Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9jpcZ4UZU3bm2pNsED0BwJAVjQ.roa
File: R9jpcZ4UZU3bm2pNsED0BwJAVjQ.roa (raw, json)
Hash identifier: 7gQ7oulCxMz6334vp990Du2Q52xqoROlm1HmfUEzREU=
Subject key identifier: 47:D8:E9:71:9E:14:65:4D:DB:9B:6A:4D:B0:40:F4:07:02:40:56:34
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183EB5C8723B26C7AB40FEAEAE11668BBC0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9jpcZ4UZU3bm2pNsED0BwJAVjQ.roa
Signing time: Tue 18 Oct 2022 13:50:52 +0000
ROA not before: Tue 18 Oct 2022 13:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204844
IP address blocks: 2a06:a005:14f0::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:5c:87:23:b2:6c:7a:b4:0f:ea:ea:e1:16:68:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 18 13:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47d8e9719e14654ddb9b6a4db040f40702405634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:9b:dd:ee:b5:4a:57:76:0a:1a:b7:f2:03:
7a:17:e1:5f:6f:9a:08:4d:1d:9c:b2:86:01:e3:b2:
f8:43:5c:7e:f2:18:82:a7:3e:66:98:07:60:74:f6:
76:e3:bf:83:f7:d3:b6:a2:d2:ff:8c:a6:bc:97:11:
1b:0d:b9:d6:f3:39:59:bd:64:65:38:4f:03:78:df:
7f:17:a8:f6:f5:58:39:fc:6c:68:b3:53:04:2c:21:
0b:9e:68:d3:11:f9:bb:f2:ad:45:25:c7:40:1e:be:
e7:ac:68:21:69:83:2f:0d:01:06:7b:46:16:c4:a6:
20:56:38:56:5b:38:91:74:2a:d0:c7:d5:e3:0d:99:
70:44:71:9a:f5:eb:b8:09:c5:32:dc:59:68:86:82:
a6:9c:4a:48:c9:17:f5:39:30:7a:71:67:ff:33:ad:
51:80:3e:a4:2a:d0:bf:38:e4:8d:e0:70:a3:9d:05:
0b:9e:85:f6:c6:86:01:ee:00:3a:cf:0f:46:26:a4:
a0:59:e4:3e:36:ab:32:d6:91:97:37:fb:df:87:a0:
19:69:ad:61:94:7b:49:31:a0:d5:5f:19:78:16:15:
83:c3:c6:96:7d:03:de:cc:49:5f:34:17:f8:28:57:
50:1f:3e:dc:68:2f:76:82:fb:2c:f7:f3:5d:5f:45:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:E9:71:9E:14:65:4D:DB:9B:6A:4D:B0:40:F4:07:02:40:56:34
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9jpcZ4UZU3bm2pNsED0BwJAVjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14f0::/44
2a06:a005:1b40::/44
2a06:a005:1be0::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
91:2a:f0:e7:9c:28:1a:de:43:ad:1e:21:96:7c:1f:da:ec:f2:
ce:89:20:f6:c8:a7:52:bb:a4:7c:43:67:57:f5:ff:f3:58:83:
87:40:af:f3:7b:9a:aa:27:1e:c2:b2:16:9b:10:23:91:3d:bf:
29:e8:36:58:5e:c9:15:a1:b3:4f:c1:0c:f1:71:17:79:12:61:
c2:f2:e6:0d:85:f3:fb:dd:b6:a6:bc:de:69:42:9e:34:d3:54:
f0:c3:cd:81:53:e4:24:d7:97:6e:b2:e8:97:c5:27:4f:d0:db:
64:dc:97:19:04:cc:15:f4:09:a1:ea:84:2f:cb:c0:26:57:20:
89:35:1d:d7:63:ae:aa:46:85:ff:55:3c:94:c0:f6:ed:ea:4f:
08:ae:6c:8b:9b:3b:27:b5:3c:06:5b:80:d1:f6:3c:11:51:8e:
35:19:98:6a:12:fc:da:8f:18:af:ad:b0:9d:3a:c2:6d:1a:e2:
ce:b4:26:23:55:9c:32:73:76:3f:52:a5:fb:27:f0:97:ca:7a:
44:aa:42:71:f6:6b:56:ec:cc:c3:a5:c5:9a:fa:31:68:b7:0e:
12:57:6c:38:90:2b:16:e3:23:5d:cd:66:91:ea:8c:f4:57:c2:
49:84:8e:20:db:4b:7d:9b:52:f4:b1:60:8d:1a:21:58:3b:ff:
2b:6b:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org