Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XeNncJyviMnbLTFBxWX_pv9_kio.roa
File: XeNncJyviMnbLTFBxWX_pv9_kio.roa (raw, json)
Hash identifier: Hnnt3juUmUUsz/+yvMo1hgWLNjsh99tPvk600LhdmNA=
Subject key identifier: 5D:E3:67:70:9C:AF:88:C9:DB:2D:31:41:C5:65:FF:A6:FF:7F:92:2A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018256AA1924D19DC2D614183C638A821B6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XeNncJyviMnbLTFBxWX_pv9_kio.roa
Signing time: Sun 31 Jul 2022 23:49:24 +0000
ROA not before: Sun 31 Jul 2022 23:49:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 945
IP address blocks: 2a06:a001:b00b::/48 maxlen: 48
2a06:1281:b00b::/48 maxlen: 48
2a06:a006:b00b::/48 maxlen: 48
2a06:1280:b00b::/48 maxlen: 48
2a09:54c0:b00b::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:aa:19:24:d1:9d:c2:d6:14:18:3c:63:8a:82:1b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 31 23:49:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5de367709caf88c9db2d3141c565ffa6ff7f922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:80:8f:ce:a4:13:2e:1f:7a:75:76:62:38:
19:b9:ac:bc:4c:29:ff:4d:a8:a5:01:98:76:b1:b4:
fc:2b:c6:ef:86:35:72:7c:48:77:42:28:67:2e:56:
12:5d:d7:29:6d:00:f5:ea:96:36:35:12:9e:11:6f:
11:c9:5e:2c:d6:9b:c5:06:59:21:fd:c2:14:c3:2c:
8b:d1:5c:e3:87:f3:c2:5a:95:d2:a0:58:88:2b:c4:
1f:28:ef:43:de:1d:4c:cb:aa:0f:6d:73:f3:30:d5:
8f:a0:f2:5f:23:06:6e:85:db:a0:dc:e1:72:23:0e:
30:a7:15:88:4a:b4:e7:ae:7c:28:a5:fd:24:81:63:
ac:89:5e:f1:70:e9:9e:b9:a4:a1:da:65:ab:fa:e8:
30:a5:4c:c7:1b:e0:56:6d:67:42:11:88:7e:c2:a5:
52:d0:66:cd:92:6d:47:4a:c9:84:78:ab:db:60:d4:
c1:b3:2a:37:ad:1f:a8:46:f0:7a:cf:30:8d:34:2c:
57:54:71:2c:fa:f2:b6:0a:e0:03:5d:80:05:7d:7d:
71:3c:cc:ee:68:34:95:be:32:65:2d:22:8f:11:1e:
3a:e1:96:10:98:d0:6c:82:d3:65:bc:ac:2c:d5:0e:
63:28:2a:7b:8e:91:3d:48:a8:ff:59:12:7a:a8:34:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:67:70:9C:AF:88:C9:DB:2D:31:41:C5:65:FF:A6:FF:7F:92:2A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XeNncJyviMnbLTFBxWX_pv9_kio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:b00b::/48
2a06:1281:b00b::/48
2a06:a001:b00b::/48
2a06:a006:b00b::/48
2a07:54c2:b00b::/48
2a09:54c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
95:31:5d:21:d7:b2:35:b2:4a:db:07:df:9b:b7:ae:fa:ee:61:
a7:45:36:32:f7:59:6d:e1:fb:51:7d:37:d4:8c:ed:a1:24:12:
15:7d:51:bb:75:b4:8b:3b:f7:5e:97:39:4b:f4:b0:79:9e:e2:
32:eb:55:d5:09:ad:02:b5:f9:76:36:48:9e:f9:dc:2c:e5:b6:
85:56:24:52:a4:00:f9:42:4c:b1:5e:2e:9e:54:13:c5:99:17:
9a:d9:89:ef:ed:7c:7d:37:57:c7:96:cb:d5:4b:3a:95:13:bd:
aa:5a:3a:11:80:c6:44:78:37:02:e9:e3:35:05:60:49:4b:e1:
71:7b:5a:c1:8a:95:07:de:6d:ff:cb:fb:ff:d3:4d:ff:37:e9:
9e:d8:9b:84:99:fe:ff:94:ae:23:10:c6:03:f4:d0:82:5c:15:
e8:76:fe:ff:8d:19:39:2c:f3:93:0f:d0:c6:ad:c8:6e:38:da:
09:7f:ba:fa:f7:fe:d8:f4:c6:92:ba:91:82:9e:d6:75:fc:cd:
8b:bb:93:89:b6:93:96:d7:98:41:4c:8f:7a:bf:8a:b6:3f:67:
03:d7:0a:44:a0:34:ae:32:3e:a7:67:13:b4:bc:73:3b:54:df:
40:49:fc:9b:48:a3:0a:9a:4d:e5:1f:8a:1c:31:30:c1:15:8f:
a3:f6:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org