Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Qlo3U31cuQOgVALs-lzhQGmbnBc.roa
File: Qlo3U31cuQOgVALs-lzhQGmbnBc.roa (raw, json)
Hash identifier: gMTq3YCnpLWYbdDSWO6pP//XgvBZykgQ7YYYVESHk78=
Subject key identifier: 42:5A:37:53:7D:5C:B9:03:A0:54:02:EC:FA:5C:E1:40:69:9B:9C:17
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18CCFF97
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Qlo3U31cuQOgVALs-lzhQGmbnBc.roa
Signing time: Wed 27 Apr 2022 07:28:36 +0000
ROA not before: Wed 27 Apr 2022 07:28:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a06:a005:520::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416087959 (0x18ccff97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 27 07:28:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=425a37537d5cb903a05402ecfa5ce140699b9c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:9c:1c:63:d1:bb:6c:b1:d3:35:59:23:d5:
73:cb:5e:bd:26:94:b4:a4:35:bf:d5:8b:04:76:26:
a0:c4:93:c2:c1:50:9e:88:cb:c2:27:4b:5f:93:68:
cc:8c:bc:c0:61:04:c1:a6:30:a7:23:6f:3d:0f:6e:
87:25:5a:6e:87:ae:95:2f:73:55:29:b8:e6:40:4e:
b2:a5:a5:8e:b6:26:07:14:a3:57:c1:ee:47:37:13:
db:39:ac:1e:44:64:14:67:08:ff:7f:78:d1:65:08:
68:93:81:f2:96:52:db:f3:a1:fc:e0:32:7a:3d:fe:
75:d8:e0:94:95:84:0e:5f:1a:43:72:dd:e7:8f:10:
aa:a4:43:3b:04:e6:f3:4b:e4:75:22:58:5d:d1:45:
e5:08:18:b5:bf:d3:86:84:55:62:9e:36:9b:24:b1:
e1:61:22:64:fd:b8:f6:ec:de:9e:4b:9d:99:c3:96:
7c:bc:c3:29:66:ef:e1:d7:f5:31:4a:20:ee:eb:6a:
4d:71:16:49:9a:f3:ff:7b:10:d6:d0:2a:75:b9:41:
47:97:d9:38:14:8c:23:7a:a4:cd:51:23:44:db:6e:
a4:91:98:fd:28:32:e5:8d:79:2e:4b:ac:c8:9b:77:
5a:a7:6a:83:83:f7:9d:c4:2d:6f:8d:79:e6:cf:6f:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:37:53:7D:5C:B9:03:A0:54:02:EC:FA:5C:E1:40:69:9B:9C:17
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Qlo3U31cuQOgVALs-lzhQGmbnBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
Signature Algorithm: sha256WithRSAEncryption
36:82:b3:f2:ba:f1:54:ba:51:dd:cf:86:61:0d:0a:86:80:de:
eb:ac:74:72:4a:cc:bb:b3:99:86:7a:ca:35:32:3a:cd:b6:a1:
33:0a:67:12:8c:82:ae:fb:72:82:26:57:5c:19:f6:c2:1d:69:
0d:19:ad:2e:ce:37:d2:5e:75:f0:35:6b:12:ac:d2:75:9a:e5:
37:52:fb:2d:82:f6:70:58:c6:32:e4:68:e5:51:5c:c9:9f:72:
da:31:48:3c:fd:6e:2f:b9:83:09:a5:ff:e7:9d:bd:7f:49:73:
b7:3c:a3:68:47:cf:a1:80:c6:56:61:99:ed:b3:4f:b7:b6:85:
7d:2c:e1:68:6c:51:68:30:ea:35:3f:56:dd:48:19:93:93:b6:
ca:74:b1:1c:0f:33:1a:b6:31:10:79:f2:35:6d:1c:c3:dd:4c:
49:da:64:b0:10:6d:77:e6:be:60:9b:78:41:dd:de:ef:26:d0:
19:ca:2c:fa:c6:f9:0a:6f:b3:f7:7e:93:5a:a9:bd:ff:d1:e8:
e2:33:04:59:88:75:43:38:58:a7:f5:c0:72:82:38:ae:98:af:
5d:fb:b9:8f:f6:28:1d:9f:6f:e4:d8:9b:e5:c2:14:0b:3f:a6:
74:67:cc:29:ab:64:bc:38:f5:56:1d:df:b4:9f:dc:36:db:4a:
08:bb:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org