Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/el1lXgy0bE4hEsKLidpa8dz1ytQ.roa
File: el1lXgy0bE4hEsKLidpa8dz1ytQ.roa (raw, json)
Hash identifier: UasF4nIqmSwlTkt9S7l4wZX268VcwoRBVFmGgPL0ODs=
Subject key identifier: 7A:5D:65:5E:0C:B4:6C:4E:21:12:C2:8B:89:DA:5A:F1:DC:F5:CA:D4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01830A001F0F3C4E1DBDB82720E6A5DC6A6A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/el1lXgy0bE4hEsKLidpa8dz1ytQ.roa
Signing time: Sun 04 Sep 2022 19:35:23 +0000
ROA not before: Sun 04 Sep 2022 19:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210445
IP address blocks: 2a06:a005:d2c::/46 maxlen: 48
2a06:a005:f60::/44 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0a:00:1f:0f:3c:4e:1d:bd:b8:27:20:e6:a5:dc:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 4 19:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a5d655e0cb46c4e2112c28b89da5af1dcf5cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:a0:31:e8:f4:78:78:24:aa:31:24:c3:78:
18:8a:d7:8f:e8:66:61:15:38:ac:b2:19:7b:0f:01:
6f:24:df:02:7c:39:60:5d:49:48:a6:66:56:b4:91:
c8:cf:43:12:78:79:06:2c:c6:8d:3a:7a:99:9e:c4:
1d:c2:ab:b2:a6:10:3b:80:26:90:2e:2f:4f:77:5c:
c1:d2:3f:a2:b8:db:26:bf:22:6b:74:f0:27:d9:db:
09:42:d0:f7:90:9a:9c:bf:df:ec:36:ab:c2:c9:73:
1a:8d:d7:03:b1:08:8f:37:19:70:ab:bd:cb:29:ff:
a7:3d:40:f2:ce:d8:47:96:cf:92:9e:39:22:a2:ad:
13:0b:28:20:5e:e0:53:c7:ac:84:b0:84:c9:20:33:
42:b3:47:ee:5c:6d:30:29:0e:4c:cd:d8:e1:c4:fc:
b5:15:ad:36:61:19:f0:4d:5f:f1:2d:8e:cf:3e:e8:
a4:b7:7e:a7:88:2d:74:78:e2:f4:8f:26:be:32:b2:
1b:eb:b3:9b:db:8d:0a:ee:dc:fc:aa:6d:ab:dd:04:
1f:24:90:de:90:75:c6:8f:7a:39:d7:2b:e0:69:a0:
77:1a:44:e3:b6:63:79:48:f8:95:fd:7a:a4:bf:98:
f8:77:6d:76:c3:c5:95:e1:cc:e5:94:65:a2:ee:bc:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:65:5E:0C:B4:6C:4E:21:12:C2:8B:89:DA:5A:F1:DC:F5:CA:D4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/el1lXgy0bE4hEsKLidpa8dz1ytQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2c::/46
2a06:a005:f60::/44
2a06:a005:12f0::/44
Signature Algorithm: sha256WithRSAEncryption
52:e1:c3:2d:41:24:95:a9:2d:94:c6:30:e3:8b:06:89:20:44:
60:d7:b2:a5:26:a4:c3:aa:04:48:30:d6:41:66:db:6d:0c:72:
b9:ab:34:a7:96:c8:3f:ca:a5:43:9d:49:02:a2:b8:5b:7b:24:
79:fe:aa:82:8b:7f:f8:ae:57:18:77:4e:56:07:07:81:04:22:
53:5e:a2:96:bf:2f:53:ab:04:eb:aa:5d:58:0e:00:3d:8f:73:
33:e6:b0:d8:2a:cb:5a:8c:90:5b:ce:df:bf:a9:e8:98:d4:7b:
05:23:3d:37:09:db:be:a6:cd:ae:56:be:08:36:6a:83:51:2c:
9c:97:df:64:03:af:83:3f:78:d3:7f:f7:d0:61:a7:b5:0b:4f:
e1:8f:55:97:af:2a:63:e3:29:ee:f5:77:2c:fc:8e:ad:a2:6c:
34:86:25:9b:f0:47:e1:6a:c5:c1:01:bc:7d:32:4a:03:3d:44:
da:bf:95:ca:54:31:9c:45:0c:2e:a9:87:ad:cb:be:16:20:39:
89:f8:6f:7a:af:5e:52:cc:0d:d8:46:f2:b0:f0:e2:63:b7:f9:
8e:9a:07:8d:b5:9f:cf:4f:df:fe:2e:8b:de:1a:d8:e0:8e:02:
58:39:e1:76:5b:6c:eb:98:a7:06:c6:87:cc:4f:03:8d:7b:18:
0c:07:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:18 2023 by rpki-client on console-ams.rpki-client.org