Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhlP-c4NC-eY43tlMDDxA-avyu8.roa
File: fhlP-c4NC-eY43tlMDDxA-avyu8.roa (raw, json)
Hash identifier: lhLqb/c1AiJm1w6VDEmaiHy7PG1bycPy7dq7p6EmziI=
Subject key identifier: 7E:19:4F:F9:CE:0D:0B:E7:98:E3:7B:65:30:30:F1:03:E6:AF:CA:EF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17A05C67
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhlP-c4NC-eY43tlMDDxA-avyu8.roa
Signing time: Sun 03 Apr 2022 13:54:34 +0000
ROA not before: Sun 03 Apr 2022 13:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48024
IP address blocks: 2a06:a001:a020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396385383 (0x17a05c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 3 13:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e194ff9ce0d0be798e37b653030f103e6afcaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:2b:6b:0b:69:2f:5e:3b:68:b0:a6:4f:ba:
86:49:c1:e8:3e:39:c6:81:04:5a:92:98:da:f1:a4:
39:15:ad:52:91:1b:7e:b6:bb:1e:df:27:db:1d:14:
ca:bf:63:f1:15:f1:58:85:70:5d:6e:00:17:f4:b0:
bb:cb:3c:6d:f5:a7:51:af:3e:39:c2:40:f5:8c:0a:
e8:01:6a:f4:fa:83:59:a7:b0:a7:84:ce:24:6d:3f:
ea:ff:01:63:18:a1:e4:06:a5:bf:90:0d:9e:8e:72:
c9:74:50:35:a4:64:80:82:3d:1c:a3:0f:d4:9b:a3:
2a:4e:ac:41:52:b9:88:a1:59:1f:81:47:46:f8:32:
82:af:39:6c:6a:ff:4a:43:ad:69:a1:7d:dd:09:c9:
73:8f:40:df:eb:9b:08:75:1b:cc:ea:7f:8d:49:2d:
42:07:04:30:4c:f2:07:d2:76:0d:19:d5:be:7f:73:
46:e2:8b:2e:71:6e:be:d9:a5:ff:7c:96:da:fe:0c:
6f:11:7d:f4:21:86:fd:7c:ac:2c:d7:d2:ef:f9:b7:
58:5c:f8:50:b5:9d:62:de:9e:e8:9a:24:06:69:d4:
4f:ff:cc:c0:62:c3:5d:d0:8d:e5:96:93:b4:f0:fe:
65:82:d8:3f:6e:50:27:bc:1f:ca:f2:74:11:b8:37:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:4F:F9:CE:0D:0B:E7:98:E3:7B:65:30:30:F1:03:E6:AF:CA:EF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhlP-c4NC-eY43tlMDDxA-avyu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a020::/44
Signature Algorithm: sha256WithRSAEncryption
65:15:45:c8:9a:8d:ff:7e:63:c2:b8:41:f7:56:d1:c3:48:81:
fd:55:9f:d5:32:c1:65:d0:65:2b:80:c0:2c:b5:96:cb:1d:f6:
39:bf:d6:e6:23:7c:f7:d3:5f:59:03:a7:36:19:c0:56:f7:51:
b7:5d:38:e6:56:4f:0f:58:12:52:ba:ef:7c:1a:fa:8d:10:03:
fc:60:de:17:3d:af:fe:af:7b:6c:e5:a3:6e:db:29:db:0c:5a:
0b:05:9f:66:de:a1:b0:12:a7:9b:66:60:a1:7b:4c:3f:6c:c9:
21:bf:82:f4:05:95:26:e9:d7:3e:a5:85:ae:a4:b0:0f:69:90:
32:15:50:90:0f:a6:0f:b1:d1:f8:04:34:e4:5c:20:de:7d:ae:
cf:01:36:c7:eb:ad:6e:17:36:0a:00:4a:99:a2:33:93:49:7b:
eb:2b:ee:74:43:a4:3b:a4:48:d9:55:60:f8:55:4f:5b:0c:19:
78:6b:47:5b:92:8c:01:5c:c9:81:39:1d:79:fb:7d:47:92:15:
12:63:cd:39:03:2c:ec:ab:2c:89:10:bb:33:88:71:17:21:2d:
ab:61:5a:ee:20:ce:26:e5:88:79:30:76:07:c8:d5:76:b6:5f:
db:fe:b5:60:43:5c:b3:e1:d7:a9:75:d4:fe:1a:ff:64:a8:0d:
67:db:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org