Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK8RZ6774ckHfWTdBEeu50gNdZY.roa
File: PK8RZ6774ckHfWTdBEeu50gNdZY.roa (raw, json)
Hash identifier: yuRI1oDUsJTyAhZp8EgYtoFGmKZ4NP+1nqRqeA22Vic=
Subject key identifier: 3C:AF:11:67:AE:FB:E1:C9:07:7D:64:DD:04:47:AE:E7:48:0D:75:96
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01820511371C6ADE1AB643767172AC7E09A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK8RZ6774ckHfWTdBEeu50gNdZY.roa
Signing time: Sat 16 Jul 2022 03:33:10 +0000
ROA not before: Sat 16 Jul 2022 03:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395332
IP address blocks: 2a06:a005:5f9::/48 maxlen: 48
2a06:a005:12c0::/44 maxlen: 48
2a06:a005:12b0::/44 maxlen: 48
2a06:a005:c80::/44 maxlen: 48
2a06:a005:12d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:11:37:1c:6a:de:1a:b6:43:76:71:72:ac:7e:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 16 03:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3caf1167aefbe1c9077d64dd0447aee7480d7596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:2e:e3:ae:01:18:45:63:a2:47:3a:d5:b8:
30:62:f9:8e:f9:b3:f2:d2:88:13:01:0a:eb:f7:3d:
5b:34:1d:88:12:77:22:77:5b:d3:04:bf:04:75:24:
cb:a6:39:09:16:43:92:73:d6:dd:1a:d6:1b:b0:75:
37:7b:ff:4c:b9:8f:7d:15:da:9f:ad:a0:5a:2f:9e:
a5:7b:08:2f:dc:d2:b1:21:fd:7a:99:17:5b:93:4c:
57:ca:7c:8d:43:d4:e8:e3:0f:31:f2:e2:3a:3d:8c:
90:0f:bc:68:93:66:4d:df:91:72:14:20:5c:84:3c:
40:37:82:dd:0b:17:da:66:09:d2:1a:a8:3b:09:93:
f4:d7:c6:af:c1:08:cf:c4:c1:74:53:ce:ce:12:34:
75:79:ae:d2:1c:49:1d:5e:8b:4e:de:25:38:f4:dc:
fd:c3:b7:ac:72:9b:5c:22:aa:c6:d8:9c:b3:4a:9a:
60:f7:7d:14:0a:2e:94:c6:05:7a:78:d8:c7:d2:e9:
d2:65:d3:84:c3:7b:99:db:e6:da:32:a5:56:ce:69:
6a:4e:e4:ee:78:be:ab:2b:e5:98:4d:c1:44:3c:22:
32:eb:34:53:9f:da:6e:ed:01:90:34:a9:fa:44:a0:
76:d0:d8:bc:45:63:b4:49:f7:96:dc:f9:fa:1b:b9:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:11:67:AE:FB:E1:C9:07:7D:64:DD:04:47:AE:E7:48:0D:75:96
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK8RZ6774ckHfWTdBEeu50gNdZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f9::/48
2a06:a005:c80::/44
2a06:a005:12b0::-2a06:a005:12df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:1d:54:56:91:f1:c3:e6:b0:03:65:e0:e8:fa:da:9f:76:bc:
53:84:d7:03:54:2b:93:e5:be:70:8b:31:24:82:1c:2a:66:74:
cd:bb:8f:ec:35:f8:c7:ec:0e:b1:3c:9e:47:9b:7b:1b:35:28:
2d:ad:19:a1:aa:10:3d:07:d4:1d:93:25:6f:8f:9f:ef:01:d1:
3f:bf:71:95:0e:16:50:04:78:33:08:9f:a4:94:0e:79:bc:30:
10:63:46:26:5e:e1:c1:24:97:08:08:f9:c8:0e:6b:fa:2e:d7:
13:03:3a:a1:c1:45:a9:a5:ed:1f:23:f0:b1:75:25:4d:16:a0:
f6:1d:69:5b:7c:9e:d4:ea:80:b5:74:e8:e8:72:9f:07:38:09:
66:94:95:b1:89:6f:80:de:6b:f4:87:e5:7e:fa:65:95:2e:74:
50:50:d7:4f:9b:94:51:11:80:18:02:fd:66:2e:af:92:d5:06:
b0:6f:7b:1f:cb:36:b4:ed:26:a2:87:18:c0:ff:a7:b4:45:1c:
12:95:88:69:02:ca:46:c1:25:5d:0f:ad:47:c9:df:f8:fb:ae:
d2:bc:09:70:1b:3d:b9:8c:87:9a:d5:e0:77:d0:72:b8:06:c3:
ca:e4:43:11:ec:15:95:fc:8c:bd:69:21:12:ea:0d:1c:82:b6:
e5:4e:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org