Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa
File: alPPeBjfqJHb-CdFLjNaosGp3p4.roa (raw, json)
Hash identifier: DmXao89e+IeXQOmVe/ozxYhw2Y0QhJ0lo3sdIcYB5/w=
Subject key identifier: 6A:53:CF:78:18:DF:A8:91:DB:F8:27:45:2E:33:5A:A2:C1:A9:DE:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183681636075833E85BAE0FF1DFD06D4274
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa
Signing time: Fri 23 Sep 2022 02:03:49 +0000
ROA not before: Fri 23 Sep 2022 02:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005:1730::/44 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:5ae::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
2a06:a005:5ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:16:36:07:58:33:e8:5b:ae:0f:f1:df:d0:6d:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 23 02:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a53cf7818dfa891dbf827452e335aa2c1a9de9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:a4:12:f6:c0:d0:c2:f6:32:cd:0f:9c:56:
c8:cd:b6:af:b1:3a:42:29:00:ed:02:71:26:9c:95:
af:16:59:25:b0:01:62:02:25:91:37:d6:4f:e9:9b:
8b:0f:a7:6b:fa:43:d2:1f:37:e7:e1:7e:dd:fa:56:
99:68:7d:1f:32:77:33:dc:ed:ca:2f:28:52:40:14:
25:44:b8:8e:64:92:24:d8:f6:61:fb:7f:5a:83:8d:
9d:b9:79:3b:2e:c8:86:cb:e3:a2:48:47:42:e0:ec:
94:32:88:94:d6:73:96:58:70:0d:1d:00:72:e6:d4:
9a:f8:83:42:c3:83:9d:09:25:d3:8a:02:39:3b:f5:
50:aa:72:7b:7f:ff:0d:34:1d:4b:b2:13:32:90:de:
9f:3e:af:7d:c7:08:fd:4f:d0:3e:e8:bf:ae:11:8b:
c4:4b:ac:ba:c6:ab:9d:2b:fb:53:52:40:92:59:88:
fe:7f:8c:4e:39:cb:aa:55:c7:75:23:1b:39:34:ef:
3f:4c:06:1c:2d:a7:ef:1e:5b:92:56:82:62:3e:47:
e0:37:c8:5d:cf:10:d2:3a:8c:c7:b1:81:86:df:0c:
85:b7:2d:76:d8:a2:71:d7:54:49:a7:85:0d:5d:d7:
d7:79:c3:56:d4:36:e3:c8:55:45:95:07:46:5a:16:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:CF:78:18:DF:A8:91:DB:F8:27:45:2E:33:5A:A2:C1:A9:DE:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
27:44:92:91:72:cd:a3:34:b5:c6:43:b9:bd:19:e0:88:69:9c:
ea:83:4f:c8:f8:f1:84:0b:2b:f2:2d:92:80:f4:4e:3b:0b:e3:
b3:88:9d:e4:d6:a5:59:55:d7:fe:ff:6f:02:44:59:04:86:87:
c8:d3:ba:2f:dc:32:85:99:1b:77:88:13:19:9e:a3:fa:71:f4:
82:50:e7:49:fa:64:3e:9c:5a:7b:40:5f:a2:69:b3:e3:81:30:
e9:2a:f3:56:4a:17:94:29:bb:83:e3:45:39:09:68:ba:4f:85:
92:09:0e:ef:1f:68:44:7f:39:15:80:fb:15:e5:f2:0e:97:d0:
55:fe:96:b9:19:e1:a2:06:9c:65:b6:db:bb:1f:ce:c2:53:a8:
da:48:30:b9:a0:b3:c8:49:be:0d:72:5e:66:90:e2:6e:ce:c3:
f8:c6:6a:8c:a8:63:0d:d5:45:18:08:ee:5f:ab:3e:8b:30:4f:
f0:d0:cc:07:75:72:3f:3a:e5:c0:dd:e4:7c:99:dd:87:7d:a0:
8a:98:e7:7b:13:ab:89:ec:2a:ce:3b:0d:fd:e3:2a:29:6e:a0:
d8:f5:a6:bb:5d:b2:19:d8:bf:73:01:2d:d3:b6:ce:60:28:d1:
ee:bd:d0:87:fb:10:56:67:84:a4:c1:41:16:05:1c:75:ca:73:
05:e1:a5:7e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYNoFjYHWDPoW64P8d/QbUJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTIzMDIwMzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTUzY2Y3ODE4ZGZhODkxZGJmODI3NDUyZTMzNWFhMmMxYTlkZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ekEvbA0ML2Ms0PnFbIzbavsTpC
KQDtAnEmnJWvFlklsAFiAiWRN9ZP6ZuLD6dr+kPSHzfn4X7d+laZaH0fMncz3O3K
LyhSQBQlRLiOZJIk2PZh+39ag42duXk7LsiGy+OiSEdC4OyUMoiU1nOWWHANHQBy
5tSa+INCw4OdCSXTigI5O/VQqnJ7f/8NNB1LshMykN6fPq99xwj9T9A+6L+uEYvE
S6y6xqudK/tTUkCSWYj+f4xOOcuqVcd1Ixs5NO8/TAYcLafvHluSVoJiPkfgN8hd
zxDSOozHsYGG3wyFty122KJx11RJp4UNXdfXecNW1DbjyFVFlQdGWhY//QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGpTz3gY36iR2/gnRS4zWqLBqd6eMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvYWxQUGVCamZxSkhiLUNkRkxqTmFvc0dwM3A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAAjAwAwYAKgXfxxMD
BgQqBhKAEAMFACoGoAAwDgMFACoGoAMDBQEqBqAEAwcAKgdUwrALMA0GCSqGSIb3
DQEBCwUAA4IBAQAnRJKRcs2jNLXGQ7m9GeCIaZzqg0/I+PGECyvyLZKA9E47C+Oz
iJ3k1qVZVdf+/28CRFkEhofI07ov3DKFmRt3iBMZnqP6cfSCUOdJ+mQ+nFp7QF+i
abPjgTDpKvNWSheUKbuD40U5CWi6T4WSCQ7vH2hEfzkVgPsV5fIOl9BV/pa5GeGi
Bpxlttu7H87CU6jaSDC5oLPISb4Ncl5mkOJuzsP4xmqMqGMN1UUYCO5fqz6LME/w
0MwHdXI/OuXA3eR8md2HfaCKmOd7E6uJ7CrOOw394yopbqDY9aa7XbIZ2L9zAS3T
ts5gKNHuvdCH+xBWZ4SkwUEWBRx1ynMF4aV+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org