Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa
File: bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa (raw, json)
Hash identifier: uN+zwBmQuvt6ps6+LwbIAa2nB1skumGaO7LJrbnqEIg=
Subject key identifier: 6D:0F:C8:71:11:B7:2F:79:E7:33:36:07:95:A2:F2:52:8A:F7:06:B3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825C39BCCDBD35C94F98F1278C01738A91
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa
Signing time: Tue 02 Aug 2022 01:44:23 +0000
ROA not before: Tue 02 Aug 2022 01:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213383
IP address blocks: 2a06:a005:5a0::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
2a06:a005:480::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:39:bc:cd:bd:35:c9:4f:98:f1:27:8c:01:73:8a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 2 01:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d0fc87111b72f79e733360795a2f2528af706b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:bf:44:6e:dd:8c:e3:cb:67:54:dc:ba:67:
4f:29:b0:c6:61:de:c0:03:ad:51:99:b7:a3:3f:ab:
ac:2a:2e:d2:da:a6:e4:90:f1:54:fe:cf:f4:19:ad:
98:24:1c:8d:6b:bf:6c:e4:b4:b4:80:8e:0f:86:58:
6d:b2:f7:86:9d:56:84:5c:5b:75:37:5c:21:a9:87:
a9:64:fd:1a:58:11:aa:71:a2:81:0c:82:4d:4f:55:
de:dc:7e:b3:3e:be:3f:77:da:53:52:fe:bc:ef:75:
f5:4d:67:bf:6f:1b:46:f7:a2:d0:4a:20:96:70:cd:
d0:d6:99:51:66:6b:04:a4:ee:4c:31:55:97:26:3d:
21:51:91:1c:77:01:9b:d7:b9:a7:90:2c:7d:5a:5c:
3c:35:c6:94:bc:e3:9d:8d:7d:19:78:4f:58:cb:95:
00:86:59:c9:b5:3f:e7:78:94:11:0c:54:07:f3:72:
0a:90:2e:6a:f7:21:17:3b:85:c2:ca:08:c9:d7:ea:
9a:da:e3:bb:23:36:b2:38:55:25:5c:13:fe:3d:76:
ee:c0:8f:05:b6:3b:ce:c7:81:31:30:9f:c8:d3:ca:
24:e0:37:bb:5d:e2:f0:9e:62:bd:d8:e2:ff:e8:8f:
85:93:d3:0b:ee:08:e4:c0:97:02:f9:12:e8:de:e5:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:C8:71:11:B7:2F:79:E7:33:36:07:95:A2:F2:52:8A:F7:06:B3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:480::/44
2a06:a005:5a0::/44
2a06:a005:1600::/44
Signature Algorithm: sha256WithRSAEncryption
2d:e8:dd:a9:d4:a6:c6:6e:86:a7:40:70:21:ef:52:f2:7f:2c:
38:1e:4b:9d:cc:3a:9c:c3:a5:bf:3c:dc:b8:3c:ad:ef:9c:75:
4e:fb:61:98:2d:b2:41:df:2f:23:5c:46:35:69:28:5f:4e:78:
be:98:38:e8:59:6b:31:6b:78:66:23:5c:3a:fb:be:e6:67:a8:
d1:35:00:21:25:6f:81:64:b5:1c:bc:d0:20:d4:15:87:0d:57:
c3:a8:41:17:b3:cb:27:fa:18:7c:fa:a8:b3:d9:6c:b4:b7:19:
8d:d5:ac:62:d1:ad:e7:c1:a4:94:63:eb:93:27:a6:6f:c8:c4:
1b:58:2a:61:f4:79:2a:e8:f0:58:44:05:35:34:7a:80:af:16:
5e:45:d1:bc:c4:08:54:41:30:fb:25:ff:e2:0b:a0:e7:70:3e:
a3:69:26:8e:94:65:ba:e9:05:f1:26:06:89:b3:60:fe:45:94:
8a:00:c7:a8:0f:ac:b5:f5:61:9a:80:08:dd:e8:c0:81:f0:73:
fa:df:ae:e6:7a:0c:af:c3:fb:c7:3b:f5:fa:da:df:c0:5a:96:
26:00:c9:a3:6d:b0:1e:3f:12:30:ef:3e:5f:2a:2a:69:3b:c1:
11:a8:f4:e0:10:be:b4:24:af:f6:e6:cb:66:2e:11:78:c1:af:
fb:ec:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org