Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R0k24_c3-_hTr6uI6m5xwHDZoWo.roa
File: R0k24_c3-_hTr6uI6m5xwHDZoWo.roa (raw, json)
Hash identifier: dqVyufCB+AjkV8md5QTSM2LNL6oMtVcnCXGAUWqTRc8=
Subject key identifier: 47:49:36:E3:F7:37:FB:F8:53:AF:AB:88:EA:6E:71:C0:70:D9:A1:6A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184BB557A334D9468E64C675DAF27244A0B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R0k24_c3-_hTr6uI6m5xwHDZoWo.roa
Signing time: Sun 27 Nov 2022 23:04:11 +0000
ROA not before: Sun 27 Nov 2022 23:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202199
IP address blocks: 2a06:a005:1640::/44 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a05:dfc7:5400::/39 maxlen: 48
2a05:dfc7:1700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:55:7a:33:4d:94:68:e6:4c:67:5d:af:27:24:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 27 23:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=474936e3f737fbf853afab88ea6e71c070d9a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:a1:52:84:16:85:4a:8d:c2:93:90:96:81:
3a:23:e1:cf:80:b5:11:a7:f2:fb:14:25:51:26:8d:
57:b6:0a:71:4f:fa:8a:82:8f:5f:be:85:f8:90:a2:
60:89:0c:03:13:a0:39:e3:1d:c8:10:ad:52:22:70:
1b:dd:93:1c:6e:3e:9d:85:ba:b7:46:20:65:47:02:
24:d2:1d:54:17:66:0e:95:36:6a:43:4d:b6:a5:65:
32:66:a3:26:a5:69:dc:7d:3b:d9:15:85:d5:ec:52:
ca:04:1f:56:34:1e:e5:53:8b:a5:15:4d:49:fb:c1:
7b:c1:79:89:4e:da:25:39:34:a6:53:bc:32:50:92:
3a:7a:b5:03:65:98:75:54:19:2b:e8:e4:d1:e8:8e:
b0:ce:ef:a5:fa:b9:c9:e5:ee:b2:37:5d:1f:a4:be:
db:ce:ef:5b:ab:a7:3e:ac:25:79:b2:c1:86:40:b5:
2e:c4:75:01:44:4a:3f:53:79:db:2e:92:29:10:c5:
e8:85:69:71:b2:f6:0d:c1:8c:fd:f5:50:8c:5a:70:
95:53:3b:56:98:ea:e7:87:c3:10:d6:dd:d1:e7:7a:
00:f7:67:ed:39:5f:1b:20:a5:76:4d:ca:cd:00:07:
b9:7c:a0:28:f2:56:e6:23:64:84:cf:31:3b:52:9f:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:36:E3:F7:37:FB:F8:53:AF:AB:88:EA:6E:71:C0:70:D9:A1:6A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R0k24_c3-_hTr6uI6m5xwHDZoWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1700::/40
2a05:dfc7:5400::/39
2a06:a005:1505::/48
2a06:a005:1640::/44
Signature Algorithm: sha256WithRSAEncryption
72:04:24:c7:d1:7b:98:c0:5a:fa:17:f1:6c:47:dd:8b:e6:26:
27:e2:78:6c:64:a7:7a:22:7b:f1:49:60:5a:c9:a2:f5:13:27:
07:b5:cf:ee:e5:04:20:05:e7:99:3e:e6:20:c3:cd:29:ce:cb:
ab:a8:9f:2b:04:42:6c:97:39:a6:78:43:4a:d7:bd:46:c5:1b:
c3:4d:00:d8:28:fc:38:a1:e0:af:fc:ff:94:aa:86:a9:6d:a8:
65:0e:8d:7a:b9:20:7e:76:3a:73:e9:7b:72:c4:c1:1e:c0:a6:
8f:15:5f:b5:02:d2:10:fb:5b:09:29:48:35:f1:f0:72:ce:5e:
b7:90:d3:b1:c2:ff:e1:eb:74:51:b6:5f:da:d5:97:6a:ba:2a:
49:23:f3:c0:9a:34:14:56:9a:dc:2e:fb:f7:46:24:a7:b6:c2:
fb:36:07:3e:8a:9b:01:a3:b3:94:9a:61:68:51:83:d5:c4:da:
da:cc:a8:8b:e4:2e:11:f7:1a:85:8e:47:5c:9b:a2:8a:c9:b6:
17:b1:b1:56:c1:98:c9:87:11:77:7d:ff:74:4a:f5:ea:ae:8d:
44:5c:5f:ba:1c:3c:ee:e0:a6:64:87:92:76:a4:45:bf:75:8c:
f4:ca:43:86:8d:c9:cf:2e:f9:58:96:67:fc:85:5b:e2:23:9c:
30:41:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:17 2023 by rpki-client on console-ams.rpki-client.org