Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kmmotXTlK71HVI9IF7CJJDLBccQ.roa
File: kmmotXTlK71HVI9IF7CJJDLBccQ.roa (raw, json)
Hash identifier: wcZaAZ4aCNZW+VMwUYMil37HcoSSjqEbVJan0G1ppNA=
Subject key identifier: 92:69:A8:B5:74:E5:2B:BD:47:54:8F:48:17:B0:89:24:32:C1:71:C4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18FE0CC7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kmmotXTlK71HVI9IF7CJJDLBccQ.roa
Signing time: Mon 02 May 2022 11:12:00 +0000
ROA not before: Mon 02 May 2022 11:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211358
IP address blocks: 2a06:a005:e0::/44 maxlen: 48
2a06:a005:240::/44 maxlen: 48
2a06:a005:730::/44 maxlen: 48
2a06:a005:6c0::/44 maxlen: 48
2a06:a005:250::/44 maxlen: 48
2a06:a005:400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419302599 (0x18fe0cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 2 11:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9269a8b574e52bbd47548f4817b0892432c171c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:56:67:eb:fc:76:07:ae:3c:31:08:41:5d:
df:fb:cb:92:0b:71:62:d4:d5:00:e7:6d:b6:75:3e:
72:a2:26:0f:33:b6:d1:ee:d1:0c:92:00:89:83:b0:
c9:d2:82:7c:90:cf:ea:14:a8:b2:10:99:b8:61:29:
9c:9d:b9:ef:a5:71:80:94:ac:b5:7d:e7:2c:db:19:
29:05:15:e6:60:eb:43:f4:0d:74:b4:e5:1f:f2:58:
a6:c3:08:30:36:77:13:06:45:5e:7d:12:0f:45:16:
53:b4:07:0f:98:30:75:c4:a6:87:c0:c6:37:f9:f7:
dd:f4:4f:87:2b:20:25:f8:05:d7:c2:2d:77:f5:ae:
41:7c:8b:6f:94:22:29:4b:8a:07:1f:b5:f7:77:1c:
46:1d:67:07:c0:71:d3:9d:ff:bb:76:8a:f4:09:ca:
eb:ec:90:14:de:31:8e:db:38:75:7a:50:36:95:d0:
de:cd:cf:94:e5:2b:0a:55:69:73:3f:e2:2e:75:a7:
7d:78:33:9f:67:1e:c3:17:63:d3:f1:30:66:70:49:
0b:ae:58:9b:3a:2c:55:98:f0:e6:99:e5:75:bb:7a:
dc:03:af:4a:89:1b:b9:08:41:cd:39:a1:4e:7c:3f:
f1:4e:5a:32:a4:fc:95:85:b4:1c:31:8a:cb:52:1b:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:69:A8:B5:74:E5:2B:BD:47:54:8F:48:17:B0:89:24:32:C1:71:C4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kmmotXTlK71HVI9IF7CJJDLBccQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e0::/44
2a06:a005:240::/43
2a06:a005:400::/44
2a06:a005:6c0::/44
2a06:a005:730::/44
Signature Algorithm: sha256WithRSAEncryption
17:2e:ab:a7:3c:9d:3a:c5:1a:94:d3:12:7f:ba:34:36:ef:bb:
72:b5:f6:37:7c:f9:ee:08:e5:61:3f:04:39:a2:a9:ec:fc:23:
a2:64:d4:00:4b:70:67:57:3a:97:55:a1:ff:b5:cf:93:f1:77:
2a:11:9e:da:56:09:4f:36:25:0e:c8:ef:90:4a:98:fe:ec:78:
dc:0c:ce:fa:56:b5:b1:de:c9:0d:cb:49:90:c7:04:e6:42:40:
62:ec:9e:29:88:bc:ef:fa:29:05:5b:53:e5:a1:c2:06:49:c9:
ea:be:66:33:78:41:55:a8:ec:94:77:53:90:37:a9:1c:eb:87:
35:0d:8d:78:e8:2b:3d:55:f0:31:2d:de:f6:15:1b:d4:82:3d:
d4:b2:95:56:d4:3b:2c:5e:20:3c:cb:50:a8:b4:d0:19:d9:a3:
4f:88:23:0a:38:a6:4b:fe:e3:ed:8a:fb:12:ed:21:f2:34:4e:
53:af:40:2a:54:a3:00:67:fa:da:31:a1:3d:ef:a2:71:98:e7:
ed:ee:1e:9a:d7:39:ee:f4:c8:29:de:e0:50:6d:17:29:66:af:
68:a9:fe:04:28:21:59:b2:63:27:4e:9c:2c:dc:0c:27:da:fd:
4d:66:c0:9d:d5:1a:d9:30:54:3e:03:2a:51:e1:fc:d1:e0:3d:
00:e8:8c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEGP4MxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
MjExMTIwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTI2OWE4YjU3NGU1
MmJiZDQ3NTQ4ZjQ4MTdiMDg5MjQzMmMxNzFjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKoVmfr/HYHrjwxCEFd3/vLkgtxYtTVAOdttnU+cqImDzO2
0e7RDJIAiYOwydKCfJDP6hSoshCZuGEpnJ2576VxgJSstX3nLNsZKQUV5mDrQ/QN
dLTlH/JYpsMIMDZ3EwZFXn0SD0UWU7QHD5gwdcSmh8DGN/n33fRPhysgJfgF18It
d/WuQXyLb5QiKUuKBx+193ccRh1nB8Bx053/u3aK9AnK6+yQFN4xjts4dXpQNpXQ
3s3PlOUrClVpcz/iLnWnfXgzn2cewxdj0/EwZnBJC65YmzosVZjw5pnldbt63AOv
SokbuQhBzTmhTnw/8U5aMqT8lYW0HDGKy1Ib74UCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBSSaai1dOUrvUdUj0gXsIkkMsFxxDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2ttbW90WFRsSzcxSFZJOUlGN0NKSkRMQmNjUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHBCoGoAUA4AMHBSoGoAUCQAMHBCoG
oAUEAAMHBCoGoAUGwAMHBCoGoAUHMDANBgkqhkiG9w0BAQsFAAOCAQEAFy6rpzyd
OsUalNMSf7o0Nu+7crX2N3z57gjlYT8EOaKp7PwjomTUAEtwZ1c6l1Wh/7XPk/F3
KhGe2lYJTzYlDsjvkEqY/ux43AzO+la1sd7JDctJkMcE5kJAYuyeKYi87/opBVtT
5aHCBknJ6r5mM3hBVajslHdTkDepHOuHNQ2NeOgrPVXwMS3e9hUb1II91LKVVtQ7
LF4gPMtQqLTQGdmjT4gjCjimS/7j7Yr7Eu0h8jROU69AKlSjAGf62jGhPe+icZjn
7e4emtc57vTIKd7gUG0XKWavaKn+BCghWbJjJ06cLNwMJ9r9TWbAndUa2TBUPgMq
UeH80eA9AOiMjg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:19 2023 by rpki-client on console-ams.rpki-client.org