Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa
File: rL1IoksAHVYo3cIZKzgINX0zAPY.roa (raw, json)
Hash identifier: lkOO2c3wa/Oj5ekdIGB++gP5afr1b1dIM+oIDdlrhvk=
Subject key identifier: AC:BD:48:A2:4B:00:1D:56:28:DD:C2:19:2B:38:08:35:7D:33:00:F6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184BCF08FBE6D88BAF29A7DDEA1166FCC02
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa
Signing time: Mon 28 Nov 2022 06:33:12 +0000
ROA not before: Mon 28 Nov 2022 06:33:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203843
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:108f::/48 maxlen: 48
2a0a:6040:a100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:f0:8f:be:6d:88:ba:f2:9a:7d:de:a1:16:6f:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 28 06:33:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acbd48a24b001d5628ddc2192b3808357d3300f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:4d:be:bb:78:7d:57:78:f6:5d:e9:81:95:
e2:b2:a4:12:e2:bc:b5:8e:f1:d6:c2:34:87:b0:95:
56:58:fa:a3:5d:58:97:89:bb:65:c0:54:87:6e:25:
2b:7f:c8:35:27:88:e0:65:f0:7b:5d:76:d4:55:16:
72:2b:49:ea:90:ab:f2:d8:1c:a1:d1:0e:b8:15:88:
04:a6:b0:54:7c:18:38:97:5b:d5:45:db:89:51:20:
03:1d:a0:81:c2:48:31:7f:60:e6:36:08:c1:be:60:
e9:1d:3e:13:e1:6b:1d:7d:eb:3f:b4:24:b3:90:b4:
77:de:a1:72:12:3d:06:27:28:74:33:31:9b:f9:2b:
28:4c:10:e0:ed:a7:41:16:a1:37:07:67:21:d8:2b:
04:f1:83:ad:52:bb:d2:9b:44:bc:28:70:7c:38:35:
72:f3:75:89:a0:62:79:56:fb:c9:60:dc:42:7e:84:
25:de:9c:0e:56:ce:bd:8f:36:e1:e4:a8:35:d2:7e:
b5:19:52:29:63:f3:4b:e7:fe:18:c5:9c:70:7c:09:
0f:93:fc:37:0d:28:a4:4e:30:ec:f1:b0:a7:5d:9c:
33:08:08:63:10:ee:39:85:a3:9b:9c:7e:d8:20:03:
62:63:e4:46:1f:51:6d:9e:99:6d:cc:47:53:b9:00:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:48:A2:4B:00:1D:56:28:DD:C2:19:2B:38:08:35:7D:33:00:F6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108f::/48
2a06:a005:150a::/48
2a0a:6040:a100::/40
Signature Algorithm: sha256WithRSAEncryption
43:5d:6b:f3:a3:e1:3b:10:d4:76:ad:32:e1:75:19:9c:19:c6:
9c:ff:8a:d0:45:82:b9:04:92:03:b5:a5:0a:ff:83:df:1c:21:
c9:ad:4e:a2:90:f0:b1:75:2a:08:81:e5:c5:66:aa:0b:0f:43:
33:53:15:5f:88:19:6c:71:ac:a2:ec:b9:97:49:bb:89:9c:3e:
7d:3a:a0:9d:48:e4:bc:c0:93:3d:72:43:80:d5:d7:ab:49:38:
9a:17:05:93:46:15:5d:88:be:ff:27:0b:3c:b8:04:b1:64:b7:
c5:29:4f:bc:e5:14:ed:0e:59:4d:74:00:00:cc:e9:cc:da:55:
a6:e0:f4:a2:66:c2:4e:71:a9:13:5c:49:ff:3f:36:bf:04:bd:
f9:1c:90:f5:b2:e0:fb:3f:2e:c2:15:57:b0:79:fb:83:be:d2:
5c:1a:98:6a:7b:78:33:8c:92:f1:24:88:ea:1e:f5:36:ea:b9:
c9:9b:60:d2:42:c0:9e:7c:2c:75:e9:25:99:dc:a1:c5:31:6a:
26:5c:21:93:86:b8:6b:1b:ff:94:ea:22:19:1b:bf:6e:d3:7e:
d8:3a:e9:18:81:69:7f:b3:fb:3c:3f:b8:ab:df:f2:a0:d8:f9:
00:e5:ea:72:eb:24:32:fd:4a:e8:7e:c6:65:64:58:e5:1f:b1:
c3:ec:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org