Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XlrU7LtDtqkDh0leP7YYDXxa-xE.roa
File: XlrU7LtDtqkDh0leP7YYDXxa-xE.roa (raw, json)
Hash identifier: 8qgHObSLZxf+Tjf10ksJTI7ZNKVqrwmzIo9PtaS9ZSA=
Subject key identifier: 5E:5A:D4:EC:BB:43:B6:A9:03:87:49:5E:3F:B6:18:0D:7C:5A:FB:11
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018398CAC5C77E962F9E9F25205A6C1DFD98
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XlrU7LtDtqkDh0leP7YYDXxa-xE.roa
Signing time: Sun 02 Oct 2022 13:02:49 +0000
ROA not before: Sun 02 Oct 2022 13:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202996
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a005:1c00::/44 maxlen: 48
2a06:a005:1680::/44 maxlen: 48
2a06:a005:16b0::/44 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:98:ca:c5:c7:7e:96:2f:9e:9f:25:20:5a:6c:1d:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 2 13:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e5ad4ecbb43b6a90387495e3fb6180d7c5afb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:9e:b7:0f:5a:ce:bc:bc:0a:f4:09:18:e2:
b3:4b:f9:ba:ef:15:02:52:28:a5:1a:4a:d0:c1:ef:
be:da:2a:53:cb:38:6f:d5:1d:27:c1:f5:02:33:5d:
08:7c:73:f2:56:71:0f:26:30:6b:5c:d4:fd:24:25:
ab:e0:b5:14:86:c9:02:04:42:35:8e:8a:09:2f:4d:
83:30:a0:66:b4:c8:02:21:7e:d8:7d:95:a6:08:fd:
e2:93:2a:93:98:c8:0e:7a:d4:33:ec:2e:01:96:a0:
86:ba:6d:31:8d:1d:03:42:20:f1:ba:5b:91:c0:d1:
fc:70:96:08:6f:de:9d:1b:62:71:07:4a:3a:46:27:
f5:05:59:46:10:2b:97:38:75:d7:bc:ec:ef:d4:17:
7c:5a:01:c0:94:f1:bf:04:44:69:1e:ae:29:40:57:
3c:4f:54:01:c9:34:c4:09:ee:28:9c:43:b5:48:99:
bb:09:cf:94:e0:7b:54:ac:f8:f6:bb:7a:bf:42:c7:
80:ba:a4:06:f7:ed:36:3f:94:dc:12:b1:ea:de:b0:
7b:6d:1c:fa:2c:2f:c1:63:d6:c8:a3:6e:c8:1e:53:
48:16:8d:fe:67:0c:40:15:df:77:3d:2c:c5:30:e0:
0b:e8:08:48:b1:5a:81:70:f4:5e:1a:5f:32:bf:18:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5A:D4:EC:BB:43:B6:A9:03:87:49:5E:3F:B6:18:0D:7C:5A:FB:11
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XlrU7LtDtqkDh0leP7YYDXxa-xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:d2b::/48
2a06:a005:1680::/44
2a06:a005:16b0::/44
2a06:a005:1c00::/44
Signature Algorithm: sha256WithRSAEncryption
7b:c2:24:93:6d:f2:48:18:5f:33:2c:42:ff:f1:8d:a5:cf:f0:
44:34:12:e1:40:2c:2d:4a:8d:1c:a7:06:d0:4a:11:ee:78:ed:
c0:7f:9c:30:c3:11:3d:d1:6c:65:4b:5d:57:54:51:04:88:77:
a2:64:62:51:6d:aa:42:aa:f8:2c:12:f3:a4:cd:35:f0:c3:e6:
25:5c:65:a7:bb:ea:f7:6f:8c:c9:28:f3:35:9e:e0:66:dc:63:
3a:bb:35:fb:fc:b6:1a:35:a8:2b:4a:d5:8f:b3:f6:3b:b5:83:
bd:ff:f5:d9:6f:e2:99:ea:8e:fd:bd:87:00:13:a1:3b:29:e6:
ce:0f:3b:04:d3:52:49:ec:ed:91:9c:54:a4:22:d3:ad:d3:4b:
9b:c9:77:e3:67:9e:23:73:99:89:2b:9c:31:18:92:ef:f6:f1:
43:df:b6:5f:60:ca:e2:fb:29:a1:c2:b7:5c:31:0f:1d:30:ba:
23:d2:a4:78:77:f3:84:03:41:7d:83:71:be:b5:ed:04:3d:cb:
78:94:6e:9d:83:0f:b5:c8:b6:17:90:be:71:32:12:97:ea:08:
c9:db:cd:76:89:ee:70:8e:b8:7d:b1:48:2b:25:fc:d1:b9:17:
77:67:63:1e:11:b5:ce:8f:2a:c8:cc:77:dd:9f:75:94:d7:67:
48:90:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:18 2023 by rpki-client on console-ams.rpki-client.org