Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rrkvU5x87YmnGYre7agok-gerf0.roa
File: rrkvU5x87YmnGYre7agok-gerf0.roa (raw, json)
Hash identifier: KTUAzFNSpwjD2NcO18yqNn/C7E04PSfVAyszyKpQZ58=
Subject key identifier: AE:B9:2F:53:9C:7C:ED:89:A7:19:8A:DE:ED:A8:28:93:E8:1E:AD:FD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182F03BBE5BB2C487743ECA467E66D4D5DE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rrkvU5x87YmnGYre7agok-gerf0.roa
Signing time: Tue 30 Aug 2022 19:30:23 +0000
ROA not before: Tue 30 Aug 2022 19:30:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398057
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
2a06:a005:d40::/44 maxlen: 48
2a06:a005:ed0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:3b:be:5b:b2:c4:87:74:3e:ca:46:7e:66:d4:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 30 19:30:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeb92f539c7ced89a7198adeeda82893e81eadfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:1f:d3:57:2d:86:b6:e8:1e:75:e6:48:23:
d6:d3:b2:10:c3:66:c4:bc:4c:19:1c:b9:02:25:07:
ba:14:cd:bb:b9:19:18:43:51:72:7b:45:1e:71:43:
23:fa:35:a7:dc:ba:2d:68:39:13:71:c1:07:d7:49:
57:df:ae:0d:07:aa:c5:a4:50:9f:96:3b:37:59:78:
5d:9f:fe:88:64:d2:a8:8d:2f:e0:6e:70:1a:0a:c6:
14:d9:ba:64:50:87:9f:c4:55:8a:11:17:fb:32:31:
6a:a9:c5:26:03:50:ce:52:b0:a1:b0:2d:4c:f7:5d:
af:34:43:35:2a:e5:8a:59:37:a8:40:f2:75:d7:fc:
32:1b:89:16:1a:8e:fd:32:5d:0e:34:e2:9a:9d:c1:
3e:4e:0b:26:c3:92:88:77:9a:74:fb:3d:9d:9b:c0:
b2:85:31:2a:99:d3:f9:ff:8c:24:c6:c4:c9:68:dd:
0a:45:b5:49:27:5d:95:28:97:d9:33:f5:4d:e6:5c:
45:cd:2a:8d:09:dc:d1:79:97:b3:88:2f:bd:a5:38:
21:15:f7:93:82:38:4b:15:df:5f:bb:46:3f:cb:41:
df:9d:52:c5:e4:0f:8c:3f:1a:a3:a3:8c:ff:c2:ae:
18:bf:c0:6b:5c:30:6d:ae:5c:ba:df:cc:20:ab:2e:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:2F:53:9C:7C:ED:89:A7:19:8A:DE:ED:A8:28:93:E8:1E:AD:FD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rrkvU5x87YmnGYre7agok-gerf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
2a06:a005:5f4::/48
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
64:55:49:03:f4:0c:c9:55:3c:ea:63:4d:c5:d8:7b:cd:f0:0e:
19:74:20:56:07:f0:35:ef:46:c6:fc:00:62:be:0c:f2:47:92:
9c:a5:fe:b3:ad:c7:58:13:f8:0d:59:f1:e9:3a:d0:74:98:ca:
ec:96:5b:3d:db:d8:65:cb:b7:66:3f:27:6c:93:20:f8:33:fe:
5c:f3:8b:57:cd:d9:cd:d5:a7:e6:b9:6b:87:10:eb:a8:74:d1:
b0:cd:6f:80:05:53:32:42:eb:6b:05:b9:a9:80:a3:8e:3a:38:
1e:34:ed:61:25:69:83:00:ad:da:ed:dc:8e:61:ea:c3:15:9b:
c7:dc:44:b5:a3:50:20:7b:24:7f:29:7f:83:88:44:ac:86:20:
44:6c:33:50:57:c6:1f:8f:01:48:19:de:15:6f:e1:80:37:87:
b3:e3:ed:4d:90:cb:cd:0f:1e:72:d9:68:29:e5:4a:9b:64:46:
f9:90:6d:cc:2b:29:0f:44:43:43:b6:46:54:2d:d5:3f:69:cf:
ec:55:9c:c2:a2:cf:d5:7d:93:58:4a:2f:df:20:fe:c3:7c:74:
a5:e1:0b:27:82:28:b0:df:0f:56:76:09:a0:80:14:c2:ba:e3:
ed:1d:4d:67:55:4e:ea:71:e8:d8:7d:f0:6b:7d:33:2a:1d:55:
13:06:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org