Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s7vB_Fkpy6JIcumdBbmdFfZcM70.roa
File: s7vB_Fkpy6JIcumdBbmdFfZcM70.roa (raw, json)
Hash identifier: 9m0MFxX6yRkHFC2hClpDxCOa8pJ+mXDooKoB648NjNw=
Subject key identifier: B3:BB:C1:FC:59:29:CB:A2:48:72:E9:9D:05:B9:9D:15:F6:5C:33:BD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182641267AC067961FCA598A5C98C09CF32
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s7vB_Fkpy6JIcumdBbmdFfZcM70.roa
Signing time: Wed 03 Aug 2022 14:18:23 +0000
ROA not before: Wed 03 Aug 2022 14:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212746
IP address blocks: 2a06:a005:1020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:12:67:ac:06:79:61:fc:a5:98:a5:c9:8c:09:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 3 14:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3bbc1fc5929cba24872e99d05b99d15f65c33bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:8a:ab:44:16:65:03:4c:4f:9c:48:99:2d:
59:d5:af:b1:32:7a:0c:14:d6:50:8e:7b:5b:6b:4e:
78:0d:a6:8d:18:3d:b3:70:36:b6:27:fc:31:59:99:
bf:90:f6:a5:ab:d9:67:2d:50:aa:8e:75:cd:a8:29:
cf:3c:98:97:ac:ea:51:e2:7b:00:c8:1c:96:7c:6e:
67:e1:0d:95:4f:6f:f5:84:d7:e4:21:78:e0:0e:28:
ef:4e:40:1e:6d:29:ed:24:b0:b8:db:eb:7e:80:a3:
7e:ae:35:33:fc:45:3b:f8:83:52:ee:29:69:9b:f2:
f2:78:c5:59:85:bf:20:03:b6:f6:14:68:21:ae:ac:
16:6d:7d:d6:3f:7f:cf:66:33:e6:af:a3:f9:5f:05:
22:e8:a0:5d:3b:ce:81:ee:50:fe:a3:57:25:d3:84:
91:44:06:b6:6f:0d:af:e8:c2:b2:f5:8d:60:00:83:
6d:1e:90:72:96:5a:bb:29:89:fe:41:ca:ca:01:4e:
d6:d0:e3:c7:0f:fd:98:ce:21:6c:50:67:1c:f4:a2:
50:5f:b7:cc:5a:e1:bb:dd:53:2c:6a:df:1a:cd:28:
9a:5a:4d:04:ae:7b:97:22:8e:fe:ee:82:f2:a0:ed:
ca:63:cb:57:d9:54:4c:bd:73:8b:2a:bb:e5:c8:48:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:C1:FC:59:29:CB:A2:48:72:E9:9D:05:B9:9D:15:F6:5C:33:BD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s7vB_Fkpy6JIcumdBbmdFfZcM70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1020::/44
Signature Algorithm: sha256WithRSAEncryption
18:4f:03:16:3e:60:86:e1:1c:6b:f9:28:f7:1c:c3:a5:b0:4b:
34:05:75:9a:6f:7a:c3:34:eb:a2:1e:1c:69:48:05:36:82:01:
78:67:e3:e7:29:a0:a6:72:8a:3e:90:e2:87:31:11:36:63:d0:
cf:67:88:a3:d4:0c:a1:4b:9c:2e:65:f8:80:7d:66:81:66:fc:
03:df:4f:e1:72:dd:15:16:22:65:2c:53:3a:00:e6:73:67:65:
b2:8e:92:57:fb:03:c2:a5:35:a3:c5:26:82:86:47:20:b8:28:
f8:ef:6c:3b:e7:5f:ba:20:6f:8e:17:32:e8:8b:a0:f9:79:8d:
f5:62:a7:86:d0:79:5d:37:d8:42:25:8f:ae:0f:31:a1:41:10:
bf:9f:a2:40:31:c2:59:8d:ab:3a:a8:8a:f2:10:08:27:8e:03:
42:ef:ac:88:77:9d:06:5e:d1:93:9a:6e:36:c2:b5:45:b7:d1:
f0:af:2b:a5:34:4f:a9:f7:e3:cf:b9:8b:37:14:6e:54:6b:bb:
c8:93:95:13:8a:5c:ae:a2:a5:df:ea:64:b5:a1:b4:56:cb:48:
c5:ef:15:c3:8f:4b:59:07:f2:cd:16:92:80:93:d7:c5:67:22:
12:e0:2c:b3:ef:e1:ff:91:05:ba:12:38:36:09:89:d0:aa:0a:
d3:cf:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org