Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/prRSJvMkSq9tYlY3BqbRaH8I5r8.roa
File: prRSJvMkSq9tYlY3BqbRaH8I5r8.roa (raw, json)
Hash identifier: um2w8RlJqhSxEAHcRtt6R+SDuH4dcJW7hXlFIscymwU=
Subject key identifier: A6:B4:52:26:F3:24:4A:AF:6D:62:56:37:06:A6:D1:68:7F:08:E6:BF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183EB3E50701DB3AE4B466EAEE73BEC7646
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/prRSJvMkSq9tYlY3BqbRaH8I5r8.roa
Signing time: Tue 18 Oct 2022 13:17:53 +0000
ROA not before: Tue 18 Oct 2022 13:17:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209391
IP address blocks: 2a06:a005:1fe0::/44 maxlen: 48
2a06:a005:1f90::/44 maxlen: 48
2a06:a005:1d70::/44 maxlen: 48
2a06:a005:1fa0::/44 maxlen: 48
2a06:a005:1fd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:3e:50:70:1d:b3:ae:4b:46:6e:ae:e7:3b:ec:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 18 13:17:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6b45226f3244aaf6d62563706a6d1687f08e6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:1d:22:81:75:2a:30:f3:c9:10:f0:36:51:
81:34:82:4d:04:b9:03:75:36:3b:20:5c:e8:dc:45:
39:c0:ef:b8:72:4a:e6:cb:0a:99:04:e9:67:77:80:
1a:2f:58:0b:b9:6f:83:2c:4d:24:3a:0d:db:eb:74:
af:2f:33:7f:c5:f6:9e:ee:59:97:72:3e:e9:96:f8:
3d:35:13:c9:1c:cb:62:de:09:6f:14:00:85:ad:a4:
fa:0b:d7:57:60:41:34:8c:fa:98:f1:dc:cb:44:ec:
65:1b:aa:d6:7b:c8:e8:33:17:71:68:dd:d0:05:92:
25:59:db:b8:ba:0b:1f:fb:18:cd:0f:a7:9b:ef:1a:
12:d1:2d:7f:a4:71:f3:d6:b6:9e:eb:d0:c1:ab:a7:
12:45:62:55:2b:71:76:3a:6d:cf:fa:83:85:bd:7f:
39:b8:be:6c:11:c0:7f:88:65:c0:7a:ae:ba:fa:76:
dc:90:59:7f:85:61:6a:0a:c8:46:ef:28:21:da:41:
cf:e9:64:82:ba:2b:4c:81:b1:bb:3d:b2:71:2f:7f:
61:08:d7:76:92:f0:75:75:f3:64:47:49:8a:47:b2:
d9:ef:54:39:0c:a1:3f:f6:05:64:cf:0d:b0:39:af:
6c:e7:0c:77:71:db:d2:67:75:49:5b:3c:1e:b4:0a:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:52:26:F3:24:4A:AF:6D:62:56:37:06:A6:D1:68:7F:08:E6:BF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/prRSJvMkSq9tYlY3BqbRaH8I5r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d70::/44
2a06:a005:1f90::-2a06:a005:1faf:ffff:ffff:ffff:ffff:ffff
2a06:a005:1fd0::-2a06:a005:1fef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:21:d0:d5:28:43:26:ae:a7:24:d4:ba:1d:5a:64:50:70:41:
66:d7:bf:f8:35:53:3e:f3:cc:43:8e:2b:38:c7:d8:34:f1:32:
ad:fc:c5:3c:17:a2:03:46:5a:41:5e:14:90:6a:da:2b:53:c9:
48:a8:61:2f:05:ac:53:bb:75:a6:81:b8:41:d8:71:2e:41:2c:
d9:f1:70:19:e2:24:2e:21:6e:72:ae:9b:60:12:22:37:ae:2c:
8e:37:70:be:86:3e:bb:03:e3:d6:30:dd:2e:55:15:d6:51:96:
a3:6a:b2:af:27:17:c4:fa:ad:64:2c:c1:64:e4:a3:1f:c1:96:
2a:55:ef:71:d0:c0:b2:36:e8:82:6e:20:b3:b0:e8:0b:3b:71:
2f:90:ad:5c:11:b9:14:f6:60:5a:84:dc:62:5c:6a:34:86:00:
f5:37:b7:41:83:a4:96:d5:49:75:4c:17:e4:a1:f5:db:29:76:
43:54:d8:b7:dd:07:66:e3:0b:10:80:a3:b7:2d:32:a4:5d:91:
05:a4:24:0a:3e:93:ec:e8:0b:30:67:4b:13:f4:cb:42:25:c6:
9f:a9:36:33:0f:ab:c0:4f:c3:22:0c:9f:51:8d:a3:63:49:46:
11:80:9c:e0:f2:58:06:e0:a0:9d:5e:d2:38:5c:65:6b:01:a9:
7a:c3:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org