Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iDnruj086Y0XBSXqTCIUn0sYbH0.roa
File: iDnruj086Y0XBSXqTCIUn0sYbH0.roa (raw, json)
Hash identifier: Xgbj24IWqzG3Gi1X93vTx3MC7bGRzqhbLJoy5lTq/JE=
Subject key identifier: 88:39:EB:BA:3D:3C:E9:8D:17:05:25:EA:4C:22:14:9F:4B:18:6C:7D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825F02EEB872C98E439149305E9D4680B1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iDnruj086Y0XBSXqTCIUn0sYbH0.roa
Signing time: Tue 02 Aug 2022 14:43:23 +0000
ROA not before: Tue 02 Aug 2022 14:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23428
IP address blocks: 2a06:a005:a17::/48 maxlen: 48
2a06:a005:1180::/44 maxlen: 48
2a06:a005:d20::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:02:ee:b8:72:c9:8e:43:91:49:30:5e:9d:46:80:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 2 14:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8839ebba3d3ce98d170525ea4c22149f4b186c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:f7:d0:0c:99:3c:06:aa:5f:46:5b:82:4f:
70:cf:5e:31:44:8a:bb:40:f6:1b:d8:06:62:95:b0:
c9:7e:ce:1c:e3:5d:13:0f:de:ca:82:46:b6:64:d1:
16:af:cf:58:1e:fe:57:f7:a1:aa:a7:26:92:ff:a2:
d1:2c:e9:c9:68:ea:25:c0:6d:ae:17:93:34:92:ab:
de:94:a5:99:9e:23:0e:89:66:7b:83:2f:f5:b6:dd:
b9:20:11:e4:f9:13:69:06:17:d7:3d:31:93:6c:c9:
0a:bb:25:83:7d:90:b4:82:66:9d:ba:62:ee:1b:0b:
ed:46:0c:b5:b2:48:1d:48:59:f9:78:8e:7d:c6:d6:
e1:5a:fe:55:02:b5:58:5d:8f:aa:65:d1:91:7b:5b:
64:4d:80:8e:5d:c8:6a:4a:04:ab:f5:74:c6:6c:9a:
88:ef:34:f4:ec:1c:af:40:20:fb:c3:86:6b:c6:38:
ab:76:b7:88:6f:6c:db:80:f0:40:7a:39:1f:9b:f7:
e5:5c:85:02:62:22:77:d9:2b:7f:a5:67:33:74:c5:
f6:9d:19:27:00:1d:38:c1:42:4d:23:69:bf:94:a2:
52:a8:ea:57:17:7b:37:ee:8c:9b:6b:40:73:94:15:
03:57:8d:e8:d4:89:3d:b9:3f:07:b9:9c:f4:03:bb:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:39:EB:BA:3D:3C:E9:8D:17:05:25:EA:4C:22:14:9F:4B:18:6C:7D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iDnruj086Y0XBSXqTCIUn0sYbH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a17::/48
2a06:a005:d20::/48
2a06:a005:1180::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e1:a0:3a:ab:5d:2f:77:2a:9f:0c:01:4c:f0:3a:4e:d0:70:
38:f3:f2:ed:7f:d9:fe:e3:f4:14:ce:4d:ec:54:b6:24:7d:04:
c8:f4:09:54:19:90:36:f6:4f:53:48:a9:84:c7:8a:e6:65:33:
9e:cc:b6:6c:10:16:cc:4f:df:de:13:be:52:fe:4a:ce:12:df:
65:49:eb:cd:dd:c9:b6:f0:0b:ae:7c:0c:a7:97:4d:1c:93:1b:
26:fc:3a:f7:32:d5:15:65:b4:23:bc:6c:29:bb:dd:5d:50:6c:
30:df:7e:bf:49:d0:64:32:6f:44:2b:55:10:62:09:d7:de:89:
c4:00:42:b2:5e:22:a4:b1:7b:ad:f5:a8:5f:21:d8:51:da:be:
7a:96:7e:6f:cb:e2:c8:c5:a3:c2:ae:31:95:fc:70:ca:5a:b4:
57:2c:9e:83:a9:30:a9:30:40:8a:f8:98:42:87:b1:8c:3b:10:
a6:49:32:2e:72:61:56:1b:61:e6:79:d7:1f:72:c1:db:42:0c:
62:ca:59:d5:72:75:24:08:22:61:a5:fc:60:fd:55:ed:ae:06:
d6:30:8c:49:ce:01:24:bd:a8:d4:e2:9a:1e:72:a2:3a:f6:3f:
46:a0:ea:43:f3:68:ca:71:4c:c8:87:ee:d6:e5:db:df:60:6f:
ac:5a:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org