d1:8d:86:fa:e1:a2:fb:64:b8:b7:7b:2a:
96:28:17:74:7d:57:bf:d0:e5:91:8e:8b:40:38:63:
ae:6f:bf:f1:71:db:1c:3a:de:fb:b3:fd:67:9c:c6:
b4:ea:36:e8:d7:2e:60:08:af:cd:ca:0f:60:0b:72:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:38:E7:61:0F:E9:59:D5:30:95:90:F2:85:CD:21:94:29:EF:53
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P4U452EP6VnVMJWQ8oXNIZQp71M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f500::/40
Signature Algorithm: sha256WithRSAEncryption
2c:bb:c4:db:ae:4e:7f:7e:a6:c5:f7:41:41:c0:73:71:72:8d:
29:53:c3:d8:7c:61:73:97:47:7e:c9:ff:bb:5a:ef:76:d5:c3:
54:6c:1f:73:72:06:8b:c4:d4:40:71:bc:11:e7:0e:8f:98:b1:
06:62:33:7f:0b:56:19:3e:18:12:9e:f5:d5:68:49:f7:58:18:
4e:0a:cb:f3:cc:73:9c:fc:e3:15:d9:ae:fc:45:ea:9a:c7:ac:
29:9f:43:9b:59:26:38:32:4e:9a:77:30:39:e7:b4:95:62:cd:
59:ba:2c:cb:c8:a3:10:f2:da:df:c0:08:80:4c:3a:04:f3:d3:
9b:4e:8a:3f:22:e9:13:e9:2d:ea:83:80:0f:f7:9a:fd:79:fe:
fe:bd:8e:26:d7:87:bf:c6:77:7a:05:9f:f2:73:2a:7d:e9:3d:
86:e0:0e:ac:0d:f8:b4:33:95:a2:ca:89:63:61:c7:61:07:ce:
dd:ac:2d:4c:c7:65:17:04:bf:62:d7:19:21:ee:67:ad:8c:31:
2c:95:67:bb:2f:8b:12:34:ff:9c:7d:39:c0:b2:fa:a6:ac:50:
c6:7e:3b:63:ac:65:a8:78:88:29:6d:e7:27:ad:ef:f3:69:6a:
fb:af:c1:9c:97:52:8b:8d:1f:c3:7e:a6:ef:36:ab:0d:f3:7c:
13:27:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org