Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa
File: kA75LfvFsqukZYtMl4hS3R9DvSY.roa (raw, json)
Hash identifier: kEgIDbv8botiIygVa1x9UaPsUIciRFNrEwpEHSUQ2zo=
Subject key identifier: 90:0E:F9:2D:FB:C5:B2:AB:A4:65:8B:4C:97:88:52:DD:1F:43:BD:26
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840CB45F47913F8E4B272BF0C72A162B4F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa
Signing time: Tue 25 Oct 2022 01:14:18 +0000
ROA not before: Tue 25 Oct 2022 01:14:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203232
IP address blocks: 2a07:54c4:8::/48 maxlen: 48
2a07:54c1:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0c:b4:5f:47:91:3f:8e:4b:27:2b:f0:c7:2a:16:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 01:14:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=900ef92dfbc5b2aba4658b4c978852dd1f43bd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:ce:70:b6:09:50:e3:f3:b5:ee:e6:a0:13:
69:bb:f2:15:d4:d5:e0:7e:1f:ab:71:05:39:87:53:
58:27:56:41:20:70:74:c0:03:37:df:e3:87:11:5a:
4a:60:8b:f0:89:56:2c:b6:ab:3b:0f:be:bf:da:c3:
08:c3:30:ec:84:bd:4a:ac:61:d3:d9:b9:fb:f9:98:
02:a0:2d:65:7d:0a:64:ce:19:aa:68:2c:2d:92:2f:
bd:6e:c9:29:41:ec:77:41:06:a1:5d:d6:93:f7:5b:
b0:df:52:1d:9d:aa:c4:01:c1:80:5c:c9:18:b3:6e:
6d:19:44:ce:67:ef:cd:fd:6b:fa:ed:54:19:e1:dd:
70:32:a2:60:13:d6:35:08:e4:a2:ac:ea:29:38:a6:
0c:5f:6c:2b:83:dd:bd:22:ea:13:ba:e4:c4:f1:fb:
76:51:ff:53:6e:98:dd:a5:bb:1e:7a:15:88:69:f5:
47:cc:48:80:e5:76:d6:a0:52:56:aa:e1:01:5f:a2:
82:91:51:1d:e0:a3:a2:f7:00:0d:97:e3:46:de:e3:
4c:1f:47:69:ac:28:bc:03:98:bd:42:ba:f3:03:07:
7f:b2:18:11:e2:71:3b:df:6b:16:00:f2:2c:09:55:
c0:c6:01:23:cd:ae:54:fa:30:ff:7d:aa:8b:cd:b2:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:F9:2D:FB:C5:B2:AB:A4:65:8B:4C:97:88:52:DD:1F:43:BD:26
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:1000::/36
2a07:54c4:8::/48
Signature Algorithm: sha256WithRSAEncryption
63:ce:f1:30:75:48:61:85:89:0a:b8:62:88:58:f2:f1:07:43:
ba:be:ab:98:64:d3:fc:f5:90:0f:c2:21:0d:df:9d:7e:83:39:
08:56:2a:a2:65:b0:2a:a6:5d:08:41:48:6b:fb:41:bf:3f:25:
1b:9b:18:6e:21:c2:fb:0e:8f:eb:29:a5:cd:82:45:5e:29:17:
4a:83:71:c3:19:48:8a:c4:1e:7c:3a:44:cc:52:d6:c4:2f:67:
ee:84:01:9d:21:78:50:a2:e9:03:1c:ac:1a:4e:c3:28:81:09:
95:07:8c:18:a1:f0:56:62:e4:60:55:47:c9:ea:e0:8b:b6:55:
08:91:c0:4d:e6:46:ef:29:2a:cd:a5:f5:ec:d3:6e:11:d1:fe:
be:df:ca:78:0d:0f:a0:a0:1d:1b:10:8f:9a:46:a9:27:8f:63:
59:7c:0b:27:40:37:e8:b8:18:cc:ee:75:76:06:a9:b4:aa:b0:
3d:a3:88:78:90:23:f8:43:dc:8e:70:0d:2c:23:75:f7:1d:dc:
9d:5b:75:6f:94:4f:8d:c4:d3:30:d4:a8:e8:d1:99:8d:0e:29:
12:83:6e:cd:96:f4:d4:66:31:f6:9d:6d:e5:85:d8:1e:c1:e9:
03:62:e7:93:05:62:82:64:e9:d6:eb:09:c6:82:71:53:1b:4f:
3f:0a:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org