Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q6odEMB3NpGsoSAWHTH9hzhX20I.roa
File: Q6odEMB3NpGsoSAWHTH9hzhX20I.roa (raw, json)
Hash identifier: iFoE7Q23wbcou31UxdEBOsbcLUy5b4RAV7mGyrnUFcM=
Subject key identifier: 43:AA:1D:10:C0:77:36:91:AC:A1:20:16:1D:31:FD:87:38:57:DB:42
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AB496D8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q6odEMB3NpGsoSAWHTH9hzhX20I.roa
Signing time: Thu 09 Jun 2022 01:37:03 +0000
ROA not before: Thu 09 Jun 2022 01:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 2a06:a002::/32 maxlen: 48
2a06:a005:a10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448042712 (0x1ab496d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 9 01:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43aa1d10c0773691aca120161d31fd873857db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:9e:65:30:0e:42:10:f2:a7:72:99:94:73:
11:56:29:5d:8c:86:83:08:b3:df:1b:95:8c:f1:6f:
61:f6:7c:17:df:05:17:b9:e0:63:3f:13:9f:b8:78:
99:08:be:82:7c:bd:16:2f:79:fb:e3:ac:d2:b6:17:
aa:c0:71:fd:90:c3:3f:87:e2:af:a6:96:69:b1:9a:
b7:17:87:2b:90:ab:57:21:4e:8a:74:21:52:1f:03:
a8:35:3c:e1:f6:29:14:0c:aa:b9:8e:ab:db:ee:d8:
b3:41:d5:25:e9:0b:5f:9e:db:d5:72:d2:9a:66:a1:
b3:ac:1e:28:b8:19:6b:38:8f:85:28:ab:62:9a:ef:
08:87:c9:f8:36:b6:ca:8e:97:56:13:12:38:44:bb:
6c:e3:2a:03:cf:30:13:b7:c1:39:c4:71:a2:87:e3:
14:de:d4:a3:2e:5b:3d:d9:ac:93:cd:7b:14:fa:75:
c4:17:dc:12:89:e9:31:72:6f:fb:3c:f4:f7:eb:ee:
ff:59:9d:ee:af:2c:f8:a9:1b:c7:ff:b9:e0:ce:8f:
da:27:da:59:b3:be:61:81:65:ff:3d:30:43:02:99:
fb:98:29:87:58:e2:54:ed:aa:af:a9:16:c5:cc:c2:
6f:50:df:69:2c:6a:68:c7:a3:78:fd:59:e7:37:dc:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AA:1D:10:C0:77:36:91:AC:A1:20:16:1D:31:FD:87:38:57:DB:42
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q6odEMB3NpGsoSAWHTH9hzhX20I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
2a06:a005:a10::/44
Signature Algorithm: sha256WithRSAEncryption
7e:1f:7e:c6:6a:c3:bc:0b:0a:29:86:3e:61:48:7d:90:4c:62:
59:13:4a:88:52:0b:38:20:8b:83:14:66:bc:78:ce:1d:1c:db:
40:d0:28:6f:e4:60:27:d3:24:b8:70:de:92:ee:a8:d5:6f:ec:
9f:0f:d1:52:40:d1:b7:7d:9c:3d:a8:5c:a9:8a:b3:40:a2:69:
7a:79:04:49:9e:70:18:fc:d6:ee:db:c0:61:a3:a0:39:5e:37:
fc:0e:b3:ab:22:9c:ff:97:5f:c9:68:45:a2:c8:4f:a6:20:52:
fc:6d:24:3d:bc:c3:76:ec:22:4d:08:c0:08:16:05:83:48:f0:
ea:a8:78:b8:99:ed:07:c6:96:4a:d7:57:57:62:cb:ff:d1:d8:
b0:b0:d0:3a:15:b3:3a:2b:14:ba:5c:80:5f:58:9e:0b:3a:94:
31:2e:83:b9:4e:a8:97:5d:bf:10:1d:d1:27:c4:05:3e:15:99:
68:f8:99:22:64:db:d8:ae:83:3e:e5:f3:08:c6:86:a8:0e:15:
6e:85:80:18:ff:03:1b:09:f4:ad:1c:31:63:06:4e:06:25:e5:
d7:a3:31:b9:b1:36:42:b2:92:2f:44:6c:54:e7:b9:3f:e8:7e:
80:a7:b4:2f:85:fc:c2:03:47:c8:5d:10:41:37:2d:ba:38:1f:
37:86:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org