Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tROv5GUo34VnpsFLfNS1etQJbzE.roa
File: tROv5GUo34VnpsFLfNS1etQJbzE.roa (raw, json)
Hash identifier: cnwRoLkjcNO0rA7cPLmxJjpNwPsDn1fKsW1Cy3vYGwE=
Subject key identifier: B5:13:AF:E4:65:28:DF:85:67:A6:C1:4B:7C:D4:B5:7A:D4:09:6F:31
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AF1B45E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tROv5GUo34VnpsFLfNS1etQJbzE.roa
Signing time: Thu 16 Jun 2022 22:59:45 +0000
ROA not before: Thu 16 Jun 2022 22:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210387
IP address blocks: 2a06:a005:d22::/48 maxlen: 48
2a06:a005:857::/48 maxlen: 48
2a06:a005:2de::/48 maxlen: 48
2a06:a001:a0f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452047966 (0x1af1b45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 16 22:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b513afe46528df8567a6c14b7cd4b57ad4096f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:77:6e:b2:f1:20:b0:6f:de:19:5b:be:fa:
6b:8d:dd:41:0f:e1:0e:f4:02:90:a0:e8:f6:9b:00:
c5:06:7b:56:4b:ed:e2:f7:72:78:c9:5a:7b:84:9f:
a6:1a:d6:12:bb:71:9b:d4:c5:ce:c7:51:bd:f6:d0:
73:0c:20:60:60:4d:c3:50:fc:b7:4b:69:e1:07:cd:
4d:c3:65:62:14:0b:33:bb:75:a2:e7:39:58:03:01:
c7:fc:ad:d8:f9:ff:99:f7:74:8e:d3:58:45:b3:db:
55:c9:9b:71:fd:d6:cd:2e:fe:c8:70:7c:0b:d5:52:
03:90:ff:42:30:3c:27:6f:44:f9:a5:31:cc:1f:27:
fd:c4:ce:8f:7c:a9:94:b9:84:17:2e:0e:fb:00:ae:
4c:6c:12:e4:f9:62:90:14:85:07:22:56:6a:80:85:
00:14:7d:7c:a7:77:4d:be:1d:1f:d9:80:ed:ca:1c:
d3:6a:a4:c7:03:d1:89:b5:a2:dd:26:14:a5:1a:99:
e7:07:3d:1b:ce:c3:59:26:0d:4e:39:b7:34:47:22:
ac:94:f2:81:2c:71:c3:fe:45:fe:93:af:f9:70:15:
1e:e0:1f:b9:b7:7d:7d:f1:ad:2f:cd:a2:b0:cb:cd:
88:23:dc:86:24:74:f8:1a:17:25:77:81:ad:9c:4b:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:AF:E4:65:28:DF:85:67:A6:C1:4B:7C:D4:B5:7A:D4:09:6F:31
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tROv5GUo34VnpsFLfNS1etQJbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a0f0::/44
2a06:a005:2de::/48
2a06:a005:857::/48
2a06:a005:d22::/48
Signature Algorithm: sha256WithRSAEncryption
14:4b:29:87:1e:12:0f:27:1a:3a:c5:ff:02:49:77:f0:39:64:
23:4f:b6:bf:14:d1:51:44:17:6f:1b:b0:53:df:69:d3:fa:f3:
62:19:e1:30:58:c9:94:03:21:78:2b:c7:34:d2:94:63:f6:a2:
10:ab:17:4d:73:dc:82:90:f3:d1:c7:6c:1a:bf:d0:cd:26:a6:
1a:8b:33:e9:49:af:45:e3:13:db:b4:29:dd:25:94:aa:ca:a1:
4a:ec:db:37:d3:a6:8f:3f:69:bf:6e:2b:77:17:ef:f6:26:24:
f4:89:7e:3b:81:fc:d3:83:d5:54:56:31:e4:6d:5a:ee:c1:85:
3e:b7:6f:f6:04:88:83:59:92:99:59:d9:a3:90:1f:9b:88:1f:
9b:76:95:d4:29:2e:d2:b5:01:70:2f:90:63:db:ed:d1:56:90:
41:ec:15:95:34:f1:7c:f0:80:5a:1f:49:08:8d:54:a4:c2:27:
8c:dd:b5:96:d1:b0:35:6c:4c:51:7f:f7:e7:5a:19:df:c5:77:
d9:92:0f:a2:aa:ef:57:ce:e7:c1:f6:d0:48:f7:38:d4:f1:5e:
67:31:6a:80:ec:cd:1a:69:37:95:de:15:85:50:fe:32:80:32:
c4:74:75:26:c9:71:6c:2e:fb:15:3a:78:75:83:b7:2b:98:be:
2e:e6:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org