Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWd4F-ADADT1GzEBO7JstH38rPY.roa
File: mWd4F-ADADT1GzEBO7JstH38rPY.roa (raw, json)
Hash identifier: SYPRQ5hOBLXnggf6QGoWJ7qpGAdGeafze8MswaT79Qs=
Subject key identifier: 99:67:78:17:E0:03:00:34:F5:1B:31:01:3B:B2:6C:B4:7D:FC:AC:F6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823B7C15D34F1E128B19E5B3BD263A8E65
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWd4F-ADADT1GzEBO7JstH38rPY.roa
Signing time: Tue 26 Jul 2022 17:09:23 +0000
ROA not before: Tue 26 Jul 2022 17:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:45d::/48 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:7c:15:d3:4f:1e:12:8b:19:e5:b3:bd:26:3a:8e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 26 17:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99677817e0030034f51b31013bb26cb47dfcacf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:fa:f7:97:14:6e:5d:7b:a3:3a:b4:37:7d:
83:3d:06:0c:a4:7a:50:a5:72:0a:86:b9:ae:9d:48:
67:6a:4c:f5:e2:fe:d5:70:0e:e1:1d:71:ed:47:35:
41:4b:3a:d0:49:83:ae:de:ac:b0:d7:1f:84:72:21:
cb:47:a8:96:c2:88:7e:d4:62:41:27:50:31:3c:b5:
aa:c7:db:6f:10:79:b8:76:a3:95:5a:2c:cc:e2:ea:
a3:a8:0f:84:4c:bc:4c:fd:98:c0:f7:9f:5b:52:4d:
2c:05:c4:37:80:39:ea:09:07:5a:7d:48:63:fb:27:
4e:79:d5:37:c6:3d:58:30:2c:26:1d:c4:6c:11:5e:
86:fd:0b:45:dc:e8:29:21:95:cf:1c:c3:71:78:dc:
43:5d:66:4f:8c:1c:e8:9b:e3:e9:5e:b4:0c:34:c1:
e9:7c:8d:52:56:0c:fc:4b:d7:0e:ad:11:8c:37:60:
9b:72:f3:9f:56:3a:05:79:6f:e0:5a:d6:6c:4f:8f:
ce:f3:83:75:85:66:4d:f9:89:53:01:64:73:3f:4b:
6b:59:ab:04:90:8a:dd:da:be:d9:04:7d:35:4b:c1:
5a:b0:d9:c0:4a:9b:13:95:a4:56:8f:b2:61:19:88:
b2:88:8e:f9:98:ab:4c:61:bd:84:f4:8c:9a:1e:38:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:78:17:E0:03:00:34:F5:1B:31:01:3B:B2:6C:B4:7D:FC:AC:F6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWd4F-ADADT1GzEBO7JstH38rPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45d::/48
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
23:03:eb:d9:47:db:e1:fc:f7:a4:34:d4:e5:3d:70:c0:f8:f2:
fc:f8:f6:19:2c:80:3f:d0:3a:30:e1:84:78:e2:48:db:af:8a:
4a:88:95:b9:f2:36:7e:94:3e:07:f9:81:32:ec:f6:0a:34:4e:
0f:dd:19:69:d6:f7:01:af:79:d0:7c:bd:dc:7e:3a:ce:a6:bf:
07:0d:aa:f7:00:ff:c0:5f:2f:30:3e:34:6b:26:ae:b5:92:51:
8e:b5:eb:3a:dd:84:3c:93:ee:9a:ac:98:d5:7e:2e:85:51:61:
2c:b6:e5:55:00:0f:6d:c5:21:aa:bf:1e:30:c5:07:7c:5a:ae:
48:35:cd:bf:12:16:31:18:59:bb:cb:a5:c4:0b:cf:10:38:b4:
b4:e6:50:13:97:68:30:00:ba:b0:29:8c:1b:db:10:18:cc:11:
cb:ba:90:84:cf:65:e2:e4:fa:35:df:b9:ed:2d:87:b0:98:8f:
96:63:b0:25:b9:9b:df:e8:11:5e:a0:16:54:01:26:65:c8:93:
9e:0c:b3:20:22:c3:d5:c0:58:28:3c:81:09:c8:5a:a1:26:75:
dd:89:24:c0:46:33:ec:57:4e:06:19:aa:81:96:0f:c7:ce:13:
d4:c5:6c:03:a3:f7:5d:90:e5:68:8f:e1:14:a7:45:46:78:78:
b9:21:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org