Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rhIsuRT5m-Z5W_ilybSfS0wgwuY.roa
File: rhIsuRT5m-Z5W_ilybSfS0wgwuY.roa (raw, json)
Hash identifier: o7Y4EpegKraGUSyNwyeiJVIOdtm06ZjcW6tqXwg80bE=
Subject key identifier: AE:12:2C:B9:14:F9:9B:E6:79:5B:F8:A5:C9:B4:9F:4B:4C:20:C2:E6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01841F8976E10920F7F388394101B0931249
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rhIsuRT5m-Z5W_ilybSfS0wgwuY.roa
Signing time: Fri 28 Oct 2022 17:00:13 +0000
ROA not before: Fri 28 Oct 2022 17:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206633
IP address blocks: 2a06:a005:150b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:89:76:e1:09:20:f7:f3:88:39:41:01:b0:93:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 28 17:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae122cb914f99be6795bf8a5c9b49f4b4c20c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:fe:d0:36:27:be:eb:0f:5c:46:63:f7:b1:
ae:55:1c:99:93:8f:ff:42:2d:51:e3:d2:89:0c:d5:
5b:5c:bf:45:e0:fa:4d:80:f0:92:3b:9b:6f:ac:c0:
a7:77:31:27:57:89:af:97:44:40:0a:6d:30:be:34:
a0:a7:22:25:a0:ef:6c:cd:62:50:20:df:40:22:fa:
4e:99:bd:93:ea:c4:0f:30:ca:7c:a6:af:97:3f:80:
69:9b:43:9d:d7:c2:f7:8f:ac:a3:62:70:32:cf:fb:
05:e0:a6:65:f0:e2:af:d5:c2:57:3a:8e:af:c3:f4:
81:7f:3e:ab:6f:f0:72:91:bc:55:35:01:57:2f:c7:
e3:7f:87:50:a8:23:7b:01:b1:85:be:c3:4c:9d:e3:
b9:bc:bb:9b:a6:98:c4:7b:55:f0:19:cd:e8:01:80:
73:e5:18:c1:46:59:05:cd:c0:4d:46:5e:0a:4d:e2:
e5:b8:75:ff:23:8f:32:74:60:0a:28:bf:3f:5d:6e:
fe:af:56:fa:d2:e6:da:fb:5c:4f:71:7d:05:3f:63:
38:42:7b:19:82:4d:59:a8:a8:cf:80:3c:95:05:7e:
89:2b:ec:c9:1e:d6:05:22:f9:a0:32:57:3a:88:e4:
4d:fd:fd:dc:45:a8:ee:4a:64:2c:65:79:48:67:54:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:2C:B9:14:F9:9B:E6:79:5B:F8:A5:C9:B4:9F:4B:4C:20:C2:E6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rhIsuRT5m-Z5W_ilybSfS0wgwuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150b::/48
Signature Algorithm: sha256WithRSAEncryption
66:9f:d4:63:84:ff:b2:7c:e3:df:4f:c4:d9:df:63:82:21:6b:
76:fa:97:62:61:67:47:08:b3:33:98:87:3c:9f:a9:6d:31:d9:
1c:79:f7:d5:86:07:58:52:bf:3c:8f:bc:2d:08:66:80:9c:0b:
f4:d3:e3:b8:21:77:6e:cf:87:a6:eb:c7:ea:5f:4b:7b:ce:b7:
45:2e:92:e0:18:c0:ce:0b:fc:76:e7:ce:1d:ab:7a:4a:aa:aa:
5d:10:b1:1e:16:ea:46:7c:9d:ad:25:69:3b:ec:02:66:46:00:
c4:8f:4a:2e:7a:9a:09:a1:b1:8b:2a:82:86:3b:5f:69:1d:db:
ca:71:79:fc:65:77:bf:47:ac:cc:8c:46:7d:5d:d1:36:fc:5b:
7a:15:0d:2e:87:5e:08:5b:e4:5c:77:41:c1:67:88:c6:18:7d:
4f:61:06:5d:53:6f:b8:ce:b3:57:00:df:1b:c0:b3:2e:50:15:
d7:95:5a:f1:61:5f:aa:0c:14:58:79:fd:3d:36:eb:33:f1:f8:
e6:bf:33:e9:52:35:86:68:43:11:0c:9a:b2:ca:a6:15:c6:7e:
5b:1d:e1:0e:0e:90:e0:15:22:b9:3a:4d:51:69:b9:1f:76:00:
98:07:dc:50:3d:48:d3:14:df:ad:56:82:48:a9:3d:b2:94:03:
f3:f8:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org