Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fgiVlJ3Apd-dXySxpDrvI-AohgE.roa
File: fgiVlJ3Apd-dXySxpDrvI-AohgE.roa (raw, json)
Hash identifier: c2GJP/i0R09/b3wNVkHpyCPngbhh2niPOG6cx0sm6+4=
Subject key identifier: 7E:08:95:94:9D:C0:A5:DF:9D:5F:24:B1:A4:3A:EF:23:E0:28:86:01
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184BF78492ADC6C8D89D01DC40171B196E2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fgiVlJ3Apd-dXySxpDrvI-AohgE.roa
Signing time: Mon 28 Nov 2022 18:20:42 +0000
ROA not before: Mon 28 Nov 2022 18:20:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205965
IP address blocks: 2a06:a005:2240::/44 maxlen: 48
2a06:a005:23a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:78:49:2a:dc:6c:8d:89:d0:1d:c4:01:71:b1:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 28 18:20:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e0895949dc0a5df9d5f24b1a43aef23e0288601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:91:5f:b4:b6:31:73:0f:88:74:8c:14:99:
9b:15:fa:c2:60:76:76:82:f6:a1:b8:1f:56:1f:24:
7d:6d:21:1a:9d:12:e5:fd:c6:0c:5a:e6:e3:c9:25:
d4:f6:98:cf:e8:2d:2d:ba:d1:b4:51:64:f4:13:d1:
1b:5f:21:ad:9d:91:16:12:8b:fb:c3:85:94:b9:94:
25:43:f1:3a:09:b3:fc:bc:e3:ca:4b:02:84:00:25:
8b:f3:92:2b:0a:2a:0b:df:e6:23:60:4b:5a:76:87:
43:1d:11:58:65:57:67:78:76:30:93:c5:46:42:ec:
d6:23:f4:f8:a9:d1:82:65:75:f6:6f:c6:1b:d6:04:
4a:f3:1a:af:f7:a0:ff:53:cd:4e:17:eb:a1:ec:81:
ac:98:a7:3b:83:61:1a:98:f9:81:24:44:9f:26:11:
2a:aa:b8:fa:24:43:a7:89:97:2d:c8:11:da:bb:4d:
4b:cc:a6:b3:c3:ac:8d:57:1b:bd:7f:46:23:39:a1:
88:c8:cc:4e:c3:66:85:cd:b0:41:ff:94:f1:c5:f1:
90:93:dd:4b:15:3e:bb:f2:cc:7d:ed:a8:04:96:a9:
bc:cb:a8:ca:cb:d1:65:56:f4:00:94:07:bb:ef:67:
74:3c:34:67:71:43:08:af:1d:4a:9f:3e:d4:00:6d:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:95:94:9D:C0:A5:DF:9D:5F:24:B1:A4:3A:EF:23:E0:28:86:01
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fgiVlJ3Apd-dXySxpDrvI-AohgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2240::/44
2a06:a005:23a0::/44
Signature Algorithm: sha256WithRSAEncryption
98:1e:1a:a5:94:cb:fb:4b:bd:28:3f:aa:95:46:2f:15:4a:5f:
ff:b6:f9:13:0a:a2:c2:82:d7:a7:1d:3f:b8:b9:67:52:50:01:
33:ab:69:d8:a7:72:3f:db:25:80:a8:07:22:8f:1a:e7:6f:1a:
4e:ac:c1:94:b7:6c:36:a6:9a:07:58:67:98:8e:11:a7:6f:a9:
83:cb:85:b1:20:77:3b:42:00:00:be:b3:b4:37:5e:51:92:47:
e7:e1:1b:f5:31:92:3a:98:1b:4f:35:b7:b4:8a:f4:68:4b:53:
0d:a5:bb:5b:ca:1d:7d:a8:e8:a7:55:2b:1e:85:15:2b:15:bd:
79:5f:35:2d:25:ed:e5:b9:fb:4e:c5:ca:7a:d3:77:46:d6:ca:
c8:8a:3a:50:92:96:0e:62:c9:f0:7c:e3:5f:65:b9:a2:0b:33:
bd:7d:71:23:a0:d6:3f:04:3a:00:41:d2:bf:25:cc:26:2a:8b:
41:50:4b:60:10:13:19:93:60:ff:15:90:16:c6:1a:0f:4b:ee:
19:a8:bb:cc:22:bf:19:c1:ca:4e:2c:f0:ee:5c:fa:2c:21:57:
3f:f3:82:02:24:2e:c6:91:dc:82:a5:cd:b4:b9:c9:ec:47:c8:
c9:7c:5c:f9:80:f2:92:64:5b:16:0f:76:37:af:82:34:ad:d0:
41:eb:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org