Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lnlf6R2aUOnUgMkI1CGELe3b8ec.roa
File: lnlf6R2aUOnUgMkI1CGELe3b8ec.roa (raw, json)
Hash identifier: Aq8J4lZ7JehuzAkFHf8lNzm0XCvse3C9rrXbrCwsEDQ=
Subject key identifier: 96:79:5F:E9:1D:9A:50:E9:D4:80:C9:08:D4:21:84:2D:ED:DB:F1:E7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018443608A664CE66C761304BB1915C97284
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lnlf6R2aUOnUgMkI1CGELe3b8ec.roa
Signing time: Fri 04 Nov 2022 16:01:51 +0000
ROA not before: Fri 04 Nov 2022 16:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:60:8a:66:4c:e6:6c:76:13:04:bb:19:15:c9:72:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 4 16:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96795fe91d9a50e9d480c908d421842deddbf1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:46:80:4e:05:fc:55:38:52:53:20:11:a5:
61:ac:8c:e1:3a:da:31:9e:60:25:08:75:20:8d:f9:
43:94:f5:cf:c3:80:40:30:9f:97:55:7d:a0:00:85:
45:35:b3:39:76:37:6f:5f:1c:a7:d6:5c:49:5c:d2:
bd:c5:e5:98:e4:a5:cf:9f:ec:51:23:c3:a3:3e:e9:
b2:56:f1:d6:1f:44:bb:4f:ad:d9:f1:9a:3d:6c:c9:
ad:76:16:22:99:85:24:e5:5a:eb:d8:7b:f6:ef:59:
de:3c:62:42:f3:36:9b:aa:0f:14:86:29:3f:53:e7:
ef:ed:fd:22:cf:ca:87:5e:6e:93:57:fe:f3:6a:60:
20:cd:cc:7c:bb:d0:49:40:da:45:66:42:02:49:82:
0a:fb:68:4c:ab:85:91:20:7e:f0:a9:bd:2e:c0:ed:
3b:42:a9:b5:a9:7a:25:7a:f9:83:ce:37:09:d1:3c:
9f:b0:41:63:30:8a:e2:72:f1:8e:84:f4:22:b2:a5:
59:dd:5b:d8:d8:6e:d8:5c:0e:3a:8c:52:b7:5d:63:
5a:81:f4:75:fe:5e:74:68:86:85:c3:e7:3e:2e:6c:
27:4f:05:da:04:3f:1e:70:12:3b:35:49:d0:35:fe:
35:f2:37:c0:4f:a3:e9:b2:ad:70:50:95:13:38:f0:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:5F:E9:1D:9A:50:E9:D4:80:C9:08:D4:21:84:2D:ED:DB:F1:E7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lnlf6R2aUOnUgMkI1CGELe3b8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
6f:09:15:41:4c:2b:26:02:7c:4e:6f:b1:d1:4c:d0:64:d7:35:
ae:cf:cb:ce:d5:02:57:b0:c5:89:9e:1c:83:10:75:80:2c:b9:
b5:1c:6e:8b:02:ab:a1:8f:61:85:ef:99:cc:fa:86:f9:db:83:
41:47:68:1d:ed:18:3b:32:f6:b7:0b:48:4b:2d:af:15:6b:28:
1c:ea:35:c8:0c:9a:4e:be:47:b9:92:25:48:60:18:43:72:08:
88:4d:b2:e3:13:00:a1:3e:72:f7:f6:90:65:0a:dc:e3:da:06:
95:77:fd:29:07:dc:41:98:51:83:f0:26:d2:d1:91:fc:4e:65:
29:31:5c:19:41:33:55:ad:37:dd:8c:8c:5f:01:60:d7:65:1b:
e4:bc:ad:ed:38:63:24:f9:6a:f2:57:8b:48:11:3c:da:6a:38:
1a:59:8d:ec:84:05:2a:4e:4b:5a:d6:f2:8e:14:d4:2f:d3:19:
fa:5c:48:be:dc:8c:2a:c5:de:e4:aa:6f:d9:e8:a5:aa:aa:c3:
ca:3a:2b:76:69:84:61:41:0b:42:61:8e:55:98:65:6e:a7:af:
68:f4:78:02:90:73:9b:dc:27:cf:61:d3:44:c1:82:69:36:cd:
ca:70:a2:4d:16:e8:52:df:0e:0e:49:39:29:df:37:da:b5:cb:
7d:b8:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org