Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/haqzndp-SNgu7hU6xf24q6mCnOo.roa
File: haqzndp-SNgu7hU6xf24q6mCnOo.roa (raw, json)
Hash identifier: XrAynK3Lev2273uG4yLLLJl3wjZWkgvSCdZ3+VFoN5Q=
Subject key identifier: 85:AA:B3:9D:DA:7E:48:D8:2E:EE:15:3A:C5:FD:B8:AB:A9:82:9C:EA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AF35CDF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/haqzndp-SNgu7hU6xf24q6mCnOo.roa
Signing time: Thu 16 Jun 2022 23:08:45 +0000
ROA not before: Thu 16 Jun 2022 23:08:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204617
IP address blocks: 2a06:a005:d23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452156639 (0x1af35cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 16 23:08:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85aab39dda7e48d82eee153ac5fdb8aba9829cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:0e:92:a9:c7:e4:9e:b1:b0:a6:a5:c9:4f:
ae:0c:07:83:a6:c5:c0:3d:50:64:2e:c8:d9:c2:80:
d1:cb:f6:ac:85:30:e4:b2:e7:5d:56:bc:48:a7:6c:
00:0c:f0:8d:cb:c0:5f:fe:40:8d:f8:f8:50:c9:bb:
eb:bb:c3:27:63:55:31:12:c7:1e:24:9f:5e:ee:cc:
d6:43:77:46:c4:c8:bf:d5:dc:29:f6:db:46:1e:a9:
da:d9:13:23:73:40:19:ac:00:45:d8:54:81:f3:61:
c8:43:13:29:b9:8e:a6:e8:3e:ae:ee:1c:20:f2:50:
e6:b0:7c:ed:0d:76:57:0c:cf:95:d0:f1:ed:74:07:
ef:9e:9b:7b:55:fb:c5:bf:23:d0:47:8c:f3:a6:5b:
da:5a:7c:bc:f0:0c:9b:da:de:61:3a:98:3b:6e:ef:
64:7e:59:55:d1:2f:29:69:8a:e9:ed:54:80:15:18:
30:38:27:42:d8:6a:2f:87:6e:08:4f:5a:e9:c9:f5:
3d:70:35:f8:e1:90:9e:d0:df:a3:f9:4b:7f:7e:7e:
d0:fa:44:25:f4:57:38:a7:cd:91:81:43:cf:ac:42:
d2:23:9e:56:b8:43:9b:56:f8:5d:21:f4:c1:34:cb:
af:18:e2:17:c1:aa:c2:65:1b:f4:48:91:ff:55:ac:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:B3:9D:DA:7E:48:D8:2E:EE:15:3A:C5:FD:B8:AB:A9:82:9C:EA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/haqzndp-SNgu7hU6xf24q6mCnOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d23::/48
Signature Algorithm: sha256WithRSAEncryption
4d:9a:12:5f:35:76:0a:de:9a:2e:9c:60:22:c9:ed:b7:b9:51:
20:77:e0:54:18:c0:1a:03:67:d0:80:e6:70:b8:f8:8e:73:06:
9e:8f:dd:ee:7e:0f:c5:24:de:bb:56:d3:49:cf:6f:5e:00:68:
90:78:47:a4:34:0f:35:76:75:29:59:8a:74:f1:0f:18:17:56:
61:2d:cc:a0:2c:9a:b4:07:0a:13:cd:02:4b:91:25:f2:a7:26:
62:76:77:83:cb:65:85:f6:56:63:99:6e:54:36:a4:28:ea:2e:
d0:32:db:80:82:ab:6e:d6:6e:57:63:84:98:6b:8e:26:ca:3d:
5c:df:ee:d4:01:65:68:54:25:ba:5a:60:81:4a:45:07:92:db:
ac:1a:75:ce:07:bc:09:62:66:be:30:04:5d:b1:f1:e7:c1:36:
0d:d5:62:a3:e5:d0:5d:97:27:7a:16:b3:c0:ef:65:e8:50:38:
45:b6:16:68:12:25:a7:0b:ab:fb:5a:6e:37:34:74:39:70:e9:
2d:b3:99:74:28:1d:df:fe:c7:74:4c:8a:0e:0f:18:42:29:0b:
16:d5:5c:7c:a8:76:dc:59:9c:c8:47:67:b3:34:d3:a1:8e:ec:
0a:d5:d8:1f:c1:da:c4:78:3b:eb:70:cf:02:b4:6c:65:9e:bc:
2c:97:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org