Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SkJ-T0tWw5rmEg976A42qU7OOSE.roa
File: SkJ-T0tWw5rmEg976A42qU7OOSE.roa (raw, json)
Hash identifier: xuWVmZh8897We86UzlDrYHCbS29quSoYdwLOOdSX9Fw=
Subject key identifier: 4A:42:7E:4F:4B:56:C3:9A:E6:12:0F:7B:E8:0E:36:A9:4E:CE:39:21
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D7D3AC3A1DEF52690DCD858D4AF3D96D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SkJ-T0tWw5rmEg976A42qU7OOSE.roa
Signing time: Fri 14 Oct 2022 18:48:37 +0000
ROA not before: Fri 14 Oct 2022 18:48:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213105
IP address blocks: 2a06:a005:1260::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:d3:ac:3a:1d:ef:52:69:0d:cd:85:8d:4a:f3:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 14 18:48:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a427e4f4b56c39ae6120f7be80e36a94ece3921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:4c:44:5d:a0:a2:08:65:b1:f7:b8:6d:ac:
6a:fe:b1:e4:59:1c:ed:fd:7b:8a:9a:fd:a3:e7:fc:
10:25:13:2c:96:ed:66:14:83:bf:7a:16:29:cd:84:
b6:82:3b:63:d0:0a:38:62:c1:05:ba:42:d4:00:ca:
9e:9b:cb:66:55:81:30:0e:00:91:cc:b0:b6:37:71:
e7:18:73:4d:1c:41:7d:d4:09:a4:0f:e2:82:56:f7:
5e:58:b9:f9:bd:36:bb:57:51:1d:21:b3:d5:90:0d:
23:84:f9:5d:51:55:3d:cd:41:a9:ec:be:78:48:7e:
45:76:7a:88:83:aa:53:61:66:56:43:db:43:0e:76:
80:6c:9e:ae:93:99:c3:c5:fc:bf:89:43:61:82:9a:
41:58:74:55:f4:fd:c6:f7:a6:d7:05:b6:9c:54:99:
44:e5:8b:01:e1:32:1b:09:22:f5:d4:17:20:5e:a3:
b7:f5:c5:20:8d:73:6c:e0:49:38:dd:91:30:88:a5:
0e:be:6f:04:b7:92:f9:44:98:ca:de:34:7b:93:2a:
8e:4f:09:45:bc:5b:97:ea:51:34:29:de:f9:3a:90:
2f:1f:ab:14:b5:ab:a2:f4:5f:93:1f:b5:bd:11:3c:
62:9c:a2:31:78:05:dc:eb:7a:f3:f9:04:fc:0b:e4:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:7E:4F:4B:56:C3:9A:E6:12:0F:7B:E8:0E:36:A9:4E:CE:39:21
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SkJ-T0tWw5rmEg976A42qU7OOSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1260::/44
2a06:a005:18e0::/44
2a06:a005:1d30::/44
Signature Algorithm: sha256WithRSAEncryption
25:fe:b4:ce:55:6b:1f:73:a7:ec:77:ba:54:31:b3:60:c9:bf:
6c:cd:87:fe:12:60:74:46:67:0f:32:87:ce:f0:8c:48:ee:92:
64:32:9b:1a:ed:20:91:16:ca:dc:97:28:45:a6:33:ac:c7:45:
7d:5c:12:0b:af:22:0f:7c:dc:1b:25:bf:73:ee:0c:5d:7f:e5:
a1:73:a3:b0:e0:2e:3d:14:7b:5d:44:c3:f8:fb:cd:45:51:69:
68:4b:49:37:47:ce:04:ef:9a:e6:ae:f7:91:52:50:25:76:07:
dc:2e:a5:97:fa:90:77:a0:e4:f4:11:0b:5b:c0:ff:3e:e2:e8:
d8:7c:a6:dd:d0:22:2d:c5:25:b2:a2:92:81:c3:ed:3a:fd:e6:
ca:b1:e1:69:29:31:b8:72:67:31:fb:ba:e9:03:72:e0:a2:16:
7b:04:8f:f8:0b:07:f1:b8:64:cd:1f:b6:f9:f0:3e:68:ae:e4:
3a:65:93:b8:d3:4f:34:4d:b8:f3:24:b7:f0:78:d3:26:73:a9:
f3:b4:8d:48:e6:fc:58:3e:c3:5c:87:6c:2f:54:a4:4b:d7:20:
55:41:aa:ac:65:33:a0:3b:b7:a4:36:4f:f8:a2:12:5d:62:8e:
f7:b6:55:ce:c8:78:c4:05:6a:29:34:a0:72:d2:80:94:35:45:
d8:6d:fd:30
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYPX06w6He9SaQ3NhY1K89ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDE0MTg0ODM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTQyN2U0ZjRiNTZjMzlhZTYxMjBmN2JlODBlMzZhOTRlY2UzOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNMRF2goghlsfe4baxq/rHkWRzt
/XuKmv2j5/wQJRMslu1mFIO/ehYpzYS2gjtj0Ao4YsEFukLUAMqem8tmVYEwDgCR
zLC2N3HnGHNNHEF91AmkD+KCVvdeWLn5vTa7V1EdIbPVkA0jhPldUVU9zUGp7L54
SH5FdnqIg6pTYWZWQ9tDDnaAbJ6uk5nDxfy/iUNhgppBWHRV9P3G96bXBbacVJlE
5YsB4TIbCSL11BcgXqO39cUgjXNs4Ek43ZEwiKUOvm8Et5L5RJjK3jR7kyqOTwlF
vFuX6lE0Kd75OpAvH6sUtaui9F+TH7W9ETxinKIxeAXc63rz+QT8C+RQCQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEpCfk9LVsOa5hIPe+gONqlOzjkhMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvU2tKLVQwdFd3NXJtRWc5NzZBNDJxVTdPT1NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgagBRJg
AwcEKgagBRjgAwcEKgagBR0wMA0GCSqGSIb3DQEBCwUAA4IBAQAl/rTOVWsfc6fs
d7pUMbNgyb9szYf+EmB0RmcPMofO8IxI7pJkMpsa7SCRFsrclyhFpjOsx0V9XBIL
ryIPfNwbJb9z7gxdf+Whc6Ow4C49FHtdRMP4+81FUWloS0k3R84E75rmrveRUlAl
dgfcLqWX+pB3oOT0EQtbwP8+4ujYfKbd0CItxSWyopKBw+06/ebKseFpKTG4cmcx
+7rpA3LgohZ7BI/4CwfxuGTNH7b58D5oruQ6ZZO40080TbjzJLfweNMmc6nztI1I
5vxYPsNch2wvVKRL1yBVQaqsZTOgO7ekNk/4ohJdYo73tlXOyHjEBWopNKBy0oCU
NUXYbf0w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org