Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eSIAALLhF5ghMWPEibnxmw846Vw.roa
File: eSIAALLhF5ghMWPEibnxmw846Vw.roa (raw, json)
Hash identifier: DfJ1LVvMTn19tDlH8blAKXtsm3Hg0glGOOD1Luk4Wy0=
Subject key identifier: 79:22:00:00:B2:E1:17:98:21:31:63:C4:89:B9:F1:9B:0F:38:E9:5C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833124FDB9B31CFA34DFFEBFFF7CA34C1D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eSIAALLhF5ghMWPEibnxmw846Vw.roa
Signing time: Mon 12 Sep 2022 10:00:51 +0000
ROA not before: Mon 12 Sep 2022 10:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202996
IP address blocks: 2a06:a005:1c80::/45 maxlen: 48
2a06:a005:1c00::/44 maxlen: 48
2a06:a005:1c70::/44 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:24:fd:b9:b3:1c:fa:34:df:fe:bf:ff:7c:a3:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 12 10:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79220000b2e11798213163c489b9f19b0f38e95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:c7:2a:3e:04:0b:cd:28:ef:96:9c:e5:02:
6e:9f:2f:e2:77:58:10:96:b7:6a:2f:df:c5:32:6a:
3c:50:c8:d3:d7:0a:fb:6a:a7:97:e0:85:63:d6:a0:
3c:fa:c4:f0:0c:80:d0:bf:a3:93:4b:fe:0f:a5:90:
4c:de:48:39:93:02:a2:55:0b:ab:c9:0a:ca:e7:cc:
7d:e7:1c:13:dd:ca:10:b7:42:3d:ce:00:a7:04:d4:
7b:cc:d8:d4:65:b4:5d:3c:9e:3f:31:e2:b0:b2:aa:
79:a7:ce:9f:48:5b:36:5e:61:c2:f9:5e:1b:3e:ae:
2c:ff:58:c0:c9:ac:1f:89:eb:43:fc:a2:fe:9a:78:
cc:d2:b7:6a:bf:fc:04:ee:6c:8c:16:cb:c1:cc:25:
6e:71:d0:5e:01:5c:dc:9a:d3:e5:32:df:61:11:f0:
9e:d2:82:90:15:e4:24:82:f7:09:10:b8:7c:a5:c9:
48:54:3d:44:c4:ae:6c:6c:4f:9a:e2:1b:70:19:29:
36:ea:d8:91:ad:7c:0f:8a:29:15:b5:d2:30:0d:4a:
2a:9f:5a:51:78:d3:6f:9a:ed:15:9c:ec:5b:69:ef:
4b:12:d0:2a:f5:96:e8:8e:e5:3b:d6:70:96:81:fb:
9c:7a:94:f1:ec:95:7b:f8:65:c8:c8:a2:cc:72:9a:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:00:00:B2:E1:17:98:21:31:63:C4:89:B9:F1:9B:0F:38:E9:5C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eSIAALLhF5ghMWPEibnxmw846Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
2a06:a005:1c00::/44
2a06:a005:1c70::-2a06:a005:1c87:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9f:b4:e5:81:89:7f:c8:b9:69:ce:f4:70:21:b7:ef:ad:bc:bf:
23:5e:65:ee:7a:25:7b:23:26:a5:32:4c:77:88:82:53:07:36:
ff:e6:7c:4a:f9:97:83:5e:16:23:86:8f:37:2f:ec:b1:38:ef:
ff:a2:2d:b1:b7:68:62:ba:44:e5:8d:c2:dc:52:71:df:1e:5a:
81:f5:f0:27:c0:c1:0e:ab:2e:d5:f6:bb:4a:0a:13:9c:3b:ae:
25:fd:c1:cc:f8:40:db:a7:44:e7:b0:15:33:91:5c:0c:db:b8:
1d:bc:83:53:93:7a:03:10:6b:77:cf:1a:fd:34:16:5b:83:c9:
46:65:04:a2:54:8a:6a:ad:3e:7f:7c:ae:e0:ed:2e:f7:40:6b:
f1:9d:4b:58:c4:80:15:8e:93:51:47:61:cd:24:ac:5f:a5:d2:
b2:74:e3:f3:c6:ba:4f:63:f9:70:0f:44:6f:92:38:ea:71:48:
9b:50:82:59:fd:c6:2c:cc:29:03:eb:cc:b5:f0:bd:c4:07:9c:
a9:72:2f:7f:c3:76:81:b3:b9:41:f7:8b:7a:af:6a:56:a1:fb:
ed:b8:4b:84:2a:7a:02:43:59:e5:7c:f5:8e:d3:68:d1:c8:f4:
10:9c:4d:a2:ad:90:e0:2b:70:8c:ff:ce:0b:f0:68:7b:7e:b2:
59:b0:fd:75
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYMxJP25sxz6NN/+v/98o0wdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTEyMTAwMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTIyMDAwMGIyZTExNzk4MjEzMTYzYzQ4OWI5ZjE5YjBmMzhlOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3HKj4EC80o75ac5QJuny/id1gQ
lrdqL9/FMmo8UMjT1wr7aqeX4IVj1qA8+sTwDIDQv6OTS/4PpZBM3kg5kwKiVQur
yQrK58x95xwT3coQt0I9zgCnBNR7zNjUZbRdPJ4/MeKwsqp5p86fSFs2XmHC+V4b
Pq4s/1jAyawfietD/KL+mnjM0rdqv/wE7myMFsvBzCVucdBeAVzcmtPlMt9hEfCe
0oKQFeQkgvcJELh8pclIVD1ExK5sbE+a4htwGSk26tiRrXwPiikVtdIwDUoqn1pR
eNNvmu0VnOxbae9LEtAq9ZbojuU71nCWgfucepTx7JV7+GXIyKLMcpp1dQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHkiAACy4ReYITFjxIm58ZsPOOlcMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZVNJQUFMTGhGNWdoTVdQRWlibnhtdzg0NlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKgagBQ0r
AwcEKgagBRwAMBIDBwQqBqAFHHADBwMqBqAFHIAwDQYJKoZIhvcNAQELBQADggEB
AJ+05YGJf8i5ac70cCG37628vyNeZe56JXsjJqUyTHeIglMHNv/mfEr5l4NeFiOG
jzcv7LE47/+iLbG3aGK6ROWNwtxScd8eWoH18CfAwQ6rLtX2u0oKE5w7riX9wcz4
QNunROewFTORXAzbuB28g1OTegMQa3fPGv00FluDyUZlBKJUimqtPn98ruDtLvdA
a/GdS1jEgBWOk1FHYc0krF+l0rJ04/PGuk9j+XAPRG+SOOpxSJtQgln9xizMKQPr
zLXwvcQHnKlyL3/DdoGzuUH3i3qvalah++24S4QqegJDWeV89Y7TaNHI9BCcTaKt
kOArcIz/zgvwaHt+slmw/XU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org