Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WZ7S-OfqVkoc3e_1L5dtScLxeKM.roa
File: WZ7S-OfqVkoc3e_1L5dtScLxeKM.roa (raw, json)
Hash identifier: 8NmZcWC0/MQOclDUNyjf4VWFAn1OUXv9HUJgopwjcpE=
Subject key identifier: 59:9E:D2:F8:E7:EA:56:4A:1C:DD:EF:F5:2F:97:6D:49:C2:F1:78:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018223BA3BD45A4B2C776DB10077F6E40F38
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WZ7S-OfqVkoc3e_1L5dtScLxeKM.roa
Signing time: Fri 22 Jul 2022 02:26:23 +0000
ROA not before: Fri 22 Jul 2022 02:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:434::/48 maxlen: 48
2a06:a005:5e1::/48 maxlen: 48
2a06:a005:857::/48 maxlen: 48
2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:23:ba:3b:d4:5a:4b:2c:77:6d:b1:00:77:f6:e4:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 22 02:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599ed2f8e7ea564a1cddeff52f976d49c2f178a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:a5:ea:82:b1:d1:6b:84:f6:59:47:e1:f7:
ad:43:5b:5e:f3:79:18:30:ba:9b:3f:fc:3a:04:1f:
c0:dc:c2:f8:c0:1e:99:4f:2e:4a:d2:c8:78:48:6c:
70:e6:c2:ff:99:3a:2a:bc:b6:ed:c9:6c:c2:3d:f3:
96:8f:12:3d:8c:b8:98:37:c7:6a:64:ce:97:fa:80:
af:49:b8:83:9c:02:c9:74:0c:9f:de:b4:07:0c:e9:
7f:9a:66:65:04:1c:43:e7:5b:40:c8:bf:4c:65:7d:
74:0c:9d:97:9a:3f:90:9d:5e:5f:7d:6c:58:17:fb:
bf:e5:ed:db:a6:15:a8:35:7d:c9:35:15:5b:00:44:
1f:02:7e:70:f6:13:9c:fc:c0:59:5c:8d:0b:98:07:
77:f0:8a:7d:50:0b:78:11:06:6e:39:8d:09:6b:8f:
8f:24:12:ac:b4:10:20:28:24:96:34:5f:39:e5:9c:
9c:bc:05:bf:42:6a:0c:ec:0b:73:7a:8d:c6:8a:87:
ce:b6:45:ed:ea:f3:18:cb:56:56:7b:6f:a0:a4:43:
27:91:0a:74:ac:1e:51:fc:f2:15:be:af:e4:ff:60:
8f:5e:01:45:a1:cf:50:dd:8a:ad:aa:17:dd:bd:2e:
32:11:3f:70:19:8e:a7:a0:b5:49:37:64:80:58:ba:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:D2:F8:E7:EA:56:4A:1C:DD:EF:F5:2F:97:6D:49:C2:F1:78:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WZ7S-OfqVkoc3e_1L5dtScLxeKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:5e1::/48
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
0a:04:c3:e6:4b:48:e4:85:74:81:bd:b0:e5:2e:75:26:0e:05:
fb:7d:de:27:49:8e:6f:69:27:31:2d:00:a3:7a:19:47:1e:4c:
35:7e:5d:b2:59:65:8b:d2:85:e3:0d:22:3d:e0:7b:1c:5e:2e:
2f:0e:2a:4e:94:00:20:96:d6:2a:5d:c8:11:7e:3b:e6:82:3e:
2d:bf:ee:5b:75:cc:6c:f6:43:90:3b:a2:37:24:a1:3c:2f:fd:
f7:ec:5e:52:9a:2b:da:cc:58:f4:50:9b:79:42:ce:6b:bd:ad:
35:e8:f5:92:f1:88:85:91:56:bd:86:8a:e4:ec:0d:01:56:69:
ec:97:75:d1:70:7f:01:4f:52:5a:a9:97:36:6f:da:06:8a:f7:
36:6c:f7:6a:dc:28:d0:97:ee:44:e6:23:e6:93:87:59:21:a1:
1e:19:09:d9:d7:a6:5d:cf:98:1e:04:72:4d:95:e7:90:af:c1:
ab:00:76:ce:e9:8d:80:0e:7b:ee:1b:5f:41:73:06:5d:eb:55:
b9:9f:54:c4:a4:48:56:66:27:93:9d:a9:c3:1e:ce:a3:bb:83:
09:b1:56:f0:08:15:89:eb:ba:a6:c2:5a:02:9b:1a:55:e8:f8:
ae:ef:68:51:ba:89:4e:c2:23:23:1f:93:c8:bf:59:a5:4e:c7:
36:f1:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org