Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6sWjah-FiBavI0u9l9SVHHbbLI.roa
File: V6sWjah-FiBavI0u9l9SVHHbbLI.roa (raw, json)
Hash identifier: gn1pH7AI2RsvvEqptNQbP6f/CVpZ/BfvAcPcJkRO8os=
Subject key identifier: 57:AB:16:8D:A8:7E:16:20:5A:BC:8D:2E:F6:5F:52:54:71:DB:6C:B2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183C3F8ACBB4CC969C348A1CC81140EFDC0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6sWjah-FiBavI0u9l9SVHHbbLI.roa
Signing time: Mon 10 Oct 2022 22:16:37 +0000
ROA not before: Mon 10 Oct 2022 22:16:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204844
IP address blocks: 2a06:a005:14f0::/44 maxlen: 48
2a06:a005:1d00::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:f8:ac:bb:4c:c9:69:c3:48:a1:cc:81:14:0e:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 10 22:16:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57ab168da87e16205abc8d2ef65f525471db6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:f7:6e:62:d8:28:d3:90:b4:58:d2:d1:05:
ba:84:a7:e8:a1:59:dd:0d:9a:d8:da:bd:42:da:c2:
72:50:5e:da:f4:dc:17:07:50:60:e8:3c:8a:30:eb:
c3:85:75:cc:b0:19:f6:9e:37:ad:0a:b5:70:00:8f:
e3:e1:3d:ff:96:38:32:93:91:cd:f1:48:42:63:88:
5b:a6:2b:22:11:15:9a:3e:e0:d0:9b:44:67:36:19:
fe:f3:6b:28:12:40:5e:6c:9f:5d:2b:2d:08:20:94:
bd:76:92:38:96:97:5d:ff:b1:dc:7f:0a:39:d5:24:
8c:c5:c5:db:98:57:3f:fa:dc:f9:be:a2:a6:0d:bb:
bc:3e:e6:86:f5:8b:5f:4f:a0:85:22:64:89:9f:06:
12:91:30:de:bb:4f:42:c3:c3:e1:d2:73:47:82:57:
67:27:54:ba:79:c0:46:9a:e4:22:a0:bf:cd:67:0e:
87:dc:27:63:25:df:d4:17:8a:b0:fd:da:79:93:9f:
c5:cc:f6:6f:d7:84:ef:d6:7a:5c:8e:db:19:bb:40:
bf:e2:93:ca:6c:de:4b:5e:0c:85:87:ef:4a:07:79:
a9:34:ce:be:7a:f5:9c:ac:e9:fd:74:e0:e6:a9:88:
8f:0b:43:aa:db:70:cf:38:e2:eb:b1:51:64:64:9a:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:16:8D:A8:7E:16:20:5A:BC:8D:2E:F6:5F:52:54:71:DB:6C:B2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6sWjah-FiBavI0u9l9SVHHbbLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14f0::/44
2a06:a005:1b40::/44
2a06:a005:1be0::/44
2a06:a005:1d00::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
6e:59:3b:b9:76:bb:61:dc:41:04:c0:26:6d:97:1e:61:94:c2:
50:19:9e:21:a7:97:7c:08:ee:2d:9a:0d:4f:02:e9:3d:ab:56:
86:f7:38:79:38:88:72:1e:d1:a2:46:2a:b7:b7:95:07:36:90:
7e:ab:2f:10:8d:5c:a9:3d:af:19:ca:c0:e2:90:c2:39:21:8f:
ff:2d:e4:9c:a8:5e:0c:79:91:78:8d:8f:f7:68:0b:17:6a:6c:
7f:67:e9:b7:2e:56:59:59:f1:ba:31:dc:3c:52:bc:78:0e:7d:
c3:b6:04:a3:14:8a:cb:89:89:43:82:67:5f:a4:28:dd:b0:cb:
69:0b:a4:17:a6:41:36:11:ce:e6:70:ce:06:3b:b8:a1:cf:1f:
f5:2c:1b:65:2f:6a:3c:a9:f7:71:13:67:99:5c:38:8f:ae:27:
10:5a:eb:a4:7b:d5:8c:24:87:81:be:f7:6d:2e:22:f9:24:1e:
5b:ae:b3:33:fd:bf:a0:08:8b:f3:39:16:bb:00:d2:20:46:19:
ce:d2:9d:e0:a4:f4:24:81:3b:ad:5c:31:d8:37:34:b4:3e:e6:
b2:39:d1:1f:4c:42:4a:c2:b2:6a:11:1e:ac:7b:4b:52:7e:f1:
e4:38:14:d6:a1:22:c3:15:8e:c0:38:78:b7:9a:16:a3:be:8c:
9b:3e:ed:17
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYPD+Ky7TMlpw0ihzIEUDv3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDEwMjIxNjM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FiMTY4ZGE4N2UxNjIwNWFiYzhkMmVmNjVmNTI1NDcxZGI2Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jH3bmLYKNOQtFjS0QW6hKfooVnd
DZrY2r1C2sJyUF7a9NwXB1Bg6DyKMOvDhXXMsBn2njetCrVwAI/j4T3/ljgyk5HN
8UhCY4hbpisiERWaPuDQm0RnNhn+82soEkBebJ9dKy0IIJS9dpI4lpdd/7Hcfwo5
1SSMxcXbmFc/+tz5vqKmDbu8PuaG9YtfT6CFImSJnwYSkTDeu09Cw8Ph0nNHgldn
J1S6ecBGmuQioL/NZw6H3CdjJd/UF4qw/dp5k5/FzPZv14Tv1npcjtsZu0C/4pPK
bN5LXgyFh+9KB3mpNM6+evWcrOn9dODmqYiPC0Oq23DPOOLrsVFkZJqzJwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFFerFo2ofhYgWryNLvZfUlRx22yyMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVjZzV2phaC1GaUJhdkkwdTlsOVNWSEhiYkxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEKgagBRTw
AwcEKgagBRtAAwcEKgagBRvgAwcEKgagBR0AAwcEKgagBR1gMA0GCSqGSIb3DQEB
CwUAA4IBAQBuWTu5drth3EEEwCZtlx5hlMJQGZ4hp5d8CO4tmg1PAuk9q1aG9zh5
OIhyHtGiRiq3t5UHNpB+qy8QjVypPa8ZysDikMI5IY//LeScqF4MeZF4jY/3aAsX
amx/Z+m3LlZZWfG6Mdw8Urx4Dn3DtgSjFIrLiYlDgmdfpCjdsMtpC6QXpkE2Ec7m
cM4GO7ihzx/1LBtlL2o8qfdxE2eZXDiPricQWuuke9WMJIeBvvdtLiL5JB5brrMz
/b+gCIvzORa7ANIgRhnO0p3gpPQkgTutXDHYNzS0PuayOdEfTEJKwrJqER6se0tS
fvHkOBTWoSLDFY7AOHi3mhajvoybPu0X
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org