Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RsGq--ZwaQKt1pROttFtBSgy1YQ.roa
File: RsGq--ZwaQKt1pROttFtBSgy1YQ.roa (raw, json)
Hash identifier: P5XkaQlwzpiezQ28R286Swk6clnFcuC23YTpB8Y42oo=
Subject key identifier: 46:C1:AA:FB:E6:70:69:02:AD:D6:94:4E:B6:D1:6D:05:28:32:D5:84
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184B5FA04812C2A5FB5ACF9721A7C12011E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RsGq--ZwaQKt1pROttFtBSgy1YQ.roa
Signing time: Sat 26 Nov 2022 22:06:12 +0000
ROA not before: Sat 26 Nov 2022 22:06:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205232
IP address blocks: 2a0a:6040:f800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:fa:04:81:2c:2a:5f:b5:ac:f9:72:1a:7c:12:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 26 22:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46c1aafbe6706902add6944eb6d16d052832d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:ae:e0:a7:cf:2b:d3:69:77:8b:c5:91:90:
36:e8:61:70:14:65:36:c6:57:f8:1a:f3:23:61:b2:
12:95:0c:cf:a5:63:68:4e:71:2a:43:f4:29:d9:df:
0d:8b:fa:97:f9:3a:c9:95:13:24:a9:fd:86:1b:8f:
b9:88:b1:32:cc:f0:d4:3a:d8:55:47:17:68:3f:9a:
a5:22:83:e1:36:f6:17:95:de:db:6f:f5:45:ca:87:
59:ea:ad:9e:38:8f:a5:24:55:92:4e:67:86:02:3c:
b2:3a:08:d9:e1:00:c3:92:ad:f7:66:d4:31:0d:57:
71:a3:68:a0:a3:2f:10:9e:c2:29:d9:45:c2:ce:d2:
74:cf:cf:8e:d8:5d:08:c9:b1:d6:bd:60:37:d1:4d:
21:cc:dd:00:b5:f1:52:f4:e8:41:18:65:5f:e9:57:
82:eb:70:10:a6:00:c7:e5:08:a4:9a:51:0b:bc:bd:
af:bf:59:d6:d1:fd:34:05:a3:b7:15:67:d5:d2:76:
4f:7e:6a:dc:c9:73:b7:24:db:ea:31:fe:a5:b6:26:
c5:0f:b2:dc:f2:ef:f2:e9:f8:2e:9b:8f:5b:20:a9:
75:4d:86:dd:03:af:96:33:d4:35:7e:6e:c6:8e:8e:
79:f2:73:d6:f2:44:52:ce:98:9b:27:d4:ec:34:5e:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:AA:FB:E6:70:69:02:AD:D6:94:4E:B6:D1:6D:05:28:32:D5:84
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RsGq--ZwaQKt1pROttFtBSgy1YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f800::/40
Signature Algorithm: sha256WithRSAEncryption
1c:28:af:08:91:52:c7:50:4e:6a:ec:d0:be:06:06:ed:6f:dc:
f7:1b:03:c8:09:46:ca:b5:5a:4c:12:d3:91:cd:97:5c:21:37:
63:35:38:c0:3a:b2:1e:ef:d1:a4:cb:73:38:a8:f5:ee:1a:40:
bc:3f:dc:32:12:b4:ae:1a:4d:39:59:40:71:70:87:56:bf:93:
f7:f9:86:ab:c9:01:2d:a8:7b:bc:74:dc:db:b7:73:bc:0a:3b:
84:75:16:4f:46:32:24:e1:ff:f9:8a:1c:05:f9:62:c4:c6:f8:
ac:d5:b7:fd:21:02:78:3f:c8:7c:7f:c6:1a:3c:2d:dc:a6:a8:
a2:6d:3e:51:d9:8c:65:f2:f2:1b:21:82:87:7e:ad:46:df:b1:
19:f8:6a:0c:e7:bf:d2:d9:cb:05:e5:b1:24:0a:d5:46:63:a4:
a0:8f:e1:0f:11:3a:1f:2d:1d:92:20:3e:4c:2f:5a:a6:27:1b:
a1:28:e3:7e:9a:ad:94:db:c5:53:a7:a7:9e:43:38:19:fd:aa:
6c:d3:9a:65:09:7c:b2:5f:b8:26:d2:a9:a8:1b:f5:c5:fd:61:
06:d9:72:da:e0:75:b1:54:30:b0:ca:d6:8c:6c:33:28:13:19:
7b:22:7f:1f:0e:97:29:c1:85:5d:ff:33:d5:fe:33:84:ea:fb:
5f:58:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org