Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZiciWvfHxkaFKEOxrPQk71Eigj8.roa
File: ZiciWvfHxkaFKEOxrPQk71Eigj8.roa (raw, json)
Hash identifier: jeLHCfB4hrVOIeCZebzjOgg3sNxKsUkh9koKldG4kJk=
Subject key identifier: 66:27:22:5A:F7:C7:C6:46:85:28:43:B1:AC:F4:24:EF:51:22:82:3F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821AB19CE4FC1FA6B11CA1A455E1DC12B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZiciWvfHxkaFKEOxrPQk71Eigj8.roa
Signing time: Wed 20 Jul 2022 08:20:23 +0000
ROA not before: Wed 20 Jul 2022 08:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209310
IP address blocks: 2a06:a005:439::/48 maxlen: 48
2a06:a005:43a::/48 maxlen: 48
2a06:a005:438::/48 maxlen: 48
2a06:a005:43b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:b1:9c:e4:fc:1f:a6:b1:1c:a1:a4:55:e1:dc:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 08:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6627225af7c7c646852843b1acf424ef5122823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:8c:75:67:1b:c6:ef:ff:5a:ba:27:d6:1d:
db:3d:34:34:ba:fe:9d:4c:81:70:f2:da:66:31:fc:
f1:76:27:40:17:b2:b0:c3:8c:60:67:bf:e5:fd:12:
b2:68:d8:43:63:c4:b8:57:01:42:d6:77:f6:bc:d8:
7b:a7:73:d6:dc:d1:20:a4:c0:64:6a:2d:c3:be:bd:
bc:eb:36:0c:db:48:7f:ff:ee:0a:d7:7b:5d:58:43:
82:c4:80:70:17:7b:97:d5:41:cd:71:af:3a:90:a2:
71:01:b3:df:7b:71:ac:58:03:b7:5f:5c:79:fe:42:
43:01:b8:f7:91:e1:dc:4f:3f:ef:da:ea:0c:63:67:
9e:59:f8:1a:2b:5d:38:dc:05:d6:78:b6:55:1d:71:
63:31:13:6d:30:2f:cc:26:a1:5c:60:d3:61:80:d9:
f9:24:a2:79:9e:2e:9d:52:bb:78:00:9b:2d:45:52:
64:82:43:2d:f9:36:ed:0d:d1:39:d8:3a:cc:77:53:
c9:3b:4d:f6:7b:a0:ec:8c:c5:04:53:6f:0a:58:12:
e0:b3:56:1c:af:9b:98:da:e1:da:6a:1d:ea:80:70:
2e:10:9c:19:4d:3b:33:91:63:38:4b:58:59:b3:b1:
02:3d:83:65:aa:08:9b:60:1d:7e:06:b0:35:a1:53:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:22:5A:F7:C7:C6:46:85:28:43:B1:AC:F4:24:EF:51:22:82:3F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZiciWvfHxkaFKEOxrPQk71Eigj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:438::/46
Signature Algorithm: sha256WithRSAEncryption
6d:6d:47:30:9a:ac:71:ab:c1:18:bb:3d:55:e5:c8:43:8f:42:
26:46:11:c6:ea:1e:d1:30:79:04:13:6d:56:b3:08:5c:23:f5:
0f:6a:53:a1:65:e6:75:b5:18:05:97:cc:94:26:29:71:0f:5a:
40:69:14:f6:e2:b6:23:17:11:f1:5b:9a:30:62:00:8d:47:ef:
bf:b0:0f:e8:8b:ce:92:34:25:ad:92:f5:8e:f2:64:57:95:b8:
27:50:02:d7:60:3a:f7:59:1d:15:26:78:e1:89:6d:1d:1e:9b:
00:7f:18:21:aa:d5:df:d0:c3:6b:b4:d0:b7:9e:e4:74:6c:c7:
d2:fc:2e:48:04:ac:1f:8e:45:1e:0e:b8:af:57:3d:da:76:62:
70:8b:8f:50:df:56:52:00:93:1e:0e:04:b0:09:e3:63:45:9d:
d3:6e:31:82:87:6b:d9:4d:f1:6a:34:04:da:83:80:7c:f9:47:
4d:78:b9:cd:8a:04:a2:03:0e:87:68:9b:dc:17:b5:50:41:78:
4c:2a:f6:c0:f7:d4:3b:52:0b:53:11:19:ae:88:e2:f4:11:7d:
0a:f5:20:9c:23:0d:cc:aa:b4:8a:e4:b3:86:f6:41:cf:07:c0:
43:db:84:87:ea:d8:a8:4d:43:de:1c:13:24:5a:0a:cc:54:3b:
49:02:d3:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIasZzk/B+msRyhpFXh3BK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIwMDgyMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjI3MjI1YWY3YzdjNjQ2ODUyODQzYjFhY2Y0MjRlZjUxMjI4MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB+MdWcbxu//Wron1h3bPTQ0uv6d
TIFw8tpmMfzxdidAF7Kww4xgZ7/l/RKyaNhDY8S4VwFC1nf2vNh7p3PW3NEgpMBk
ai3Dvr286zYM20h//+4K13tdWEOCxIBwF3uX1UHNca86kKJxAbPfe3GsWAO3X1x5
/kJDAbj3keHcTz/v2uoMY2eeWfgaK1043AXWeLZVHXFjMRNtMC/MJqFcYNNhgNn5
JKJ5ni6dUrt4AJstRVJkgkMt+TbtDdE52DrMd1PJO032e6DsjMUEU28KWBLgs1Yc
r5uY2uHaah3qgHAuEJwZTTszkWM4S1hZs7ECPYNlqgibYB1+BrA1oVNCbQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGYnIlr3x8ZGhShDsaz0JO9RIoI/MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvWmljaVd2Zkh4a2FGS0VPeHJQUWs3MUVpZ2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgagBQQ4
MA0GCSqGSIb3DQEBCwUAA4IBAQBtbUcwmqxxq8EYuz1V5chDj0ImRhHG6h7RMHkE
E21WswhcI/UPalOhZeZ1tRgFl8yUJilxD1pAaRT24rYjFxHxW5owYgCNR++/sA/o
i86SNCWtkvWO8mRXlbgnUALXYDr3WR0VJnjhiW0dHpsAfxghqtXf0MNrtNC3nuR0
bMfS/C5IBKwfjkUeDrivVz3admJwi49Q31ZSAJMeDgSwCeNjRZ3TbjGCh2vZTfFq
NATag4B8+UdNeLnNigSiAw6HaJvcF7VQQXhMKvbA99Q7UgtTERmuiOL0EX0K9SCc
Iw3MqrSK5LOG9kHPB8BD24SH6tioTUPeHBMkWgrMVDtJAtME
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org