Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nOHQRacFCRqYRo_HWlrNXDHGpj8.roa
File: nOHQRacFCRqYRo_HWlrNXDHGpj8.roa (raw, json)
Hash identifier: z149cG+uD2OD2/j4cxW1QfWbEY/p4allY7sK1tU5G5Q=
Subject key identifier: 9C:E1:D0:45:A7:05:09:1A:98:46:8F:C7:5A:5A:CD:5C:31:C6:A6:3F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17B1EA05
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nOHQRacFCRqYRo_HWlrNXDHGpj8.roa
Signing time: Mon 04 Apr 2022 16:38:20 +0000
ROA not before: Mon 04 Apr 2022 16:38:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213286
IP address blocks: 2a06:a005:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397535749 (0x17b1ea05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 4 16:38:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce1d045a705091a98468fc75a5acd5c31c6a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:b1:17:c6:26:77:16:49:da:57:96:c8:66:
ff:66:7d:2f:d9:f8:14:c7:ea:61:67:4c:34:6b:7b:
18:91:91:1c:d2:55:83:ca:1b:da:61:d3:f4:00:49:
bd:6d:74:3b:53:bf:75:b6:92:16:54:83:75:cc:55:
b7:2b:b0:b0:4b:69:ab:c4:e1:4d:62:d7:23:e7:04:
8c:5a:6b:ad:d2:da:38:ce:1f:bf:a8:e3:b9:37:e5:
61:06:4b:85:76:05:e2:d6:2c:de:03:f3:f9:46:93:
34:ff:aa:8c:b3:78:f5:ef:dd:f0:65:f8:2d:05:79:
ce:29:d2:75:c0:f7:1a:e9:3e:75:d1:74:94:30:78:
6b:8a:65:b0:50:00:32:d2:32:c3:ce:77:b4:db:79:
cb:ce:64:b2:aa:5e:49:a9:a9:24:0a:73:b3:32:ca:
4d:f5:a8:bc:c1:3b:a7:53:9d:06:b5:41:64:b5:1e:
95:0c:d1:d6:e5:77:f5:00:48:02:4a:cd:61:19:3a:
c1:ff:e6:88:0b:b6:b8:ad:05:35:80:d3:db:fd:7e:
ee:6c:e6:40:a7:7b:cf:b2:fc:7c:d1:9c:dc:5e:16:
24:4a:4b:2c:1e:8c:71:fa:57:d0:d4:26:01:7b:5b:
29:49:f5:7d:1f:eb:01:e0:a5:92:8e:3c:17:f4:f3:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:D0:45:A7:05:09:1A:98:46:8F:C7:5A:5A:CD:5C:31:C6:A6:3F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nOHQRacFCRqYRo_HWlrNXDHGpj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:17::/48
Signature Algorithm: sha256WithRSAEncryption
0a:41:24:4a:81:c3:69:5a:3b:8f:a0:4d:bc:62:5d:3b:85:f7:
93:fa:83:41:19:8d:55:d4:03:a8:cb:3a:03:05:42:fc:f1:5a:
48:33:22:95:21:ac:70:30:44:de:8c:ce:0f:65:10:0b:45:9e:
e2:03:29:16:e0:09:e0:0a:f4:b2:54:e3:f5:30:77:14:b5:1e:
f4:54:c9:d1:62:40:ab:9c:5a:ef:98:e9:b8:ea:28:88:47:98:
fe:72:30:58:82:d1:f6:71:a9:0f:99:8b:04:8a:a7:e3:fd:a8:
a8:d2:bd:8b:93:04:0e:36:a0:e5:63:52:d4:e9:03:0b:65:20:
d4:a3:0d:6a:bc:65:d6:14:98:5c:09:2b:65:83:89:3e:a2:e1:
e8:e0:a2:e4:4b:46:96:88:91:d7:98:4b:e5:7e:97:52:88:13:
ad:cb:c1:42:a1:58:09:d5:bf:09:6a:c2:ba:10:88:22:9b:d3:
c0:b3:65:b3:13:d1:a2:3c:b9:93:9c:42:79:bb:ee:30:e9:2c:
31:f9:07:6c:3b:f4:26:b0:49:43:1f:e9:5c:e5:94:11:9e:8a:
13:e4:3a:6f:47:ac:84:62:04:b1:f4:58:b5:13:56:5c:ce:a9:
43:a5:77:a1:27:b0:b9:4c:cc:ea:95:04:80:ce:ea:4e:58:f2:
de:81:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org