Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bG9wRvCNc9aYnKDy3dmNtW_vq5E.roa
File: bG9wRvCNc9aYnKDy3dmNtW_vq5E.roa (raw, json)
Hash identifier: lub0Kcfi0NwgDq/oaj8B3ba+YzbUx8QjyM3o3FGSfIU=
Subject key identifier: 6C:6F:70:46:F0:8D:73:D6:98:9C:A0:F2:DD:D9:8D:B5:6F:EF:AB:91
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1904B14A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bG9wRvCNc9aYnKDy3dmNtW_vq5E.roa
Signing time: Mon 02 May 2022 17:05:40 +0000
ROA not before: Mon 02 May 2022 17:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:1e::/47 maxlen: 48
2a06:a005:740::/44 maxlen: 48
2a06:a005:4e0::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419737930 (0x1904b14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 2 17:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c6f7046f08d73d6989ca0f2ddd98db56fefab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:b6:32:83:36:f4:ef:8a:72:ee:71:10:62:
f9:bb:62:d5:a2:79:c6:d4:17:ae:f3:d8:a8:21:4b:
56:15:79:53:cf:93:fc:97:b9:4e:b8:b6:e0:c6:1f:
68:30:ef:40:08:e8:5f:55:45:be:e7:c8:6d:54:7b:
c9:c2:d5:bc:4b:bf:41:98:17:c3:3a:8a:53:32:c7:
29:12:26:55:42:a2:d5:c4:30:1f:57:13:9e:09:5a:
07:ff:42:3b:ae:60:55:85:15:3b:b4:ee:1b:65:7c:
ec:cc:5e:c6:ac:bc:f2:0f:f9:09:ad:38:b4:38:3c:
a2:ea:cf:96:45:cf:34:6f:59:61:df:97:a9:d1:f0:
57:57:af:82:6a:23:57:ca:b7:61:83:2c:9e:af:ac:
2e:94:6b:e2:ce:bc:f1:8c:a7:3b:3f:f1:42:2e:0d:
6f:8d:10:bd:be:77:9b:47:d0:ff:28:5f:31:f4:bc:
9e:22:7a:53:30:d2:51:75:c9:81:4e:c6:c9:87:83:
04:4a:dd:92:85:3a:28:fb:10:ad:bf:d7:f1:1f:b3:
97:95:04:13:da:05:27:6f:88:3d:1b:25:e8:df:b6:
62:07:ec:af:b5:d3:38:8e:23:6d:a0:f3:c8:48:b0:
70:3d:88:1a:ed:f8:14:de:4a:77:be:3e:fe:2c:a2:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:70:46:F0:8D:73:D6:98:9C:A0:F2:DD:D9:8D:B5:6F:EF:AB:91
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bG9wRvCNc9aYnKDy3dmNtW_vq5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e::/47
2a06:a005:4e0::/44
2a06:a005:670::/44
2a06:a005:740::/44
Signature Algorithm: sha256WithRSAEncryption
62:33:1c:f9:c9:9c:a0:b3:a0:ce:01:5b:eb:b4:f7:2b:6f:3b:
c0:29:ef:f5:86:08:1d:b6:42:bd:af:65:de:9a:39:e7:65:0a:
ae:7b:d6:d8:77:96:9f:6a:ec:08:9b:d1:71:77:8a:9e:e3:b4:
79:88:8c:c5:f6:f6:f5:b8:4e:cb:d3:16:88:3e:2a:15:c9:ef:
42:42:75:c0:37:1a:48:93:dd:37:fa:56:44:2e:6b:c8:d4:74:
01:05:30:c9:1b:09:e1:99:da:ef:da:53:cd:1c:c0:c8:c6:d3:
2e:13:97:e8:f2:e4:61:82:be:5a:90:a0:a9:ae:60:e6:9f:cb:
83:4f:38:5e:a4:a5:ff:18:45:64:fb:a4:7a:c5:22:5e:d5:09:
a9:37:f4:2c:83:28:48:ca:79:42:ce:9c:64:2e:62:15:35:66:
23:9b:eb:ba:19:6b:f2:63:60:04:cd:5b:ca:4b:b1:b9:43:0a:
2f:3a:89:9a:ce:a9:d4:59:f3:03:e2:4c:03:73:2c:37:42:e1:
e8:6a:5d:20:5b:47:f4:6c:84:5a:1f:b6:15:9e:8e:0f:94:42:
01:f5:61:e3:d5:42:be:14:2e:1f:51:5f:5b:4d:78:42:0a:ba:
dd:6a:3c:85:d7:c2:d1:55:cb:98:0d:f6:4c:8f:5b:c1:86:d7:
3b:92:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org