Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dSoCdq0Tcfflg2B9Qvtobzy0seg.roa
File: dSoCdq0Tcfflg2B9Qvtobzy0seg.roa (raw, json)
Hash identifier: zpKe6D0V0HQIyaSPPNWOXjUQFmxNZABjF1vRoPs/Gb4=
Subject key identifier: 75:2A:02:76:AD:13:71:F7:E5:83:60:7D:42:FB:68:6F:3C:B4:B1:E8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C746E37F5FB8DE631DF7355B7A000C49
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dSoCdq0Tcfflg2B9Qvtobzy0seg.roa
Signing time: Wed 30 Nov 2022 06:43:42 +0000
ROA not before: Wed 30 Nov 2022 06:43:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:46:e3:7f:5f:b8:de:63:1d:f7:35:5b:7a:00:0c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 06:43:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=752a0276ad1371f7e583607d42fb686f3cb4b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:ed:35:e7:fc:84:06:f6:a7:37:8c:c0:cd:
a7:0f:f9:63:df:fa:d6:f1:cf:b5:01:be:9a:67:1d:
17:de:f3:c5:74:7b:f8:70:ca:ac:bf:0b:7e:cc:a6:
98:39:e8:d7:f4:45:b3:3e:ae:f0:47:7f:6a:8b:9a:
cb:42:52:61:a3:b7:69:6d:bb:23:18:66:1b:0b:bc:
7b:59:59:a2:e6:8d:d3:5e:e8:92:aa:f1:c3:6e:c8:
d0:0c:bb:01:21:97:07:6d:b3:5f:e9:12:49:70:0b:
4b:51:15:2a:54:bd:1c:9f:0b:0e:b1:54:bd:a0:ae:
26:d6:61:6b:7d:b1:76:a9:9c:a7:de:68:11:68:92:
ae:ca:4b:bd:ff:76:d7:9f:d2:57:22:6d:bb:83:c6:
0d:60:ac:65:f3:23:2f:1a:0c:a9:cb:f1:87:39:1b:
37:ea:98:c2:3c:a2:b2:d7:9e:50:b9:47:36:94:25:
50:6d:c0:ba:bc:92:39:90:d7:b1:be:a4:12:e7:6e:
6e:e2:68:ef:22:39:ec:60:7a:a7:97:c5:4b:1a:3b:
63:4b:98:c6:de:e5:92:ae:de:9a:64:67:18:b8:ac:
4c:6f:08:c8:cf:5c:e1:94:bb:04:d2:3b:51:6d:6c:
56:40:0b:a8:2b:9e:49:ed:8c:44:63:c1:4d:f1:cf:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:02:76:AD:13:71:F7:E5:83:60:7D:42:FB:68:6F:3C:B4:B1:E8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dSoCdq0Tcfflg2B9Qvtobzy0seg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
1c:c9:25:85:a3:f9:2e:5b:f2:88:28:b2:29:c2:cb:a9:55:22:
96:a6:dd:02:5c:ed:99:31:07:d7:75:3a:d6:2e:33:0c:e3:23:
b3:c3:d9:4c:0e:4e:b6:6a:36:6b:2c:1f:f9:dc:c2:41:88:93:
d0:35:47:2c:84:78:e8:d8:86:e4:e8:13:32:ac:cc:32:23:d9:
97:ba:44:08:7f:71:23:30:a0:c2:26:e1:21:75:bf:b0:1c:fa:
03:93:e6:5e:53:05:51:c1:ee:7c:2f:98:fd:bc:d4:21:06:ea:
de:9a:cd:c9:8f:71:74:2c:91:51:ea:f6:5b:77:16:89:d0:5b:
ba:7a:b1:31:a6:c7:e0:63:83:8e:c2:fa:0c:ff:56:f9:3a:f7:
1b:17:00:4e:31:a3:f5:cc:0c:e4:66:dd:e9:bd:c9:e4:ee:63:
9a:ad:98:3c:fd:49:f4:49:50:bc:28:ba:2b:c2:71:34:ff:a8:
44:4d:2e:9d:8a:1e:e1:a8:4b:ac:e3:33:19:a7:03:95:2c:9a:
0d:73:41:40:05:b6:a5:e0:51:ea:cd:bc:2f:84:e1:bc:52:6c:
ba:90:dd:d1:77:12:9b:2b:88:e0:e0:16:c6:4c:b4:13:04:12:
21:e7:e5:df:13:26:2d:c1:dc:0f:0f:58:cd:e3:9f:02:59:d9:
e7:c6:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org