Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UqQ1hYTZ-lBwlguVdVZO3LVuejU.roa
File: UqQ1hYTZ-lBwlguVdVZO3LVuejU.roa (raw, json)
Hash identifier: HoIBY7C5E7XYgUPY0OpnCN4A3InEguPt4269xMlc9aU=
Subject key identifier: 52:A4:35:85:84:D9:FA:50:70:96:0B:95:75:56:4E:DC:B5:6E:7A:35
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01828359E3C695FC54006BA668BEDFC27980
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UqQ1hYTZ-lBwlguVdVZO3LVuejU.roa
Signing time: Tue 09 Aug 2022 16:04:42 +0000
ROA not before: Tue 09 Aug 2022 16:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:5a9::/48 maxlen: 48
2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:59:e3:c6:95:fc:54:00:6b:a6:68:be:df:c2:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 9 16:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52a4358584d9fa5070960b9575564edcb56e7a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:b2:8f:a4:1f:8f:0e:47:1d:ea:d8:c9:c8:
f0:c8:c7:70:9a:9a:14:68:0b:ec:c6:62:fa:b1:aa:
93:7d:8d:2f:a9:19:ba:66:ed:ab:d7:b7:17:57:70:
b9:1e:a6:f7:84:9a:f0:ae:90:70:ba:55:b6:28:c0:
eb:9e:c2:be:ca:ae:54:fe:25:0b:f7:79:12:be:b6:
73:4f:f1:7e:0a:5b:81:e2:34:f0:a9:38:34:7d:b1:
15:4e:ac:c6:1f:51:d7:eb:4a:e3:1c:01:f0:15:15:
13:9c:e9:0a:33:a4:9a:9c:0e:57:7b:6e:98:be:94:
87:c3:00:96:13:0d:fa:5f:44:ef:9b:05:50:49:60:
8e:56:94:fc:58:35:5d:2d:a6:dc:f8:59:5b:1e:9e:
28:f1:b2:f7:e2:0a:7c:21:60:39:7e:1a:35:43:39:
e4:71:28:bf:f4:0b:a7:d6:c0:fb:33:17:83:1c:c7:
41:e4:ef:1b:da:c4:a5:1e:84:71:2b:ef:a7:aa:b1:
5f:85:6d:c5:61:20:cb:78:42:4a:9d:d0:df:50:91:
8b:f8:f4:90:4e:19:4c:89:aa:53:06:b1:01:a6:cf:
20:77:2c:e3:6f:31:c2:d8:c2:c0:ab:d1:b1:f3:f0:
8d:65:61:c9:c7:49:4e:4d:5e:07:27:59:4b:0a:d8:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:35:85:84:D9:FA:50:70:96:0B:95:75:56:4E:DC:B5:6E:7A:35
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UqQ1hYTZ-lBwlguVdVZO3LVuejU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:5a9::/48
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
2a:b2:5a:39:04:90:36:5b:cc:1b:77:d3:c6:3f:e7:1a:ea:93:
3f:bd:9b:61:d9:7a:73:30:c1:68:51:29:d1:28:99:48:fa:49:
b1:83:fc:ed:da:f7:ff:19:2d:25:db:c6:e2:62:d4:88:52:b4:
1f:10:53:42:8e:f8:6d:0e:28:42:11:b4:3d:12:ab:f5:6c:3e:
3e:b0:aa:2e:70:87:56:d4:8f:b7:15:01:3a:5c:19:7e:81:cc:
d8:27:bf:1c:18:80:b2:09:bf:74:5e:fe:c0:5d:c3:e3:e6:70:
71:cc:1b:2b:0c:46:12:1a:9d:40:97:fe:a3:4b:c0:64:a9:22:
95:73:39:58:bf:19:88:58:c6:c4:d4:56:8e:b5:f1:62:ee:05:
ef:e3:bc:6e:bd:d2:7a:fe:d6:61:2a:3f:35:0e:45:12:e9:86:
8b:c6:1c:4a:23:eb:66:b3:ae:29:df:4a:ee:c5:f5:73:f5:a0:
50:38:b1:8b:e4:32:27:e2:b6:54:f7:0a:56:64:bf:58:67:dd:
6e:3c:36:d0:4c:1d:69:90:e9:6f:f2:92:4b:14:0b:77:e2:6b:
6a:9d:cd:80:5e:a1:db:e9:c2:a1:13:97:f7:fb:9f:e3:37:47:
d5:a0:71:14:53:8d:5e:01:6f:30:e5:a2:c7:95:4c:1a:b9:9b:
06:63:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:18 2023 by rpki-client on console-ams.rpki-client.org