Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa
File: m4vgSntDPWNZ5JixY6mhlITvNQs.roa (raw, json)
Hash identifier: qkrdHiAGDyo/Hii7tpAIJ/kgGS5+sxnrwcDaYHqJcCg=
Subject key identifier: 9B:8B:E0:4A:7B:43:3D:63:59:E4:98:B1:63:A9:A1:94:84:EF:35:0B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16A5FF8B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa
Signing time: Mon 07 Mar 2022 05:22:24 +0000
ROA not before: Mon 07 Mar 2022 05:22:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379977611 (0x16a5ff8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 7 05:22:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b8be04a7b433d6359e498b163a9a19484ef350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:4b:53:18:b3:55:63:52:d6:1b:d3:46:3b:
98:49:82:06:38:1a:e6:04:60:59:ba:ec:dd:6b:09:
81:1d:46:77:9d:e4:d5:25:53:8d:df:3c:2f:4d:1b:
0a:0c:f8:3c:10:1b:fc:66:b9:ac:94:de:be:41:fb:
78:02:e2:b4:36:37:5b:17:7c:5e:68:8e:10:fc:67:
ab:2b:3f:09:c0:66:ca:a0:b7:25:7f:58:bc:be:08:
37:60:4c:af:57:fd:31:fb:60:74:88:ac:c4:3e:c5:
89:a2:d6:cc:d1:d8:ab:3d:20:42:9d:3f:08:e9:0c:
7d:64:78:b7:7f:f4:f2:2f:75:e8:8b:2c:9b:64:17:
6f:5a:bf:c9:88:0b:2c:f7:89:7e:80:cb:cb:ea:4d:
b3:b7:0b:bd:f5:28:ba:00:c4:b5:2b:1e:36:9a:cd:
d1:d3:7e:04:23:d0:9b:06:0f:96:1f:23:92:bc:c6:
32:92:c2:c4:3b:62:a7:8d:52:c9:0e:aa:4b:60:34:
7d:70:e0:a9:a6:c7:20:e0:d4:d2:77:4d:bb:32:94:
c1:29:0f:10:43:70:c7:80:c9:62:8d:ff:c5:03:02:
d6:ae:23:61:ec:ba:8e:aa:7c:95:7d:41:6c:57:3b:
c9:97:53:29:be:d1:92:b1:c8:ad:6d:b8:36:68:89:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:E0:4A:7B:43:3D:63:59:E4:98:B1:63:A9:A1:94:84:EF:35:0B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::/44
Signature Algorithm: sha256WithRSAEncryption
15:68:64:7a:b6:dd:96:1c:17:1c:60:0f:2f:03:42:aa:aa:e0:
24:ea:1e:33:80:a9:3a:4a:b3:f2:9c:e5:04:3a:43:7c:cd:dc:
89:b4:93:a9:20:c3:6b:c9:5d:80:aa:ca:5f:ad:1e:fc:b9:5f:
ec:ce:d0:66:9e:76:61:cf:d1:72:08:e0:0e:c0:5b:b6:8d:e5:
ae:89:7d:14:20:a2:ee:d2:8d:93:17:ca:2d:6c:a1:8d:98:6c:
d7:84:2c:09:a6:8d:6b:6f:5b:1f:48:6d:a1:ae:72:d6:cf:0c:
2c:f7:43:12:e8:99:59:00:2f:46:b8:c2:8d:c8:b0:47:54:12:
d8:62:8b:8e:63:ec:37:a4:36:a2:8f:7d:c4:5e:e6:17:a7:30:
cc:bf:95:d8:fd:a4:d9:e5:59:14:15:92:02:bd:31:a6:fb:15:
3d:d8:68:08:d1:f8:05:92:78:bd:98:ec:98:55:57:3a:b6:03:
de:0e:ee:a0:b0:89:0b:76:ef:15:bb:4b:9d:2b:f7:f6:25:5c:
9a:0c:88:26:af:a8:a3:e8:ca:64:17:6c:db:39:75:7c:d6:00:
53:22:28:e7:c4:7e:68:a1:b7:5b:5e:55:9e:75:2f:a0:19:86:
d1:eb:bf:21:b0:b2:93:b4:88:b4:16:8a:bf:66:79:e7:50:3b:
76:34:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org