Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXuJeTCKAr9Q90hMlLnvTHowdl0.roa
File: PXuJeTCKAr9Q90hMlLnvTHowdl0.roa (raw, json)
Hash identifier: c9+wgG4T2Kfi/VXxikaw98cgZP2ABO9EIBgvejzZs3E=
Subject key identifier: 3D:7B:89:79:30:8A:02:BF:50:F7:48:4C:94:B9:EF:4C:7A:30:76:5D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C874177DC4A093693DD7DE89781DBA1B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXuJeTCKAr9Q90hMlLnvTHowdl0.roa
Signing time: Wed 30 Nov 2022 12:12:42 +0000
ROA not before: Wed 30 Nov 2022 12:12:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:74:17:7d:c4:a0:93:69:3d:d7:de:89:78:1d:ba:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 12:12:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d7b8979308a02bf50f7484c94b9ef4c7a30765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:dc:70:c4:e9:d5:64:87:da:a3:73:67:97:
6b:4c:0d:27:7c:6f:28:a0:e7:bf:48:b9:19:51:24:
e2:b4:9a:dd:de:55:d0:26:09:fc:6f:81:5d:36:f9:
13:e4:13:2c:4b:ee:72:f9:18:c1:2a:9e:c6:4b:9a:
35:bd:d2:10:a3:8b:f8:2c:3f:6a:87:3e:3f:e4:16:
ca:4f:c7:b5:53:40:60:32:6e:d7:58:0b:27:9e:4e:
a7:4a:a6:ea:b3:b0:2f:4b:f9:bd:e6:ed:7e:9f:25:
d7:4a:42:49:92:7e:5c:91:54:ef:22:b2:fb:ac:2e:
a1:c4:09:76:96:63:b1:34:4d:b1:9d:fb:44:30:a4:
cd:9f:3e:28:48:8d:4a:58:7f:16:cd:e2:3d:50:c0:
8f:12:48:24:4b:53:bb:b2:e0:14:23:c7:b8:04:3e:
1f:21:4b:14:d4:25:7e:00:3a:25:d0:ca:f7:88:82:
04:69:f9:64:c5:b6:47:74:91:31:0b:67:48:f4:e9:
55:d8:c3:9d:4a:49:f7:22:44:d4:66:36:99:03:a4:
96:49:1c:1a:c8:f4:6b:b0:2c:9c:92:c8:23:46:ae:
b4:75:f3:3d:84:9a:0d:4e:4b:dd:ff:f1:23:97:d0:
92:8e:32:b9:95:b3:96:af:31:25:ee:c2:f0:cf:63:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:89:79:30:8A:02:BF:50:F7:48:4C:94:B9:EF:4C:7A:30:76:5D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXuJeTCKAr9Q90hMlLnvTHowdl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
7f:4e:f1:92:da:15:b4:81:ea:23:50:19:38:62:08:a8:6e:45:
31:b6:3c:71:b4:4e:9b:64:0f:91:84:dc:b6:df:95:59:50:12:
cc:43:74:84:5e:0d:d3:85:52:5e:07:55:a6:f1:e0:4a:dc:93:
f1:e5:52:4d:81:38:01:3c:a3:5b:da:d4:ee:2e:a1:f8:da:60:
8c:bf:f9:36:d2:ef:c0:5a:f2:4a:8a:d7:25:34:31:19:79:b0:
ca:fe:c3:16:9d:95:21:56:0e:b3:d3:19:1b:32:e2:5e:ad:18:
4c:a1:11:6a:5c:ad:14:b6:c5:b5:9d:50:11:a8:b6:69:c6:2b:
37:54:87:c4:e8:fe:89:90:43:67:f2:43:78:63:c4:13:d9:66:
26:57:0c:6c:6c:92:5e:7d:14:4c:8d:c1:21:0c:3f:5b:9d:29:
1b:d3:ef:8d:95:d4:44:52:c2:66:b4:e8:c1:15:64:30:41:86:
ff:55:86:a0:e6:a5:eb:12:f2:57:b9:6b:d3:04:04:4c:97:50:
70:27:e1:bd:95:cc:98:e8:59:87:1a:c7:ff:7e:e0:43:d0:d3:
9c:dd:5e:4c:44:d7:6c:a3:b9:a1:10:e8:ae:41:ef:22:45:eb:
af:d9:52:c6:51:56:7b:a6:e8:40:b1:83:c0:06:96:29:f4:ce:
ac:9b:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org