Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lY1ceZ9gBrMr2-BML0YyjRjKJOU.roa
File: lY1ceZ9gBrMr2-BML0YyjRjKJOU.roa (raw, json)
Hash identifier: +9ZO7zm2OKqrROGWbpkul3lYoE8g7VsMCnk4fZyTd1M=
Subject key identifier: 95:8D:5C:79:9F:60:06:B3:2B:DB:E0:4C:2F:46:32:8D:18:CA:24:E5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01834F8C2498522D6549FE1469DFEE426E60
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lY1ceZ9gBrMr2-BML0YyjRjKJOU.roa
Signing time: Sun 18 Sep 2022 07:42:07 +0000
ROA not before: Sun 18 Sep 2022 07:42:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202996
IP address blocks: 2a06:a005:1c80::/45 maxlen: 48
2a06:a005:5a4::/48 maxlen: 48
2a06:a005:1c00::/44 maxlen: 48
2a06:a005:1680::/44 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4f:8c:24:98:52:2d:65:49:fe:14:69:df:ee:42:6e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 18 07:42:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=958d5c799f6006b32bdbe04c2f46328d18ca24e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:7c:8b:23:c7:c9:fa:fc:a7:78:5f:df:a3:
20:5d:64:39:e2:46:13:f6:7c:d6:96:cd:5c:f6:65:
62:b4:11:31:b8:3d:5f:27:48:78:92:52:52:cb:39:
76:ff:c8:cc:8b:db:65:4d:26:cc:5e:9e:3d:c5:23:
4b:c6:80:7e:fa:d0:bf:c3:46:ee:84:14:ba:26:4f:
6d:36:04:12:e9:a8:96:94:f1:22:13:eb:ec:d5:eb:
16:4f:f5:4f:47:dc:75:dc:6c:af:ff:ba:99:1d:52:
28:8e:70:ea:cf:24:a1:67:61:cb:7f:4f:19:21:ba:
36:eb:0b:81:79:2a:dc:8f:a0:d0:95:fc:fe:5d:a9:
e1:18:fb:9b:2e:02:1d:2c:0c:7e:a3:ce:7c:42:b3:
b3:f3:fb:e4:41:d0:83:c4:50:0a:fd:ec:a2:32:93:
79:16:68:8f:03:2f:18:c8:ae:d4:c3:23:dd:cb:7e:
b3:1a:db:ef:3a:a5:3f:c0:bf:17:3d:04:c3:7f:2b:
a5:0a:d2:b8:13:05:70:c8:50:32:05:cd:93:e3:e5:
6a:bc:25:0b:46:9e:59:d0:64:06:ac:a6:2f:d5:4f:
e1:4c:d6:76:46:33:2e:ce:34:c2:5d:7d:43:8b:eb:
9e:f7:e0:fb:2f:82:09:f2:bd:ba:7c:88:62:49:4f:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:5C:79:9F:60:06:B3:2B:DB:E0:4C:2F:46:32:8D:18:CA:24:E5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lY1ceZ9gBrMr2-BML0YyjRjKJOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:d2b::/48
2a06:a005:1680::/44
2a06:a005:1c00::/44
2a06:a005:1c80::/45
Signature Algorithm: sha256WithRSAEncryption
4b:3a:ce:56:99:46:b9:ba:27:48:71:26:fe:c6:08:33:2f:09:
46:99:c8:c6:82:70:66:9c:6f:83:ef:ac:b2:c4:da:a6:2c:d8:
e0:06:02:e8:8f:87:e3:72:df:6b:cc:8c:17:cd:5c:43:7b:e8:
c4:52:7e:10:45:a3:d0:b7:f3:c3:cc:8a:b5:6d:31:2e:d4:75:
ba:c3:11:4f:45:b0:84:31:e1:63:f6:e0:9a:78:f3:77:fa:c9:
24:9e:8a:56:24:70:24:1b:c9:a0:6d:d9:13:6f:98:97:ce:40:
93:fd:18:24:dc:a0:13:6c:24:c0:d3:96:64:dd:81:76:e0:91:
0e:0a:cd:0b:fc:a8:f4:5a:d3:0f:09:aa:b0:ab:23:ac:52:d2:
16:e2:2c:94:fc:f7:d4:6c:c1:d3:07:62:28:ee:b7:bd:8e:20:
73:5a:02:d6:ae:80:8c:7d:18:cb:83:77:26:22:5e:bb:b4:d6:
41:f3:8d:c5:63:f3:93:e5:fc:53:31:fe:e3:63:a6:53:f4:a6:
3d:3d:99:0a:a8:3e:68:b5:b0:6f:ca:7f:d2:43:d8:8e:a7:bf:
b1:68:8f:08:4a:60:b6:9b:d5:3e:da:04:81:22:05:2c:b6:18:
ae:3b:51:a4:83:46:81:a5:09:cb:15:f2:98:fd:75:84:8c:a0:
eb:2b:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org