Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f1e8S7eycESlHYGxqXxKdnwszU0.roa
File: f1e8S7eycESlHYGxqXxKdnwszU0.roa (raw, json)
Hash identifier: oKv8U1n05Mz1qiZFvMxGUk9W1OGvIoX6QAoTvDoNsCs=
Subject key identifier: 7F:57:BC:4B:B7:B2:70:44:A5:1D:81:B1:A9:7C:4A:76:7C:2C:CD:4D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018432EEF2E495FD5227C2E6CBD8CEFE25A0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f1e8S7eycESlHYGxqXxKdnwszU0.roa
Signing time: Tue 01 Nov 2022 11:23:51 +0000
ROA not before: Tue 01 Nov 2022 11:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
2a06:a005:a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:ee:f2:e4:95:fd:52:27:c2:e6:cb:d8:ce:fe:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 1 11:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f57bc4bb7b27044a51d81b1a97c4a767c2ccd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:27:be:8d:a8:63:a5:3c:68:0e:59:64:67:
f4:5e:74:e0:26:83:32:27:47:ff:de:da:67:5c:df:
db:db:17:8b:b5:43:a2:e6:88:08:cd:11:66:97:b5:
6e:20:56:be:ad:c4:df:2a:a5:90:0e:52:2a:e1:e6:
e3:15:5d:f0:ee:6d:30:d5:ab:33:d1:eb:cd:cd:51:
e9:82:d9:a0:60:78:c6:7d:a4:5d:7d:c6:61:b3:b9:
30:e8:a6:8b:73:d6:1b:fc:50:9f:33:9b:5f:38:d1:
f0:d1:0d:23:bc:e3:e4:f1:ee:1d:ea:08:60:7f:05:
0a:3e:eb:09:ef:0c:f7:a0:c6:94:18:54:67:ac:6a:
fb:f2:75:11:e0:8f:c3:8f:ea:4d:a5:ea:dc:3d:47:
30:25:1d:81:18:4c:aa:ce:86:49:a8:16:12:de:86:
f1:26:ea:96:cb:ab:67:ef:13:35:07:b9:4a:40:87:
4b:ef:b0:f6:2a:0f:75:0f:5f:a0:43:46:cc:8d:a5:
68:50:29:2b:f3:e1:38:f4:48:30:0e:ea:a8:0a:b0:
1d:e7:89:6f:4e:92:ff:dd:ae:0c:cf:7d:cd:4a:20:
e7:ab:04:ea:08:9f:7e:ba:3a:2c:ce:11:37:f0:d3:
d4:af:0e:0a:6a:f0:2b:0f:99:e7:df:04:a4:33:7b:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:BC:4B:B7:B2:70:44:A5:1D:81:B1:A9:7C:4A:76:7C:2C:CD:4D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f1e8S7eycESlHYGxqXxKdnwszU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:a::/47
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
77:57:7d:85:b0:72:25:61:93:97:a3:c5:8f:2d:43:3f:b2:f0:
55:aa:fa:59:cd:56:45:6b:88:77:2c:37:64:41:45:ef:5a:a8:
40:1a:c7:2e:92:fc:4d:dc:c3:d6:e8:b8:3b:e2:0c:6a:15:35:
e5:59:7b:2b:e0:a9:76:3d:e8:b0:0d:cc:35:f4:08:a1:f3:f4:
2a:93:e9:08:52:59:e9:af:e2:37:44:00:57:54:b2:ed:0b:49:
cd:cb:6f:4c:77:94:98:20:d5:48:68:35:19:9d:be:6f:54:17:
62:3b:23:61:61:68:ab:60:d3:6e:8f:07:df:f9:97:2a:b6:50:
7a:5c:70:44:e0:79:ea:18:db:97:fb:12:14:0e:54:af:bc:05:
66:85:5a:c7:9d:68:8a:26:bc:4e:54:50:69:05:ad:02:79:25:
8c:90:fe:50:53:89:aa:b5:19:64:41:ed:a1:99:03:41:d6:b1:
3c:da:1d:51:7f:68:6b:b0:4f:5d:61:4c:7a:27:7a:34:bc:77:
c4:67:a1:4b:bf:50:96:45:f5:d0:6d:46:02:bd:cd:f2:9f:43:
84:8c:bb:eb:91:79:82:2e:0f:f5:c7:fb:f4:01:4f:1f:ef:54:
76:b6:aa:4a:d8:38:5b:ea:88:85:90:60:b4:94:86:44:0a:c2:
d1:0e:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:18 2023 by rpki-client on console-ams.rpki-client.org