Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rp6CJf6BNtvG_c-B226HIMiYZnE.roa
File: rp6CJf6BNtvG_c-B226HIMiYZnE.roa (raw, json)
Hash identifier: QvJltvg1DYoDUjdkUjCFuEOQi3vKa9CWFi2VwWOD4OI=
Subject key identifier: AE:9E:82:25:FE:81:36:DB:C6:FD:CF:81:DB:6E:87:20:C8:98:66:71
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181F8239582D5F689347653BA40435AE0CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rp6CJf6BNtvG_c-B226HIMiYZnE.roa
Signing time: Wed 13 Jul 2022 15:18:10 +0000
ROA not before: Wed 13 Jul 2022 15:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210667
IP address blocks: 2a06:a005:1250::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:23:95:82:d5:f6:89:34:76:53:ba:40:43:5a:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 13 15:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae9e8225fe8136dbc6fdcf81db6e8720c8986671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:8b:4f:16:d9:b8:4b:fe:58:8e:c5:b0:46:
43:cb:62:61:48:44:40:d8:02:02:b4:98:f4:00:98:
65:f0:58:b9:62:28:05:e4:90:85:f6:30:2f:1c:59:
d9:4b:16:90:bf:7e:85:18:44:ca:e9:e5:35:c8:a4:
8b:fe:d6:ef:95:ee:40:da:ab:12:0d:ff:5e:e7:ff:
19:9a:24:3c:1e:a5:5d:7b:af:1e:70:2d:79:ea:6e:
fc:83:d4:ce:1a:60:d1:78:f1:f4:05:a9:d7:b5:f2:
f9:7f:78:b7:23:2f:0d:af:d5:27:20:4d:f0:85:22:
32:c7:86:13:57:50:9a:e7:95:63:76:df:0b:7e:28:
eb:17:8d:97:43:2e:75:43:ac:93:5f:1f:56:5f:02:
2b:1e:db:43:43:52:66:d3:a1:fb:3b:05:62:66:8c:
ed:62:8d:60:02:f1:6c:8d:a2:81:72:35:6b:c2:6b:
83:d9:ea:44:6b:32:ab:33:d9:0a:9b:a5:27:7b:f5:
6b:ac:82:fe:6b:8d:5a:6b:25:75:c5:82:04:a1:d6:
b2:21:29:97:ae:61:ec:42:23:b6:d2:5e:93:40:5c:
b3:d5:7f:08:eb:64:3a:f2:05:99:21:b5:5c:48:8a:
2a:b7:ed:81:43:00:1d:9a:6e:2b:f4:b3:90:32:56:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:82:25:FE:81:36:DB:C6:FD:CF:81:DB:6E:87:20:C8:98:66:71
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rp6CJf6BNtvG_c-B226HIMiYZnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:ad0::/44
2a06:a005:1250::/44
Signature Algorithm: sha256WithRSAEncryption
25:e1:67:d5:85:7b:04:2a:2d:6b:a9:1f:46:93:a3:6b:ce:9a:
ac:52:c6:e1:1b:40:4a:62:64:58:28:96:91:a7:79:b6:c2:51:
56:a7:0e:87:3d:d4:3e:a8:79:3f:48:36:0a:d3:cb:db:63:ba:
3e:62:e6:d8:ab:e9:c7:63:05:ed:1f:4a:bc:5e:8b:ed:08:f0:
0d:a3:b9:ce:87:b7:45:25:6b:4d:37:aa:4f:69:e3:4e:87:6c:
f9:ab:cc:53:d8:9a:3b:c0:46:08:1d:ae:7d:e2:17:29:9b:5f:
c7:3e:23:af:bf:b2:1c:e1:63:4f:d4:ec:49:9d:4c:a9:a7:d4:
2c:2b:2e:43:8a:46:f3:94:66:34:87:7d:e4:15:5a:53:9e:49:
7c:d5:5c:ab:16:9e:1d:94:4d:eb:40:6f:65:65:0a:bc:8f:e9:
ac:1b:80:07:88:c1:f3:26:31:94:86:1d:34:ea:80:34:7e:f1:
bb:b8:b5:f7:49:84:8f:a9:18:12:e3:ff:00:cd:11:20:ae:3a:
71:7e:fd:f3:c2:cf:9d:ad:b5:16:a1:49:e6:08:30:46:21:e8:
4e:c8:fa:28:d5:4f:ce:33:fc:3d:79:c1:51:64:d6:b3:bc:5e:
21:79:cc:d9:13:89:b4:a4:c3:b1:27:3c:b0:c2:67:e5:93:ce:
09:a6:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:19 2023 by rpki-client on console-ams.rpki-client.org