Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nDPnTHYod5PBM4OLVDym0Xh1ruA.roa
File: nDPnTHYod5PBM4OLVDym0Xh1ruA.roa (raw, json)
Hash identifier: zaVF82xTex+VrD7mR1Oga0tll7ZG0W/fjYE1N9RtrVM=
Subject key identifier: 9C:33:E7:4C:76:28:77:93:C1:33:83:8B:54:3C:A6:D1:78:75:AE:E0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EE8D82A8E876AA072889BF8887DBEA5A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nDPnTHYod5PBM4OLVDym0Xh1ruA.roa
Signing time: Wed 07 Dec 2022 21:46:02 +0000
ROA not before: Wed 07 Dec 2022 21:46:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200789
IP address blocks: 2a0a:6040:b700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8d:82:a8:e8:76:aa:07:28:89:bf:88:87:db:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 21:46:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c33e74c76287793c133838b543ca6d17875aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:e4:ab:78:9a:4d:36:ec:74:7a:39:90:e5:
80:53:40:da:34:78:91:75:ac:66:6b:76:72:da:f3:
79:2d:c3:79:11:31:b3:47:f4:8a:19:6e:d1:4a:59:
c6:4c:5e:be:08:62:81:ae:3b:34:32:21:55:c1:90:
b7:7a:b6:23:b9:72:64:52:c9:ae:9a:2d:f2:6f:00:
49:f3:42:ef:70:65:c0:c8:6f:e4:e6:c7:f2:be:dc:
a9:3d:90:75:aa:f7:e7:89:06:eb:6b:31:1f:17:7d:
16:a0:6e:5e:30:0b:fb:1f:e2:5f:bc:62:50:76:32:
1f:7b:59:a5:c0:54:41:f7:fa:51:36:0a:32:7c:61:
c8:05:f3:f0:4f:69:cc:8e:49:2e:92:b3:3c:da:34:
f9:33:25:c0:c2:0b:4c:90:39:ed:66:f2:7f:a2:72:
a9:b0:45:5a:c2:53:c2:28:66:85:97:2b:7b:8a:0e:
fd:bd:23:25:a6:75:d0:7b:8b:90:bc:6c:27:4e:da:
f4:23:18:cd:ff:f2:11:e1:87:c1:a1:c6:3d:7d:ad:
61:05:72:97:1c:d5:ac:80:be:19:f4:82:32:aa:8b:
3e:55:34:2c:0d:28:a8:af:b4:0e:cc:e0:bf:5a:b5:
52:63:6d:14:79:d6:70:ac:f1:c6:e4:58:c8:5e:e8:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:E7:4C:76:28:77:93:C1:33:83:8B:54:3C:A6:D1:78:75:AE:E0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nDPnTHYod5PBM4OLVDym0Xh1ruA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:b700::/40
Signature Algorithm: sha256WithRSAEncryption
9a:75:09:81:47:10:19:55:21:14:b3:19:bc:32:76:a2:7e:f4:
65:0b:dd:13:a9:f5:61:e6:17:ec:15:08:a5:96:37:13:f8:07:
0d:aa:95:8b:29:5b:f8:79:e9:97:0c:89:f4:06:0f:02:18:bd:
81:60:21:87:5c:ef:27:c1:20:da:dc:af:da:d8:b1:45:d6:75:
f4:dd:3c:d1:5d:8e:09:1e:4e:fc:81:d8:77:74:02:29:75:ea:
54:5f:61:d1:ea:b4:9a:8c:4b:d8:d5:22:ab:d6:14:46:f5:c0:
30:5e:49:bc:a6:41:83:d1:93:c5:3d:7e:3b:fd:1c:ed:52:2a:
ae:fc:0a:9c:e1:20:21:b4:d6:48:66:c9:6d:7b:6e:37:b4:12:
94:47:a5:62:99:20:74:93:2e:30:d8:ce:3a:27:f1:51:41:8e:
dd:9e:0a:68:87:c6:28:68:b2:9e:5a:88:d6:15:f5:d1:cd:28:
20:ad:84:0f:71:71:93:31:e1:eb:71:27:25:70:e6:04:dd:03:
5e:be:d8:32:29:44:9b:7f:86:1f:cd:38:60:23:78:2c:65:da:
d8:a6:f7:01:79:e3:c5:dc:68:4a:f4:0c:a1:bc:56:19:b5:49:
da:d9:d6:01:d8:7f:03:05:e1:d0:03:4d:96:b7:b1:31:ae:0f:
6a:1e:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org