Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VzgztIgU1B_Agxpl3Myqdi_pHkY.roa
File: VzgztIgU1B_Agxpl3Myqdi_pHkY.roa (raw, json)
Hash identifier: Fg2WANGZKNp73CfbVYIH6cVXK05dsYB4PI4skL3CR0Y=
Subject key identifier: 57:38:33:B4:88:14:D4:1F:C0:83:1A:65:DC:CC:AA:76:2F:E9:1E:46
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01827D1B4C91DD2E324ECE018CA00F079F25
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VzgztIgU1B_Agxpl3Myqdi_pHkY.roa
Signing time: Mon 08 Aug 2022 10:58:37 +0000
ROA not before: Mon 08 Aug 2022 10:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141011
IP address blocks: 2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:1b:4c:91:dd:2e:32:4e:ce:01:8c:a0:0f:07:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 8 10:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=573833b48814d41fc0831a65dcccaa762fe91e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:7c:10:82:17:e4:19:67:f6:1d:51:b3:96:
de:09:db:81:15:a9:82:ed:5c:22:9f:f0:fd:17:87:
62:df:4d:38:7b:cd:a6:ce:7a:f6:f0:dc:42:e4:45:
ea:a1:3b:c3:79:a8:a6:bc:bf:03:c9:e4:75:85:d0:
dc:8b:8f:6c:44:e6:39:bf:51:00:fd:85:d8:86:e2:
66:65:eb:2a:fc:0e:ac:23:0c:81:a4:e3:f5:0e:20:
96:31:71:59:a6:f1:94:7c:02:07:e7:98:58:dc:a3:
5b:f8:5b:a1:b6:f8:14:00:a7:94:b2:21:aa:b1:44:
63:a3:3d:8b:d0:5b:a7:0d:3c:3d:6e:1a:cc:81:ff:
eb:f2:56:c6:48:2d:a2:bd:82:72:91:b9:03:aa:39:
ac:fe:94:1c:e2:5c:dc:8a:f7:b3:bc:02:48:21:e0:
14:2b:38:2a:56:e3:f5:4c:8e:d3:cc:09:f7:c1:59:
6e:44:2c:01:14:c7:fd:76:db:ec:38:0f:a0:d0:3a:
89:3b:fa:30:39:43:68:71:7c:74:1e:49:85:9f:13:
82:de:93:48:89:65:dc:93:eb:fd:00:32:79:33:a8:
8a:95:45:00:ef:95:00:e2:32:49:cb:f9:63:8b:9c:
d9:14:bb:fc:9e:11:64:9e:01:b9:85:6e:32:56:bf:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:33:B4:88:14:D4:1F:C0:83:1A:65:DC:CC:AA:76:2F:E9:1E:46
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VzgztIgU1B_Agxpl3Myqdi_pHkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
Signature Algorithm: sha256WithRSAEncryption
88:e9:3e:4f:6e:a8:0f:c4:5d:13:68:2b:a1:8b:b2:34:03:09:
97:5e:22:4c:62:b8:5b:0a:7b:e7:7c:0a:63:40:4a:47:ca:50:
05:9a:3d:e2:1f:d3:78:ef:4e:0b:e5:05:3c:a8:92:d7:93:3d:
f1:28:9c:7d:8a:f9:38:68:7b:8f:93:a6:c1:a2:d5:7e:d0:d8:
9d:e8:30:14:43:d3:8f:56:85:2d:0b:f7:be:f4:2c:31:cd:bb:
2d:da:04:c8:67:b8:d0:c8:aa:f7:e3:d8:70:3c:2d:f7:e3:d6:
76:a8:98:a6:70:74:f9:0d:e8:9e:0b:6f:f4:68:51:69:0e:7b:
a4:3e:ad:72:51:dd:9a:d5:e6:82:4b:7c:9d:7a:7e:98:c4:a5:
ad:68:6f:43:fc:c0:90:2c:57:fb:7a:22:6e:ae:22:58:b6:32:
68:5c:8e:e0:7f:4b:2c:73:98:cc:d5:6e:64:0d:fb:3c:23:2d:
86:a4:83:7e:95:bc:1c:02:ea:87:4d:37:70:82:94:bd:33:db:
d5:79:2c:23:1e:98:93:a7:d2:00:8c:21:43:7a:8e:01:15:cb:
15:da:82:57:45:81:7e:57:37:88:6a:e4:20:f4:ce:eb:fc:47:
00:cd:e6:2e:d9:34:43:a9:8d:a0:70:24:b8:b7:bf:d3:e6:22:
36:e7:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org