Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g6vUemdLcaMIJPqrwoLnytCVg78.roa
File: g6vUemdLcaMIJPqrwoLnytCVg78.roa (raw, json)
Hash identifier: KUeqmKGtIH+I5Wzycorf9l6PV8DDLIzF7nE1rbsBvwg=
Subject key identifier: 83:AB:D4:7A:67:4B:71:A3:08:24:FA:AB:C2:82:E7:CA:D0:95:83:BF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018395D6DCC400CA88640D05E86CC42D384E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g6vUemdLcaMIJPqrwoLnytCVg78.roa
Signing time: Sat 01 Oct 2022 23:17:09 +0000
ROA not before: Sat 01 Oct 2022 23:17:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:5a9::/48 maxlen: 48
2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1670::/44 maxlen: 48
2a06:a005:1330::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:95:d6:dc:c4:00:ca:88:64:0d:05:e8:6c:c4:2d:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 1 23:17:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83abd47a674b71a30824faabc282e7cad09583bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:e1:76:78:55:1a:82:52:f3:47:03:6e:c1:
0a:e6:3b:6c:99:d6:0b:54:07:36:da:ee:59:4a:6c:
0d:52:d5:af:bd:fa:10:52:17:37:ea:fd:d3:e0:af:
bf:f5:29:54:ac:40:ce:2e:01:f0:32:a7:8f:a4:27:
c5:2d:a6:1c:75:33:d6:df:c6:54:6e:cf:63:1e:bd:
10:f2:05:c1:63:ac:59:27:ed:51:c7:ff:1b:c9:62:
57:9b:50:30:c0:be:d4:5e:e0:ab:86:55:83:1b:50:
7d:f5:8b:d5:69:a4:16:2f:31:de:84:7e:f8:99:c4:
e6:ed:a0:25:62:29:92:12:0f:4a:c8:35:6d:c6:5c:
55:ad:e8:11:70:bf:69:7a:02:42:54:a1:fc:5a:a1:
b7:78:ed:be:ab:99:7a:50:11:52:64:f6:4c:75:b0:
d3:97:1b:8a:19:e3:b3:99:0b:1b:76:6b:d4:87:94:
10:70:4b:80:5a:12:cd:c7:00:1e:0b:bf:8c:1f:f1:
f6:b2:ff:08:1b:15:78:52:61:b3:73:59:01:60:f4:
e5:ce:d8:90:3c:5f:91:4a:10:38:0c:97:84:f8:42:
7b:f3:05:39:b9:5e:e7:72:3b:4d:9a:d0:b2:98:03:
11:e4:e6:24:79:20:7e:79:0b:70:a1:56:0c:e6:dc:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:D4:7A:67:4B:71:A3:08:24:FA:AB:C2:82:E7:CA:D0:95:83:BF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g6vUemdLcaMIJPqrwoLnytCVg78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:5a9::/48
2a06:a005:1330::/44
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
22:2d:63:8e:93:cf:fc:c3:88:67:cb:ae:ee:1f:05:1a:56:ea:
0f:81:25:5c:3c:bd:4c:03:ba:0a:d1:31:3f:51:11:7b:f9:ab:
21:4d:df:18:2a:26:03:73:5c:5d:4c:c7:63:d5:5c:3c:6f:f1:
a7:1b:40:80:a9:ad:7c:76:0d:7c:59:5e:7c:69:c6:d7:be:a5:
31:ef:41:e8:08:5a:f7:40:bb:19:cb:8c:3a:d6:2c:60:d4:7b:
5b:1c:b8:c1:f7:a5:71:33:35:5c:4e:c6:1e:7b:37:46:0c:51:
62:54:ca:20:2c:0e:e2:93:13:f3:a6:58:9b:c5:27:04:e3:16:
b9:21:cd:71:0c:c2:40:70:5e:1e:a6:48:51:aa:90:ce:e4:5f:
4b:7d:fe:51:b0:67:bd:5c:a6:f5:73:b4:9f:f9:34:92:0c:c8:
bb:88:fa:ea:dd:24:df:bf:51:05:c7:ef:af:9b:9e:d4:8b:dc:
cb:15:1a:8c:b1:33:d1:2e:27:ed:a0:d8:4d:fd:e1:63:4f:c8:
e5:c7:5d:57:75:58:fe:e2:bc:22:9e:a3:dc:8a:16:97:57:a0:
5e:00:33:8a:7b:ba:9e:24:c1:ca:ac:03:59:da:3a:6a:9b:49:
11:a2:75:64:3f:1e:9e:e5:5e:ad:ea:fb:89:27:f8:ac:cf:95:
03:cb:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:18 2023 by rpki-client on console-ams.rpki-client.org