Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SyyGrqfafnCXNlgULL1VG2pDDcI.roa
File: SyyGrqfafnCXNlgULL1VG2pDDcI.roa (raw, json)
Hash identifier: BF56+vCYbvDm6imesg/BdGOuRZdnp4gh3gqrWh+fqOE=
Subject key identifier: 4B:2C:86:AE:A7:DA:7E:70:97:36:58:14:2C:BD:55:1B:6A:43:0D:C2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EF9F3EB74089B1371A642E0B2B7D760D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SyyGrqfafnCXNlgULL1VG2pDDcI.roa
Signing time: Thu 08 Dec 2022 02:45:01 +0000
ROA not before: Thu 08 Dec 2022 02:45:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203852
IP address blocks: 2a06:a005:2::/48 maxlen: 48
2a06:a005:1910::/44 maxlen: 48
2a06:1287:1800::/40 maxlen: 48
2a06:a005:25f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:9f:3e:b7:40:89:b1:37:1a:64:2e:0b:2b:7d:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 8 02:45:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b2c86aea7da7e70973658142cbd551b6a430dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:e2:0d:55:6a:03:ec:3f:fe:d0:6c:2c:8b:
73:2f:8d:31:8f:ec:cd:ac:7d:47:dd:af:0c:d5:90:
06:00:33:7d:b8:63:7e:0a:63:2a:67:7f:5e:25:06:
e4:e9:e2:6b:3a:4e:a7:b1:56:5b:82:6d:62:31:ae:
84:b3:0c:5c:f1:de:d1:ab:ee:93:72:e8:0c:f1:5d:
d6:23:40:0e:c8:cc:0b:87:42:02:d9:e1:53:6d:91:
f2:0d:46:14:8b:16:8c:10:87:66:82:f1:d2:a3:9d:
d3:e5:9a:62:64:c3:99:41:28:95:29:db:c9:f2:d7:
68:a2:87:95:c1:b5:89:1f:89:d7:7e:a1:23:fb:45:
c7:28:88:e2:ce:81:9c:bc:00:53:fa:e1:6b:14:0d:
73:0a:4d:a5:b8:16:fc:23:96:b9:4e:bc:8f:dd:45:
d0:df:35:50:a2:2a:68:bd:46:94:ad:24:31:0c:fb:
43:ca:ce:e7:a0:ab:85:f0:21:61:f3:81:ec:06:44:
3b:4d:74:63:58:ec:84:72:1a:42:e3:5a:67:9b:36:
95:9d:35:46:45:a9:0e:21:5b:b1:85:5a:a4:20:58:
73:c5:bb:de:fe:4e:70:4c:57:31:ae:2f:c0:d0:20:
8d:21:92:ea:93:07:03:bc:3a:1b:69:cd:37:da:23:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:86:AE:A7:DA:7E:70:97:36:58:14:2C:BD:55:1B:6A:43:0D:C2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SyyGrqfafnCXNlgULL1VG2pDDcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:1800::/40
2a06:a005:2::/48
2a06:a005:1910::/44
2a06:a005:25f0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:81:99:4d:5b:05:57:4c:54:c0:f9:f8:bf:f1:da:b9:ca:3d:
ec:a0:b5:11:12:ef:34:03:cb:96:1d:4c:be:c0:66:af:7c:3d:
4d:4d:68:6c:59:61:11:8b:5b:f7:cb:dc:07:44:c7:f9:0f:ff:
10:7d:59:a1:e4:24:a3:82:49:da:5e:c2:7e:79:13:e7:e4:11:
f0:69:25:f3:e5:e4:7d:7b:61:69:15:25:25:89:3f:4f:62:84:
c6:84:fc:7b:a2:e4:d3:43:d0:72:9a:3a:bd:25:bb:ba:d8:db:
75:e7:58:e6:f8:de:fb:2b:df:42:e8:10:f7:7e:41:fb:30:10:
b6:55:a4:1b:c3:84:43:13:5c:88:37:b5:18:06:ef:74:28:d6:
24:bd:c4:66:85:fa:ab:e3:1b:0e:73:d9:08:1e:1f:c4:19:4a:
58:14:69:76:82:ca:33:6a:c2:10:2b:f2:39:5c:2c:78:ac:97:
85:ae:8c:b5:2c:ff:0c:a2:ed:8d:e7:61:ec:c4:20:f1:86:43:
62:de:02:15:ce:8d:70:e8:3f:9b:c3:4a:46:46:44:28:f5:50:
b0:fc:dd:17:30:50:70:34:c8:47:4b:ba:ff:f3:10:a5:57:1e:
31:bd:ea:d0:ea:95:c9:94:14:38:9b:e9:c4:53:9f:be:7d:37:
e0:3d:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org