Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l_hzMjQXaGI7IzI5hIUBvSpuEkI.roa
File: l_hzMjQXaGI7IzI5hIUBvSpuEkI.roa (raw, json)
Hash identifier: /wU4ghA4IimxoGYweUScENN3CwwBq2v99lBCmi3kXnY=
Subject key identifier: 97:F8:73:32:34:17:68:62:3B:23:32:39:84:85:01:BD:2A:6E:12:42
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D6C11ADE194B2AB47CF3329E4D1CCE6D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l_hzMjQXaGI7IzI5hIUBvSpuEkI.roa
Signing time: Sat 03 Dec 2022 06:51:30 +0000
ROA not before: Sat 03 Dec 2022 06:51:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206016
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
2a0a:6040:200::/40 maxlen: 48
2a06:a005:990::/44 maxlen: 48
2a06:a005:db0::/44 maxlen: 48
2a06:a005:1390::/44 maxlen: 48
2a06:a005:1380::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d6:c1:1a:de:19:4b:2a:b4:7c:f3:32:9e:4d:1c:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 3 06:51:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97f87332341768623b233239848501bd2a6e1242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:72:86:e3:7f:d6:c1:b0:ac:62:6b:69:70:
c4:b6:d3:fb:eb:b3:b6:14:d0:37:17:b6:7d:4e:3f:
0d:c4:68:7a:e2:ad:49:11:fe:90:5c:c0:a5:88:00:
ca:aa:b2:83:24:db:c0:73:e8:4a:85:c4:85:5f:bf:
30:8a:9b:e7:a1:96:67:89:b1:39:84:14:bf:e8:97:
f8:b7:11:7b:3c:85:0c:ae:ad:a7:82:13:07:45:20:
f9:ec:51:67:55:b9:07:29:51:67:ee:39:32:1e:e3:
f2:95:2e:bb:e4:6d:74:38:13:2e:bb:07:0c:43:da:
6e:9c:27:a7:2d:0a:81:6f:87:f6:05:b0:3c:33:f8:
f4:7d:d6:af:79:b8:50:97:56:d6:15:42:bf:35:f6:
cb:2f:35:a3:b7:03:8d:75:ae:59:34:a0:20:d0:1a:
7c:be:09:b5:65:06:d1:fc:55:62:7e:f0:88:70:5e:
fd:97:32:3e:e7:df:47:6e:1e:b1:ad:ff:85:45:3f:
6f:08:4f:c7:90:4c:7a:c1:b2:c2:23:bd:81:8e:0f:
4a:15:62:58:ba:a1:c9:a5:38:61:2d:c5:18:ff:47:
a7:d1:d2:41:bd:c8:fd:2d:68:18:9d:54:9a:e6:1d:
52:65:f7:89:e7:14:40:6b:c4:34:5b:3f:15:4b:56:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:73:32:34:17:68:62:3B:23:32:39:84:85:01:BD:2A:6E:12:42
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l_hzMjQXaGI7IzI5hIUBvSpuEkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:990::/44
2a06:a005:a0c::/48
2a06:a005:db0::/44
2a06:a005:1380::/43
2a07:54c2:b00b::/48
2a0a:6040:200::/40
Signature Algorithm: sha256WithRSAEncryption
73:78:b8:7f:46:53:35:53:6a:29:4d:a4:e1:e9:91:6f:a6:0d:
ae:19:26:b5:c1:e7:c6:9a:a9:29:cc:8e:9b:aa:f4:b8:ec:db:
f7:95:dc:7b:fe:da:fc:16:bc:4b:fd:b7:9a:ca:a9:8c:d8:67:
e4:df:6b:3f:cc:78:a1:fb:49:a7:0c:a6:9e:63:68:0d:c8:52:
42:6f:69:36:b6:5e:04:51:68:d7:62:d4:e4:71:d7:cc:f5:ab:
18:54:14:ad:b5:8e:78:2b:27:e8:7f:2b:95:f2:07:5a:9f:c0:
41:3c:a7:d1:71:78:ec:81:f3:1b:81:66:e6:a3:e2:d1:2b:ba:
64:31:a4:47:2e:e7:04:93:2b:30:82:40:10:b0:a1:d4:75:55:
07:7c:9b:b1:e4:66:34:51:f1:2f:9f:7b:d7:f3:91:a9:5c:67:
23:01:24:f8:0b:1f:59:8f:8d:db:f3:8c:df:a1:26:03:f7:a7:
b8:6d:a4:eb:b7:fb:7b:0a:2b:1a:76:1c:24:5b:b4:64:77:be:
78:3d:da:04:e4:0d:2e:3e:5f:5c:ad:dd:e5:1b:4f:e0:4d:58:
69:34:72:08:8b:c1:d4:4c:8f:80:1c:06:ee:ba:49:67:11:8c:
0d:c5:91:9c:a3:7d:03:1a:01:e1:80:ed:8e:3f:62:63:4e:58:
bf:4d:8a:46
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYTWwRreGUsqtHzzMp5NHM5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjAzMDY1MTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Y4NzMzMjM0MTc2ODYyM2IyMzMyMzk4NDg1MDFiZDJhNmUxMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY1yhuN/1sGwrGJraXDEttP767O2
FNA3F7Z9Tj8NxGh64q1JEf6QXMCliADKqrKDJNvAc+hKhcSFX78wipvnoZZnibE5
hBS/6Jf4txF7PIUMrq2nghMHRSD57FFnVbkHKVFn7jkyHuPylS675G10OBMuuwcM
Q9punCenLQqBb4f2BbA8M/j0fdavebhQl1bWFUK/NfbLLzWjtwONda5ZNKAg0Bp8
vgm1ZQbR/FVifvCIcF79lzI+599Hbh6xrf+FRT9vCE/HkEx6wbLCI72Bjg9KFWJY
uqHJpThhLcUY/0en0dJBvcj9LWgYnVSa5h1SZfeJ5xRAa8Q0Wz8VS1YF+wIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFJf4czI0F2hiOyMyOYSFAb0qbhJCMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvbF9oek1qUVhhR0k3SXpJNWhJVUJ2U3B1RWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAAjA1AwcEKgagBQmQ
AwcAKgagBQoMAwcEKgagBQ2wAwcFKgagBROAAwcAKgdUwrALAwYAKgpgQAIwDQYJ
KoZIhvcNAQELBQADggEBAHN4uH9GUzVTailNpOHpkW+mDa4ZJrXB58aaqSnMjpuq
9Ljs2/eV3Hv+2vwWvEv9t5rKqYzYZ+Tfaz/MeKH7SacMpp5jaA3IUkJvaTa2XgRR
aNdi1ORx18z1qxhUFK21jngrJ+h/K5XyB1qfwEE8p9FxeOyB8xuBZuaj4tErumQx
pEcu5wSTKzCCQBCwodR1VQd8m7HkZjRR8S+fe9fzkalcZyMBJPgLH1mPjdvzjN+h
JgP3p7htpOu3+3sKKxp2HCRbtGR3vng92gTkDS4+X1yt3eUbT+BNWGk0cgiLwdRM
j4AcBu66SWcRjA3FkZyjfQMaAeGA7Y4/YmNOWL9NikY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:19 2023 by rpki-client on console-ams.rpki-client.org