Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnM3NdRCuyGG2Ckq-u1Du6NLaRk.roa
File: SnM3NdRCuyGG2Ckq-u1Du6NLaRk.roa (raw, json)
Hash identifier: TscLCWcC2dOou5g2GXcy9ehboJvkhQsxvne7u3Pv1qE=
Subject key identifier: 4A:73:37:35:D4:42:BB:21:86:D8:29:2A:FA:ED:43:BB:A3:4B:69:19
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182FF36EAB5236A427D99FA5488938D78C9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnM3NdRCuyGG2Ckq-u1Du6NLaRk.roa
Signing time: Fri 02 Sep 2022 17:19:25 +0000
ROA not before: Fri 02 Sep 2022 17:19:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203635
IP address blocks: 2a06:a005:14d0::/44 maxlen: 48
2a06:a005:1490::/44 maxlen: 48
2a06:a005:1040::/44 maxlen: 48
2a06:a005:14c0::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
2a06:a005:14b0::/44 maxlen: 48
2a06:a005:14a0::/44 maxlen: 48
2a06:a005:1050::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:36:ea:b5:23:6a:42:7d:99:fa:54:88:93:8d:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 2 17:19:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a733735d442bb2186d8292afaed43bba34b6919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:ae:d2:9e:8a:0f:fe:e6:07:75:67:44:d3:
a8:39:98:65:82:1f:a7:70:99:2b:04:72:bb:b1:da:
f1:3d:5e:90:53:12:16:e2:52:91:59:37:25:43:88:
1f:a2:09:ec:1c:8a:43:a2:9e:57:ae:ed:1c:2b:33:
44:b9:10:f6:76:fa:59:53:a6:99:31:77:86:6c:27:
48:95:a3:7c:aa:3c:cb:a6:37:88:8c:37:ec:6c:3c:
65:ee:d9:b5:83:be:11:a7:0a:dd:75:c2:52:b7:f4:
e3:27:5e:81:45:24:3f:70:53:5b:84:58:6b:10:8c:
f0:c5:45:cc:9b:ae:a0:42:b3:1f:15:59:28:66:f5:
8f:be:77:c7:b2:46:85:02:0f:f0:6d:ac:9a:14:03:
a2:47:3e:b7:3c:d3:26:43:eb:94:97:57:6e:a0:a0:
01:3e:24:0c:00:32:51:f0:4f:e2:17:e1:b4:4b:3b:
d4:7f:6c:15:81:3c:be:73:94:56:f3:63:db:7e:39:
5b:8d:62:2c:bb:28:1b:84:b0:c6:9c:99:6b:b1:ae:
06:4e:5a:20:06:97:c5:b5:68:4c:5f:8e:80:1d:82:
91:a9:fa:af:f7:df:08:3b:39:8c:61:9a:91:78:f2:
ec:e2:07:73:97:a0:05:6f:54:52:10:30:fa:17:83:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:37:35:D4:42:BB:21:86:D8:29:2A:FA:ED:43:BB:A3:4B:69:19
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnM3NdRCuyGG2Ckq-u1Du6NLaRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1600::/40
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
58:c6:b3:98:fd:4b:65:ad:fa:08:33:d2:71:be:2d:94:31:b5:
54:e3:46:7d:4f:4d:fc:4a:41:64:94:25:35:cd:ef:f6:4b:ea:
67:ea:8a:00:02:57:56:59:50:56:32:00:b1:03:02:67:c2:b5:
31:86:a1:b7:37:9a:10:89:15:85:3a:2b:c2:09:c8:2d:0c:42:
74:92:a1:bb:1d:67:59:1c:6b:ca:a1:43:d9:6f:e4:7d:dc:f4:
28:d5:81:2d:fe:5c:f4:61:38:fd:7a:5a:28:99:bd:3f:da:5a:
a3:92:3f:71:9c:0b:82:85:a6:f2:54:6f:7f:13:0a:41:df:84:
e6:34:99:ac:8a:1c:2c:07:34:13:a9:87:99:0c:c4:86:9a:64:
70:6e:dc:70:3d:7e:83:de:c2:f3:7e:ac:06:b3:29:34:19:5e:
32:75:d2:66:9a:50:0e:b7:ca:65:73:0a:a6:44:ff:a5:c5:bc:
64:37:06:58:9f:ed:bd:f8:0e:7c:08:76:79:b0:13:e1:53:e6:
8c:37:2f:2c:d7:dc:05:a1:4e:f4:01:9f:d4:f7:ff:06:f0:ed:
a4:d3:c7:05:4e:25:50:7c:d1:fb:a4:74:87:7c:f9:19:ee:4a:
b7:16:79:fc:84:64:05:aa:df:01:6b:a9:be:87:e9:52:22:73:
3e:7d:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org