Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/o0Ai7ASCrDtc4IGGxqGRd7JDZ6Q.roa
File: o0Ai7ASCrDtc4IGGxqGRd7JDZ6Q.roa (raw, json)
Hash identifier: fk9fwHyMS08i8t2UZPIX5dxTCYgP6b+dy5v2XesaoWU=
Subject key identifier: A3:40:22:EC:04:82:AC:3B:5C:E0:81:86:C6:A1:91:77:B2:43:67:A4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833DCEF56C07A89CDFB8616DE2B01F6B46
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/o0Ai7ASCrDtc4IGGxqGRd7JDZ6Q.roa
Signing time: Wed 14 Sep 2022 21:01:56 +0000
ROA not before: Wed 14 Sep 2022 21:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:a005:487::/48 maxlen: 48
2a06:a005:5af::/48 maxlen: 48
2a06:a005:1d40::/44 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:ce:f5:6c:07:a8:9c:df:b8:61:6d:e2:b0:1f:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 14 21:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34022ec0482ac3b5ce08186c6a19177b24367a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:eb:79:82:94:b0:2a:8d:6f:cc:3d:15:2d:
66:12:aa:bb:05:74:34:7b:3d:0f:6b:62:eb:96:77:
c1:dc:04:5f:5c:a1:06:9e:19:88:c7:d0:1d:7e:7d:
69:75:f3:3f:ba:a5:37:73:fe:15:20:a1:f8:96:2c:
eb:95:3d:76:18:fb:6d:d7:df:75:1b:8a:61:b7:6d:
cf:ca:43:7d:1d:91:9b:92:13:c2:81:cf:e5:4a:65:
60:c1:b3:05:33:81:f0:0d:ba:f0:b4:07:ac:d2:24:
e5:8d:67:a7:a6:89:3b:d1:95:15:fb:ba:fc:a3:66:
56:12:2c:a1:5a:e8:b5:e0:9d:67:aa:c8:e2:26:b0:
79:c4:61:29:a5:65:5e:c2:f1:a8:a4:0c:c6:cf:3d:
e6:1d:b2:7c:e6:a9:38:54:b1:da:cc:2e:92:ed:4b:
0e:3f:ec:f5:d2:bf:4e:d0:ce:22:e3:9b:4d:c6:25:
47:ad:d9:57:63:5b:08:ab:25:24:17:70:ac:c3:a0:
b9:7f:9d:aa:6c:70:f5:12:a2:a3:17:fc:4c:6e:d0:
8f:a1:5d:65:a7:1d:83:d0:61:c0:b6:68:21:6c:69:
69:b9:a4:67:d5:8a:0b:8f:c2:4a:72:c8:d6:23:3a:
ac:0d:59:d1:13:43:cc:c5:2d:21:b3:54:08:a9:b8:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:22:EC:04:82:AC:3B:5C:E0:81:86:C6:A1:91:77:B2:43:67:A4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/o0Ai7ASCrDtc4IGGxqGRd7JDZ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:a005:487::/48
2a06:a005:5af::/48
2a06:a005:1d40::/44
Signature Algorithm: sha256WithRSAEncryption
23:3f:41:7a:98:83:73:bc:5f:50:fb:92:ff:1d:1b:54:fe:f5:
21:0c:29:5d:5c:6b:ce:c4:df:82:7b:4e:22:1e:89:b0:87:34:
c4:81:9e:55:d5:f7:ef:c7:f2:aa:1d:d0:bc:4c:22:b0:79:2f:
88:30:5d:d7:74:86:1b:b3:fd:3f:f6:44:d8:0d:67:cf:42:03:
ba:4c:cb:54:80:bb:4e:15:6d:f5:59:75:8b:db:eb:b9:93:95:
5d:22:bd:e7:4d:9b:11:11:43:f2:fc:ed:a1:7e:d7:b3:20:3b:
54:23:95:72:0e:d0:e5:3a:a5:a7:1c:72:ae:88:1b:81:e1:8b:
cc:88:9a:aa:71:67:18:c4:5c:98:3d:12:ac:c4:f9:ed:54:05:
56:f7:ff:2c:4d:7f:03:e1:4a:ed:19:94:38:d3:2e:d4:14:59:
fe:a7:a6:6b:bb:89:63:d7:c1:e6:b4:bb:b9:09:d8:10:4c:da:
2b:9c:8a:61:6c:e2:2b:43:2a:46:cd:b2:65:a5:fc:25:e3:ad:
92:df:38:c0:c3:75:a3:be:08:b8:ed:6a:76:19:92:99:a5:a3:
22:12:62:5a:a0:a5:65:72:3c:61:c5:19:05:98:9d:f9:9c:53:
24:d0:6f:23:ce:1f:97:14:39:5d:c7:a8:7a:23:d6:1f:fc:80:
52:7e:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org