Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fz7YAE7z9TEUe91Kpm-m6ZLgtm0.roa
File: fz7YAE7z9TEUe91Kpm-m6ZLgtm0.roa (raw, json)
Hash identifier: 5d2sj1pAGwUsDTtaW9wa+uyMBtMFAzw/tgObhOVJ1tM=
Subject key identifier: 7F:3E:D8:00:4E:F3:F5:31:14:7B:DD:4A:A6:6F:A6:E9:92:E0:B6:6D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018342DBB1C80D0A97D9F15739957DEA13C0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fz7YAE7z9TEUe91Kpm-m6ZLgtm0.roa
Signing time: Thu 15 Sep 2022 20:33:57 +0000
ROA not before: Thu 15 Sep 2022 20:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 2a06:a002::/32 maxlen: 48
2a06:a005:1d10::/44 maxlen: 48
2a06:a005:1d70::/44 maxlen: 48
2a06:a005:1d20::/44 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:db:b1:c8:0d:0a:97:d9:f1:57:39:95:7d:ea:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 15 20:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f3ed8004ef3f531147bdd4aa66fa6e992e0b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:6f:f3:6a:9e:db:4e:76:b5:99:0f:08:b3:
1b:f3:d4:e4:95:ed:46:6c:75:3b:53:50:23:d2:c4:
b2:17:09:47:6b:e7:b9:19:7d:30:f0:07:60:96:86:
dc:49:99:a4:93:ff:e7:7d:89:05:fb:4b:2b:1b:09:
d9:76:51:84:6c:30:03:e7:94:af:eb:46:ae:78:91:
bc:29:c2:d3:09:8d:78:3d:df:31:bb:2b:a8:55:fc:
93:07:a3:b7:88:b9:61:74:c1:02:cb:c2:b5:c0:a6:
a2:c6:8b:71:6d:22:b8:47:91:73:12:08:95:34:e9:
af:2f:2f:8f:86:ef:44:51:25:c0:f8:79:57:18:41:
6d:04:ee:72:e8:cb:48:fc:df:ff:98:c7:fd:c5:d1:
89:b4:b8:0f:77:15:a4:38:fe:ca:9c:0f:95:6a:13:
e6:41:89:07:18:41:6c:cb:81:3c:17:d4:8e:70:a1:
c5:3a:3a:4e:78:f1:75:31:24:5e:d9:4e:19:1e:d9:
28:4d:fd:c5:99:ca:49:cf:a6:ec:4d:00:70:f5:b6:
e8:c1:d9:42:c6:35:13:16:e2:7b:bb:7e:58:20:0c:
95:82:91:57:75:ba:f6:5b:c0:14:b5:e0:79:21:ba:
c4:5f:66:3a:d2:6a:39:ad:89:23:84:cc:a7:23:e6:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:D8:00:4E:F3:F5:31:14:7B:DD:4A:A6:6F:A6:E9:92:E0:B6:6D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fz7YAE7z9TEUe91Kpm-m6ZLgtm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
2a06:a005:17a0::/44
2a06:a005:1d10::-2a06:a005:1d3f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1d70::/44
Signature Algorithm: sha256WithRSAEncryption
02:1a:29:a7:77:6d:e9:a6:53:74:4b:42:cf:c1:4c:77:07:5d:
13:6a:ef:84:a6:44:82:96:54:ba:01:93:de:5c:93:dd:f1:2c:
8d:fc:77:9b:b8:cd:54:d7:0b:f9:6f:0a:d0:d1:5b:bb:10:ed:
44:5b:0c:c1:0a:44:1c:60:dc:84:9f:24:ef:48:ae:8a:e4:96:
70:b9:a7:c6:b6:af:b8:a5:b3:c3:bc:f6:ea:73:2d:7b:fc:5c:
dd:00:ad:e1:99:46:6d:16:30:77:e5:35:93:f6:f0:40:4e:e2:
d3:59:4d:be:c1:1f:38:a3:08:16:e0:c2:f8:6f:85:da:ca:c8:
9d:6b:ad:06:18:92:63:62:f7:48:2b:b5:78:20:19:a7:5c:f0:
68:33:37:38:78:bc:2b:40:93:00:bc:33:0f:49:0c:df:d5:b4:
09:de:ac:58:28:cf:ae:05:19:1c:ce:8b:9c:9a:46:21:41:b8:
bc:01:9b:25:4c:c6:72:0b:a7:31:77:0f:32:3e:4d:4c:6d:a5:
c6:5d:0f:b2:9f:0f:be:d8:27:c6:78:b5:ac:52:12:b5:8e:9c:
e3:22:3d:9e:e8:1b:b3:75:9f:3a:d2:eb:3b:39:c9:6b:9e:41:
a4:90:a8:3a:15:6c:d8:bc:52:38:28:9d:a2:35:ae:88:d6:9a:
03:17:e7:84
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYNC27HIDQqX2fFXOZV96hPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTE1MjAzMzU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNlZDgwMDRlZjNmNTMxMTQ3YmRkNGFhNjZmYTZlOTkyZTBiNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJVv82qe2052tZkPCLMb89Tkle1G
bHU7U1Aj0sSyFwlHa+e5GX0w8AdglobcSZmkk//nfYkF+0srGwnZdlGEbDAD55Sv
60aueJG8KcLTCY14Pd8xuyuoVfyTB6O3iLlhdMECy8K1wKaixotxbSK4R5FzEgiV
NOmvLy+Phu9EUSXA+HlXGEFtBO5y6MtI/N//mMf9xdGJtLgPdxWkOP7KnA+VahPm
QYkHGEFsy4E8F9SOcKHFOjpOePF1MSRe2U4ZHtkoTf3FmcpJz6bsTQBw9bbowdlC
xjUTFuJ7u35YIAyVgpFXdbr2W8AUteB5IbrEX2Y60mo5rYkjhMynI+bDzQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFH8+2ABO8/UxFHvdSqZvpumS4LZtMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZno3WUFFN3o5VEVVZTkxS3BtLW02WkxndG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwUAKgagAgMH
BCoGoAUXoDASAwcEKgagBR0QAwcGKgagBR0AAwcEKgagBR1wMA0GCSqGSIb3DQEB
CwUAA4IBAQACGimnd23pplN0S0LPwUx3B10Tau+EpkSCllS6AZPeXJPd8SyN/Heb
uM1U1wv5bwrQ0Vu7EO1EWwzBCkQcYNyEnyTvSK6K5JZwuafGtq+4pbPDvPbqcy17
/FzdAK3hmUZtFjB35TWT9vBATuLTWU2+wR84owgW4ML4b4Xaysida60GGJJjYvdI
K7V4IBmnXPBoMzc4eLwrQJMAvDMPSQzf1bQJ3qxYKM+uBRkczoucmkYhQbi8AZsl
TMZyC6cxdw8yPk1MbaXGXQ+ynw++2CfGeLWsUhK1jpzjIj2e6BuzdZ860us7Oclr
nkGkkKg6FWzYvFI4KJ2iNa6I1poDF+eE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org