Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kQU9myO0ApkG4vldOuXYmVWZMN0.roa
File: kQU9myO0ApkG4vldOuXYmVWZMN0.roa (raw, json)
Hash identifier: EMstkJgjJMTvUzG2DSRRtkuEfJoyYmTyr5HIO+R9W1U=
Subject key identifier: 91:05:3D:9B:23:B4:02:99:06:E2:F9:5D:3A:E5:D8:99:55:99:30:DD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823606FC4705550F37AA5743F697017609
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kQU9myO0ApkG4vldOuXYmVWZMN0.roa
Signing time: Mon 25 Jul 2022 15:43:23 +0000
ROA not before: Mon 25 Jul 2022 15:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 945
IP address blocks: 2a06:a001:b00b::/48 maxlen: 48
2a06:1281:b00b::/48 maxlen: 48
2a06:a006:b00b::/48 maxlen: 48
2a06:1280:b00b::/48 maxlen: 48
2a09:54c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:06:fc:47:05:55:0f:37:aa:57:43:f6:97:01:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 25 15:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91053d9b23b4029906e2f95d3ae5d899559930dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:50:3a:13:db:24:93:58:f1:cb:5f:4d:b0:
ad:eb:2f:44:2d:82:91:bb:28:a1:8f:e7:fa:ee:0f:
21:20:3d:15:76:7a:d0:c4:00:c7:c2:48:95:1d:fb:
68:9b:e3:b2:2e:8a:bb:8d:d1:4a:e2:b6:0d:2b:1e:
46:89:e8:09:c0:18:90:99:89:ca:e2:2a:1a:d7:5e:
51:ad:e3:39:fc:7b:3c:b2:1a:01:d3:92:99:db:79:
9e:86:68:a4:17:51:b6:50:71:84:af:3e:23:64:25:
74:08:28:ad:2b:13:18:5f:88:dd:a4:49:80:d5:55:
5e:b7:1d:07:60:bd:5a:6a:ce:8a:1d:bf:b5:50:be:
0b:f1:4b:24:cc:43:ec:0a:a5:78:9b:15:49:67:42:
c4:6e:3b:ee:65:52:f6:58:1a:dd:59:4f:db:75:f9:
64:e6:dc:23:9e:1e:cf:68:9c:55:13:9d:d6:86:f2:
70:db:52:72:48:ec:4b:6a:0a:86:14:bf:69:f9:db:
fe:41:27:ac:c9:61:ce:95:c6:ad:ee:b1:bb:68:86:
66:54:a3:71:c1:27:77:75:c9:d6:d0:c7:99:b0:0e:
64:73:83:aa:4c:d1:51:9d:53:6f:c4:c5:0c:0e:a8:
ef:50:1a:a3:54:2d:79:54:35:32:09:d1:91:7b:55:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:3D:9B:23:B4:02:99:06:E2:F9:5D:3A:E5:D8:99:55:99:30:DD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kQU9myO0ApkG4vldOuXYmVWZMN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:b00b::/48
2a06:1281:b00b::/48
2a06:a001:b00b::/48
2a06:a006:b00b::/48
2a09:54c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
2c:c7:c2:43:9d:bb:55:0a:aa:7c:5c:65:ba:7f:b0:03:1e:34:
a2:96:d7:a7:13:99:96:25:fe:27:8f:f0:c9:b7:c2:5f:52:8f:
40:a9:f2:5e:80:c8:a8:4a:41:88:7e:5b:3d:1e:64:a8:fb:c7:
d7:ac:25:ca:a7:d8:e1:41:92:a2:01:9c:76:56:98:65:1a:af:
87:20:81:47:44:95:54:24:80:25:21:8d:95:4f:dd:59:0d:11:
8e:37:a8:72:d9:64:22:dd:4c:e8:13:3d:99:ee:bb:52:de:5e:
8d:fb:94:f3:44:53:65:1d:d9:dd:9c:31:01:ae:26:7b:b1:b8:
76:a1:b3:b3:f4:12:f2:c4:af:21:a2:d0:9f:3a:01:2e:ba:15:
ec:b1:5c:bd:19:40:0a:62:b1:be:bf:f5:7a:10:ac:76:d3:13:
d0:4e:2b:ee:80:34:30:61:57:4d:7a:3a:ec:d9:30:f9:7c:5e:
a3:da:b2:db:d8:93:b3:b2:ae:34:a5:4c:f8:69:50:f6:84:5e:
d3:93:a7:bc:c3:ef:fa:6d:5a:16:f8:b6:8e:a1:13:ec:87:3f:
a8:1d:c8:bd:bd:c4:c9:3a:10:57:0e:8c:07:42:20:1e:2d:d8:
5b:11:7b:9d:ef:bf:89:07:8f:e8:40:c8:40:05:4b:58:9a:41:
54:7a:e8:df
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYI2BvxHBVUPN6pXQ/aXAXYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI1MTU0MzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTA1M2Q5YjIzYjQwMjk5MDZlMmY5NWQzYWU1ZDg5OTU1OTkzMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YBQOhPbJJNY8ctfTbCt6y9ELYKR
uyihj+f67g8hID0VdnrQxADHwkiVHftom+OyLoq7jdFK4rYNKx5GiegJwBiQmYnK
4ioa115RreM5/Hs8shoB05KZ23mehmikF1G2UHGErz4jZCV0CCitKxMYX4jdpEmA
1VVetx0HYL1aas6KHb+1UL4L8UskzEPsCqV4mxVJZ0LEbjvuZVL2WBrdWU/bdflk
5twjnh7PaJxVE53WhvJw21JySOxLagqGFL9p+dv+QSesyWHOlcat7rG7aIZmVKNx
wSd3dcnW0MeZsA5kc4OqTNFRnVNvxMUMDqjvUBqjVC15VDUyCdGRe1WC9wIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJEFPZsjtAKZBuL5XTrl2JlVmTDdMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEva1FVOW15TzBBcGtHNHZsZE91WFltVldaTU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKgYSgLAL
AwcAKgYSgbALAwcAKgagAbALAwcAKgagBrALAwcAKglUwLALMA0GCSqGSIb3DQEB
CwUAA4IBAQAsx8JDnbtVCqp8XGW6f7ADHjSiltenE5mWJf4nj/DJt8JfUo9AqfJe
gMioSkGIfls9HmSo+8fXrCXKp9jhQZKiAZx2VphlGq+HIIFHRJVUJIAlIY2VT91Z
DRGON6hy2WQi3UzoEz2Z7rtS3l6N+5TzRFNlHdndnDEBriZ7sbh2obOz9BLyxK8h
otCfOgEuuhXssVy9GUAKYrG+v/V6EKx20xPQTivugDQwYVdNejrs2TD5fF6j2rLb
2JOzsq40pUz4aVD2hF7Tk6e8w+/6bVoW+LaOoRPshz+oHci9vcTJOhBXDowHQiAe
LdhbEXud77+JB4/oQMhABUtYmkFUeujf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org