Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nhgLu5LKjj9Ox-6gVLW04VAqEoU.roa
File: nhgLu5LKjj9Ox-6gVLW04VAqEoU.roa (raw, json)
Hash identifier: RSjsdqgHHJBPWBE9rr+1U5GL6uONaK203hk1DjtKLJI=
Subject key identifier: 9E:18:0B:BB:92:CA:8E:3F:4E:C7:EE:A0:54:B5:B4:E1:50:2A:12:85
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E7E78CF9A77FB0557BAC345D7D239B88
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nhgLu5LKjj9Ox-6gVLW04VAqEoU.roa
Signing time: Tue 06 Dec 2022 14:47:02 +0000
ROA not before: Tue 06 Dec 2022 14:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204789
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:1de0::/44 maxlen: 48
2a06:a005:1df0::/44 maxlen: 48
2a06:a005:1dd0::/44 maxlen: 48
2a06:1287:9000::/36 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:e7:8c:f9:a7:7f:b0:55:7b:ac:34:5d:7d:23:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 14:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e180bbb92ca8e3f4ec7eea054b5b4e1502a1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:16:35:a9:99:c1:b1:93:45:f4:55:48:2a:
26:d3:dc:14:98:68:52:0e:cc:cd:e0:4e:9e:fc:c7:
31:6f:c9:79:e3:0d:3d:64:42:95:04:f2:4a:7c:39:
01:61:29:22:9b:d6:b9:d1:e1:8d:4b:bc:5e:34:05:
91:9f:b0:1d:8e:a6:ec:4c:f1:46:98:0a:17:2e:8c:
9e:d2:41:0e:88:8f:4d:03:db:b3:18:af:f0:92:e1:
1d:4d:6f:f9:ec:6f:e4:70:13:d4:8f:9a:c1:21:c0:
a1:dc:d2:5e:4c:05:df:65:91:0e:10:58:0a:89:08:
c1:c6:43:f1:bd:cd:b8:0c:8c:f1:e0:24:8a:c4:50:
c0:44:a6:14:11:bd:d4:f2:6d:1b:81:ec:64:b7:e2:
58:91:45:59:b5:88:75:25:32:67:31:8d:11:40:39:
25:19:92:df:a6:77:d0:c7:1f:7c:62:d3:01:1f:3e:
f1:c6:b3:41:cc:61:61:7c:b8:16:c5:f6:84:84:5a:
94:e3:1d:71:e2:4d:4f:f5:02:48:10:2f:23:d5:b3:
d2:ea:d5:af:ce:c7:d5:23:87:8a:f8:cb:54:6a:7c:
e2:a5:60:bb:e7:d7:e7:29:c4:e0:29:c0:c5:f4:ab:
f2:da:6b:11:67:e1:dc:8c:36:97:09:3e:ed:c3:9b:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:0B:BB:92:CA:8E:3F:4E:C7:EE:A0:54:B5:B4:E1:50:2A:12:85
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nhgLu5LKjj9Ox-6gVLW04VAqEoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:1287:9000::/36
2a06:a005:1db0::/44
2a06:a005:1dd0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:2b:eb:03:62:df:9f:97:cc:e8:3c:3c:a6:2c:c6:53:bd:2d:
f2:af:fd:30:ea:7d:58:dc:61:58:a9:58:96:32:4a:5a:4f:94:
c2:f6:b6:44:d3:f6:26:18:a6:49:d2:7d:20:f0:46:fd:29:99:
b9:34:b6:f5:f4:53:72:31:91:5f:66:be:5c:ad:68:ee:d6:12:
2d:ac:05:90:ae:29:74:5e:c7:4e:75:93:db:53:74:ec:94:1a:
68:08:20:c7:7f:40:e4:e5:2f:60:d0:a9:ea:07:c5:10:c9:f7:
83:3f:28:87:09:cf:07:35:2c:8a:c1:b4:69:9d:7c:38:06:19:
a2:07:00:70:f0:d7:f1:fa:1e:7f:b1:8d:55:56:56:e7:0c:88:
cd:e9:04:e6:f6:62:5e:1c:8b:e8:7f:b6:40:b5:fb:0e:8d:73:
33:49:62:7c:df:2d:1a:c0:67:5b:49:8b:d6:6c:ab:73:f5:78:
b8:3b:d0:e8:cc:67:b5:9e:0d:00:ab:98:86:18:76:26:e4:d2:
53:0e:14:23:87:bc:bf:3a:dd:06:15:a3:ef:64:a7:88:69:7c:
ff:35:f4:8c:59:df:c4:5f:fd:59:7e:9a:6c:ca:36:be:09:e5:
9d:47:86:15:e4:c7:51:f0:45:ad:a9:5d:ad:e4:a9:41:8b:0b:
da:50:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org