Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZSPMokcd79q95H14JjFpq1H8LEc.roa
File: ZSPMokcd79q95H14JjFpq1H8LEc.roa (raw, json)
Hash identifier: bAHw9654Fk868zPJdh4tNC5E55t6qWP/HTez1YiAYLc=
Subject key identifier: 65:23:CC:A2:47:1D:EF:DA:BD:E4:7D:78:26:31:69:AB:51:FC:2C:47
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184F023162F49A11DF1CABEB4E10B966303
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZSPMokcd79q95H14JjFpq1H8LEc.roa
Signing time: Thu 08 Dec 2022 05:09:02 +0000
ROA not before: Thu 08 Dec 2022 05:09:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14212
IP address blocks: 2a06:a005:116a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:23:16:2f:49:a1:1d:f1:ca:be:b4:e1:0b:96:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 8 05:09:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6523cca2471defdabde47d78263169ab51fc2c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:ca:f1:30:92:3e:a5:f5:1d:46:2e:17:3f:
31:14:78:03:68:02:a4:c9:9b:f2:79:94:18:66:c2:
3a:03:b8:2f:51:b7:a0:71:22:93:eb:1a:e2:5d:9d:
21:c8:90:ff:00:f6:d5:d9:71:f1:8a:fb:7a:03:db:
3f:7f:0a:33:92:d2:a7:21:3a:02:a8:31:04:2e:d9:
99:7a:d9:0b:4f:05:29:5c:0a:0c:db:42:78:ee:41:
b6:a0:cd:35:04:d6:8d:cf:4e:3c:f0:5d:36:d2:45:
a2:60:ab:2e:b1:3c:25:bd:26:41:9d:cb:8a:d5:31:
d0:a0:a6:0d:62:b7:9b:74:05:b0:79:c2:1a:b3:48:
18:88:13:12:9b:5d:a9:38:17:bb:e0:22:ab:15:6e:
7b:6c:a8:b7:b7:4c:81:1a:71:3d:4f:00:52:e0:4e:
46:3d:49:93:26:7a:99:e5:9a:8b:8f:0a:48:84:8a:
08:5a:3f:b9:3c:e1:bf:45:48:9e:fe:60:75:64:35:
c1:72:87:d3:76:2e:d3:bb:73:f6:d0:cd:d3:52:f7:
7e:43:40:4c:5f:ad:64:25:a4:06:46:92:01:c9:be:
a4:37:2d:ab:b1:7f:28:53:e0:84:6c:fd:fd:de:b4:
3e:e5:9f:ba:b2:51:b6:f6:e8:1b:ef:e4:94:21:63:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:23:CC:A2:47:1D:EF:DA:BD:E4:7D:78:26:31:69:AB:51:FC:2C:47
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZSPMokcd79q95H14JjFpq1H8LEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116a::/48
Signature Algorithm: sha256WithRSAEncryption
24:a5:04:b1:bf:f5:37:4f:7b:d5:0f:81:d8:07:6b:1c:ac:b0:
dc:b6:42:9f:67:8e:fe:62:8d:c9:da:42:49:f2:02:31:7e:53:
8f:4d:58:58:ed:3d:18:40:e4:52:e2:87:49:dc:0f:d1:fd:06:
5a:41:1b:db:66:d9:f4:ba:30:12:63:5c:ee:ab:46:62:a8:02:
3a:eb:ba:e6:d3:03:6b:65:1a:8e:66:d2:6d:e1:2a:27:36:dc:
4c:c7:b5:83:bf:06:61:a1:f0:6d:63:81:60:68:b3:5c:e4:6b:
54:4a:a4:a0:53:56:3a:6f:05:12:b0:15:24:b6:6f:4a:f5:10:
83:b6:2c:98:4c:be:1b:c9:b4:34:81:58:59:69:21:ea:64:c6:
41:30:24:b1:a6:bf:a9:eb:f3:23:8f:e0:df:a6:aa:29:d1:01:
9e:ca:dd:84:0a:b5:69:64:c9:a2:09:b7:ba:d3:3e:e3:70:ba:
9f:6d:88:07:d2:f9:37:23:f9:a2:a0:1d:03:a3:2e:04:b2:e8:
ba:3a:86:8d:34:47:83:3d:75:8e:25:9c:22:44:76:a3:01:cd:
ee:4f:1f:e7:1d:ea:bd:f5:f9:c3:b5:16:16:f3:6c:82:38:ac:
bd:d7:ef:3b:83:e3:65:f1:bf:e6:54:d6:dc:67:2c:b8:00:76:
db:7e:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org