Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kLfVUpBOanbJjQD8aQ8OgA4y9Vw.roa
File: kLfVUpBOanbJjQD8aQ8OgA4y9Vw.roa (raw, json)
Hash identifier: d5xsOpoZf27gXncg7CpbQYTFwUF8tFY1i1OwMQBApwg=
Subject key identifier: 90:B7:D5:52:90:4E:6A:76:C9:8D:00:FC:69:0F:0E:80:0E:32:F5:5C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18DF91D2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kLfVUpBOanbJjQD8aQ8OgA4y9Vw.roa
Signing time: Thu 28 Apr 2022 23:11:57 +0000
ROA not before: Thu 28 Apr 2022 23:11:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211358
IP address blocks: 2a06:a005:e0::/44 maxlen: 48
2a06:a005:240::/44 maxlen: 48
2a06:a005:6c0::/44 maxlen: 48
2a06:a005:250::/44 maxlen: 48
2a06:a005:400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417305042 (0x18df91d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 28 23:11:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90b7d552904e6a76c98d00fc690f0e800e32f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:d7:6b:e8:d1:98:9b:0d:c1:77:0f:5e:d9:
78:6b:82:58:a5:c6:80:e6:39:47:fa:ef:de:58:3b:
a2:d4:04:12:36:de:65:c1:34:0b:68:91:8a:23:79:
b6:f0:f0:ba:18:d3:b9:76:f1:7d:91:fc:c0:1b:4e:
31:64:d8:d2:6c:09:52:27:e0:01:14:fe:ad:af:db:
21:c3:87:fd:54:3f:05:5d:78:5a:d7:b8:fa:bc:f8:
40:33:37:3d:ba:a6:ed:c6:95:5e:8e:84:7a:fb:16:
eb:de:37:90:3d:0a:ea:43:af:58:7e:c7:9b:a2:d1:
17:7f:9a:25:59:1a:65:3f:9a:e9:b6:d7:93:80:6b:
9c:0e:25:52:36:24:48:c3:8f:eb:8b:9c:28:7c:a3:
01:26:ff:3e:b6:64:7d:40:f9:88:69:f8:e4:7f:52:
ba:6e:d1:44:2d:4c:37:3a:d3:82:2d:cd:e8:65:b1:
40:b0:3c:f6:29:c4:a5:af:f7:b6:e3:b5:40:3f:49:
f8:fc:d3:24:d6:29:9a:a5:da:56:5a:ca:ca:35:6c:
4e:77:17:3e:db:9a:1d:ba:b8:91:22:e4:bc:01:00:
ef:cc:ef:b2:28:30:b8:e4:1c:ae:09:07:7a:16:ff:
32:30:ff:a3:4d:48:16:46:d6:a4:f9:70:51:e1:37:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:D5:52:90:4E:6A:76:C9:8D:00:FC:69:0F:0E:80:0E:32:F5:5C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kLfVUpBOanbJjQD8aQ8OgA4y9Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e0::/44
2a06:a005:240::/43
2a06:a005:400::/44
2a06:a005:6c0::/44
Signature Algorithm: sha256WithRSAEncryption
43:55:ce:8a:cd:6e:9d:9b:64:1e:83:9c:df:2e:b0:15:ac:d9:
ed:06:bc:69:3c:6a:e2:8f:bc:48:01:e3:06:98:b2:4f:46:c2:
70:b2:0e:9d:2d:fe:b7:18:07:69:1a:a3:da:ee:67:2d:09:f2:
2e:55:57:33:7b:c5:e0:b9:88:1e:40:cc:10:74:76:b6:b3:00:
43:1f:d7:f3:7f:f6:59:6c:38:4b:f8:6d:ee:d5:08:f6:05:45:
d3:48:4a:d8:f8:77:6c:33:ad:e5:bc:ef:97:77:f2:ec:cf:14:
d6:eb:f8:46:28:55:71:0f:a4:e6:28:7c:ee:97:e2:73:e6:4d:
3f:97:4c:d7:12:6e:83:0e:1c:a9:dc:61:c4:c3:4d:15:24:64:
92:fd:17:76:99:29:5e:6e:9a:81:59:b9:f3:ad:ff:7b:4b:55:
61:fd:fa:bc:61:bc:f4:3e:c3:b0:6e:3d:12:f7:ec:ef:d8:64:
9d:ab:34:2c:1d:7d:d2:62:70:c2:60:ef:ff:b2:f6:2f:c8:60:
af:4c:a5:58:48:c1:96:70:f0:68:5b:ac:55:82:1e:54:57:03:
63:38:ff:72:c2:42:ce:19:01:e0:85:b5:a1:40:2c:2b:c7:c7:
a8:d5:68:98:1d:0b:7a:79:50:62:61:56:18:21:18:16:59:cf:
5f:c7:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org