Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/So4pLplpO6oKJlhYj4M5h0TEKIg.roa
File: So4pLplpO6oKJlhYj4M5h0TEKIg.roa (raw, json)
Hash identifier: hH/kncYgL0GUJEwxmQyexgGerFCY74sEZq3n1EPwtbo=
Subject key identifier: 4A:8E:29:2E:99:69:3B:AA:0A:26:58:58:8F:83:39:87:44:C4:28:88
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821EDB48F6BD8AD872E424EFABB51B64E7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/So4pLplpO6oKJlhYj4M5h0TEKIg.roa
Signing time: Thu 21 Jul 2022 03:44:23 +0000
ROA not before: Thu 21 Jul 2022 03:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209310
IP address blocks: 2a06:a005:451::/48 maxlen: 48
2a06:a005:439::/48 maxlen: 48
2a06:a005:43a::/48 maxlen: 48
2a06:a005:438::/48 maxlen: 48
2a06:a005:43b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1e:db:48:f6:bd:8a:d8:72:e4:24:ef:ab:b5:1b:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 21 03:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a8e292e99693baa0a2658588f83398744c42888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:17:af:71:a7:fc:d0:4e:54:7e:70:7c:e3:
e9:b1:be:c8:11:df:bf:1a:e1:93:79:4f:5c:80:38:
a2:e9:00:86:59:87:c7:41:5c:d9:3a:8f:cc:e7:9e:
31:db:ad:39:42:1d:91:a7:5b:6c:1c:a1:68:5a:a1:
e6:fd:46:6b:0b:74:41:59:e5:a6:a2:8f:44:93:04:
80:5b:32:e1:da:ad:6c:fe:79:fe:6b:91:7a:92:58:
11:00:9b:b1:31:0b:70:81:bd:dd:c7:d9:2a:06:e8:
2c:4e:8c:55:1a:fd:eb:9c:fb:41:54:0e:17:bb:ed:
8f:79:6d:e6:34:bd:81:d6:07:e9:b0:cc:ff:d9:d1:
df:cc:b8:f5:9e:d1:3b:8a:f0:3e:d9:d6:28:b4:2e:
4c:69:fb:3c:bf:92:e3:64:f5:b3:64:05:46:67:51:
de:00:43:24:8d:fd:f5:6e:68:3b:fa:b8:d2:a6:ac:
11:53:5a:84:9b:55:b3:3a:54:d9:7b:e1:f1:ce:ab:
91:ed:de:07:1e:93:13:53:77:47:fb:e0:23:99:7b:
fc:d4:1f:84:31:b4:2f:4b:d8:8b:6a:6c:4b:af:f6:
bd:c0:4f:10:4b:ba:df:06:62:82:85:ff:9c:6d:33:
3e:28:0b:98:48:a4:79:60:3b:ab:b0:0c:7e:97:aa:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:29:2E:99:69:3B:AA:0A:26:58:58:8F:83:39:87:44:C4:28:88
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/So4pLplpO6oKJlhYj4M5h0TEKIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:438::/46
2a06:a005:451::/48
Signature Algorithm: sha256WithRSAEncryption
79:1e:f8:28:be:04:35:91:95:1e:b4:a7:0d:a2:b7:b8:6a:08:
76:f9:b9:72:c5:da:23:de:19:d2:4f:ea:73:e8:c7:a6:0f:3b:
38:d9:31:1e:51:f6:7b:24:88:ee:da:c0:7d:0e:78:2c:c0:56:
8a:8e:c5:78:97:3f:5d:0b:5e:bf:bc:86:e1:e6:59:7d:47:22:
43:6d:72:f6:06:78:e1:ea:ce:5d:03:eb:be:e8:93:60:04:d4:
b8:0a:88:08:e5:6d:eb:a3:72:c8:b2:87:53:aa:7e:c5:db:5f:
81:91:65:6a:9a:d2:4d:d4:12:85:a0:f5:27:c2:58:91:39:ea:
c4:6f:d4:9a:9b:ab:2e:62:f3:cf:be:d5:80:a5:c3:15:35:73:
86:1a:5b:6a:31:fa:a6:bb:fb:c1:d5:de:59:15:b5:3b:d2:fe:
94:72:61:41:d4:71:51:db:70:be:4f:4e:64:04:90:0a:d4:88:
bf:0d:c7:bd:1a:c6:2c:9e:ad:33:e4:16:7f:27:8d:d2:09:b8:
6f:83:23:bc:b9:87:4d:3a:08:55:77:21:26:c8:d5:b6:85:97:
cf:66:1e:3d:c8:2a:b1:fe:46:82:32:9b:2d:87:a9:30:01:7f:
4a:5b:48:b8:4c:0e:27:72:9a:42:24:cc:73:e2:08:06:65:50:
91:99:5e:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIe20j2vYrYcuQk76u1G2TnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIxMDM0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YThlMjkyZTk5NjkzYmFhMGEyNjU4NTg4ZjgzMzk4NzQ0YzQyODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB4Xr3Gn/NBOVH5wfOPpsb7IEd+/
GuGTeU9cgDii6QCGWYfHQVzZOo/M554x2605Qh2Rp1tsHKFoWqHm/UZrC3RBWeWm
oo9EkwSAWzLh2q1s/nn+a5F6klgRAJuxMQtwgb3dx9kqBugsToxVGv3rnPtBVA4X
u+2PeW3mNL2B1gfpsMz/2dHfzLj1ntE7ivA+2dYotC5Mafs8v5LjZPWzZAVGZ1He
AEMkjf31bmg7+rjSpqwRU1qEm1WzOlTZe+HxzquR7d4HHpMTU3dH++AjmXv81B+E
MbQvS9iLamxLr/a9wE8QS7rfBmKChf+cbTM+KAuYSKR5YDursAx+l6qV9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEqOKS6ZaTuqCiZYWI+DOYdExCiIMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvU280cExwbHBPNm9LSmxoWWo0TTVoMFRFS0lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKgagBQQ4
AwcAKgagBQRRMA0GCSqGSIb3DQEBCwUAA4IBAQB5HvgovgQ1kZUetKcNore4agh2
+blyxdoj3hnST+pz6MemDzs42TEeUfZ7JIju2sB9DngswFaKjsV4lz9dC16/vIbh
5ll9RyJDbXL2Bnjh6s5dA+u+6JNgBNS4CogI5W3ro3LIsodTqn7F21+BkWVqmtJN
1BKFoPUnwliROerEb9Sam6suYvPPvtWApcMVNXOGGltqMfqmu/vB1d5ZFbU70v6U
cmFB1HFR23C+T05kBJAK1Ii/Dce9GsYsnq0z5BZ/J43SCbhvgyO8uYdNOghVdyEm
yNW2hZfPZh49yCqx/kaCMpsth6kwAX9KW0i4TA4ncppCJMxz4ggGZVCRmV4V
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org