Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jYa-MBQ6hkD8GCsTIZGQTThr3B0.roa
File: jYa-MBQ6hkD8GCsTIZGQTThr3B0.roa (raw, json)
Hash identifier: 1jCCLxv1ddrGq4TTBGPWMoH3zX+wQxFimtXdDeyZCFM=
Subject key identifier: 8D:86:BE:30:14:3A:86:40:FC:18:2B:13:21:91:90:4D:38:6B:DC:1D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184692FB3345E8C9E2C03AB5247113EF937
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jYa-MBQ6hkD8GCsTIZGQTThr3B0.roa
Signing time: Sat 12 Nov 2022 00:14:04 +0000
ROA not before: Sat 12 Nov 2022 00:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210631
IP address blocks: 2a0a:6040:ed00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:69:2f:b3:34:5e:8c:9e:2c:03:ab:52:47:11:3e:f9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 12 00:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d86be30143a8640fc182b132191904d386bdc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:26:e0:4d:9d:d3:78:d2:11:09:8a:58:ab:
40:54:3e:76:cb:4a:54:2f:ab:c8:22:8c:73:8a:3e:
ba:4a:81:8f:e9:6a:14:be:cf:c1:91:51:3b:99:81:
48:45:cd:fe:38:2a:79:dd:20:65:5a:9c:f1:33:9c:
60:33:e3:de:4a:99:d6:a6:37:70:74:8c:22:65:33:
a8:1f:33:ec:61:6c:16:2e:5f:dd:d1:ca:44:c8:ed:
ca:07:54:8b:d1:9b:6c:97:23:b2:de:08:8d:c9:50:
24:f6:c7:be:87:73:0a:b9:8f:5c:94:13:80:2b:ac:
b9:51:7b:8a:13:eb:aa:ae:10:df:1a:eb:0d:49:04:
8e:68:e0:c1:de:08:9c:1d:6b:2e:5f:97:3d:0e:35:
11:d0:96:6f:a7:2b:c0:f0:93:2c:6a:3b:cb:35:fb:
49:64:59:39:5f:ed:80:f5:58:2b:c0:f3:3e:93:7f:
be:63:03:cb:f9:e4:75:e6:01:7f:ee:a9:2a:85:c1:
d9:3c:b0:af:f6:74:92:85:9e:79:48:c7:31:b5:a9:
15:00:67:a8:0e:4c:07:c0:e1:2a:cf:20:7a:a9:85:
4b:b0:f1:a3:37:90:7a:c7:22:b6:b1:c7:5b:32:62:
d9:b3:46:91:95:86:16:8d:c7:9c:89:df:39:01:01:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:BE:30:14:3A:86:40:FC:18:2B:13:21:91:90:4D:38:6B:DC:1D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jYa-MBQ6hkD8GCsTIZGQTThr3B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ed00::/40
Signature Algorithm: sha256WithRSAEncryption
4b:cb:87:ab:ed:51:38:0c:50:66:4d:3f:76:b2:dc:80:12:d8:
0b:93:72:c3:9d:ab:66:69:c3:06:69:5b:a3:e4:66:cd:02:47:
a5:d2:bb:72:a7:66:3f:e1:67:c5:ed:ef:41:32:8e:77:06:92:
e0:b4:c0:e6:40:e7:ca:98:6c:6d:d6:b2:3d:0c:85:39:3a:cf:
9e:47:3c:02:09:ae:34:ad:a7:09:c0:7d:83:e1:54:bf:aa:57:
85:b3:72:77:44:6d:24:70:b5:70:59:5a:7a:ad:53:ed:17:db:
b0:98:d3:7d:bb:65:29:c5:da:b5:0c:46:53:1f:58:3e:4c:8d:
a0:f4:02:ec:d7:2f:a2:1d:41:fb:16:da:9e:08:f5:d2:5e:51:
21:e7:77:90:8b:3d:23:b1:ba:a8:f8:31:c4:ee:f4:29:74:a4:
72:a8:e5:3d:6f:b4:97:b1:58:cb:1e:bf:bf:42:10:6b:61:bc:
2a:8c:ea:5b:3f:ca:59:3c:87:5b:e1:2d:f1:f3:51:2e:b7:02:
b7:03:39:62:d9:90:2f:3d:12:02:09:a3:07:6e:23:72:0a:00:
32:4b:ec:d2:7e:b5:78:ff:7f:ba:9c:b1:01:ab:d1:1a:16:cd:
17:77:f4:5c:2b:81:16:3f:b3:16:bf:dc:60:ad:94:2a:08:e0:
03:9f:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org