Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa
File: ri0HuiNleNccABNIj-HvkXm20Kc.roa (raw, json)
Hash identifier: 5O0VbPqeZVDNkrfnA7piJ1hLJjqzjwWNGAiYwZzoIj8=
Subject key identifier: AE:2D:07:BA:23:65:78:D7:1C:00:13:48:8F:E1:EF:91:79:B6:D0:A7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181DAA56F628C3086952FF5EC2D54B63D2A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa
Signing time: Thu 07 Jul 2022 21:51:23 +0000
ROA not before: Thu 07 Jul 2022 21:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:1000::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:a5:6f:62:8c:30:86:95:2f:f5:ec:2d:54:b6:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 7 21:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae2d07ba236578d71c0013488fe1ef9179b6d0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:0c:42:6c:bb:c7:54:d4:e4:7a:38:ec:3e:
2b:4f:68:96:a9:03:cf:fa:26:7f:a8:08:e7:3d:b1:
b7:33:27:14:38:03:2f:75:b0:6a:07:89:27:54:1d:
6b:66:c7:1f:19:d8:fc:f6:df:d9:a4:c8:a7:eb:ee:
32:7c:13:d6:c8:59:13:32:be:9a:86:92:7f:72:ed:
86:56:b1:bf:c0:05:92:45:f6:02:12:ea:33:c9:a9:
49:23:05:7c:a9:55:50:a7:02:82:c0:ff:96:fb:8e:
7e:ed:84:4b:47:a3:af:53:a6:d1:77:af:85:c9:fb:
a9:17:c9:89:fe:e8:ed:6b:86:a9:12:84:62:d7:c6:
56:37:6c:69:bf:42:1f:19:da:60:13:32:d6:54:65:
58:c8:12:74:79:6c:58:44:a0:70:0a:3b:86:e2:19:
75:90:02:6c:94:58:82:88:d2:22:51:eb:ca:57:db:
5d:78:bc:c1:78:4f:0b:bb:d8:24:de:45:9d:87:f9:
04:10:85:ac:43:d5:05:cf:ad:36:fc:b9:f5:19:e0:
42:36:e1:5c:91:51:6f:5f:53:a5:0b:bb:7b:71:95:
fc:2e:a5:d8:f9:06:75:69:ca:88:1f:ed:d6:e9:08:
44:86:ef:67:46:7d:4c:7b:c0:6e:e5:bd:70:e2:57:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:07:BA:23:65:78:D7:1C:00:13:48:8F:E1:EF:91:79:B6:D0:A7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
6c:ec:be:b5:69:18:51:ca:6b:1f:aa:eb:19:2e:49:d4:f0:02:
0b:aa:50:6b:c7:62:76:d2:b8:6a:84:dc:0a:ad:a4:b3:90:cd:
75:b4:f2:32:2b:2f:73:31:e2:04:83:1b:d9:ea:a9:75:5f:11:
2a:a6:e8:bc:32:ae:8d:48:8e:6e:da:c2:ff:67:38:01:9e:83:
62:ae:dd:a0:5a:6c:f6:c7:e5:65:de:60:9d:63:fd:5d:ca:d5:
ca:11:ab:b5:88:99:fd:ec:a1:ee:09:00:29:a2:68:37:8d:23:
4b:2d:29:d3:91:d0:c8:3a:e0:df:61:97:fa:d8:0e:65:d3:73:
74:99:3f:6b:df:38:7d:82:33:ea:61:c5:86:cb:b6:47:a6:6f:
67:b2:bf:41:37:1a:c1:f5:3e:ce:76:df:8c:00:0f:7f:b2:6a:
4e:d2:a5:07:cf:8a:18:06:30:9d:7e:5b:9e:21:19:85:37:87:
f5:86:d6:60:41:cb:4f:4f:f6:32:e0:f1:56:c6:fd:f2:43:50:
6b:87:8f:3b:a1:ef:84:96:c9:92:54:61:68:30:b4:15:d5:b1:
4d:c1:6f:8f:f0:b8:2f:8d:1d:23:2f:27:fa:5f:ec:b7:81:78:
17:b4:9e:2b:51:96:ed:d6:6b:14:7f:14:d0:73:d6:c5:15:fa:
e3:6c:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org