Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa
File: _PfvZ3RKREXkKL6E1Tz7qDqgXco.roa (raw, json)
Hash identifier: A0kVKl8yHczTkWvox3Et5oDWx9De6yM+scPHCwkY30U=
Subject key identifier: FC:F7:EF:67:74:4A:44:45:E4:28:BE:84:D5:3C:FB:A8:3A:A0:5D:CA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182C9476E9AD10036EE71BF97C3DD64F4B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa
Signing time: Tue 23 Aug 2022 05:57:57 +0000
ROA not before: Tue 23 Aug 2022 05:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:47:6e:9a:d1:00:36:ee:71:bf:97:c3:dd:64:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 23 05:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcf7ef67744a4445e428be84d53cfba83aa05dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:fc:61:75:f5:83:b0:e0:6c:c3:87:3f:ae:
ff:23:f9:08:1f:de:44:fc:9a:1f:c2:b8:ba:6f:7c:
fc:fb:c5:49:09:ee:aa:3f:1e:78:16:24:e6:b3:07:
dc:0c:bd:17:80:b6:89:02:0c:f6:b3:58:bf:e7:50:
ab:b9:86:11:a0:5a:43:69:0a:5c:69:d3:5c:07:fe:
68:95:25:d0:55:52:79:a8:c2:e8:d3:e8:48:e8:e5:
cb:2b:25:ba:50:39:39:16:7a:ff:e2:fd:e7:7b:e7:
35:6f:76:e2:98:dc:a8:8a:93:9c:be:3a:7c:32:1a:
4e:58:10:c8:57:47:2f:40:62:0d:74:b6:d7:af:46:
b9:75:f3:66:b1:ca:88:39:ff:d9:83:ab:55:c5:65:
ed:8c:72:a2:4f:eb:d0:95:6b:d5:d9:49:c6:fb:84:
07:f7:9a:3b:55:cd:7a:bf:cd:95:f9:6f:0a:eb:d4:
6d:51:87:17:8a:ed:69:b8:c9:b9:2c:1a:37:67:88:
8c:95:87:86:b4:81:83:3c:0c:ca:c3:53:a3:4e:a1:
e9:2f:40:52:7f:d3:1e:fb:03:ea:ff:b5:90:02:73:
6a:44:64:24:4b:67:41:68:e9:d9:76:52:e5:b1:02:
ae:a0:98:15:ce:04:56:cd:24:c6:d3:61:da:0c:c5:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:EF:67:74:4A:44:45:E4:28:BE:84:D5:3C:FB:A8:3A:A0:5D:CA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
72:20:c1:67:a5:b0:d0:3e:bf:44:d3:33:46:1f:a1:7f:85:14:
b6:cb:b7:2e:45:1b:6c:b5:9e:de:55:c5:68:c6:92:da:81:34:
cb:f5:fa:ac:f0:7b:f3:53:95:9c:cd:fc:f5:0b:99:13:d5:cc:
ee:b4:32:dc:a7:e6:70:94:c8:a4:72:62:ca:d4:ae:1d:79:4f:
57:99:d3:7c:cc:e4:3a:eb:c1:57:ff:90:eb:ee:dc:f2:32:12:
c9:b6:d6:98:6c:b7:0b:72:d6:2c:46:32:3d:6e:25:5a:ef:52:
61:e2:5e:83:88:ee:c5:95:7c:d7:84:61:01:69:f9:a6:92:8c:
37:f1:c6:57:a9:eb:16:1e:78:b7:a9:ea:ae:58:82:62:c0:62:
84:e0:8e:d1:39:0e:4d:76:8a:3b:e1:30:68:a6:56:e3:e2:bd:
dd:f4:bd:3b:74:95:4e:58:0a:c8:20:cf:87:7a:af:f7:5d:6a:
b4:c5:d4:05:da:a6:ec:34:8d:c0:1a:34:31:c9:ab:0f:fa:7d:
9c:a9:28:2b:72:8c:e5:e6:f1:a3:17:a2:97:c9:81:3b:21:b2:
b8:b1:be:2c:25:f1:6d:84:b9:ea:3f:ae:d4:b9:94:0e:0f:b5:
ab:b1:e7:2c:32:6f:22:fd:f5:2d:e9:d6:23:f5:c3:5d:d9:78:
c6:d3:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org