Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vrIhZBmNSuFu4z1BHXXYTuEWsCw.roa
File: vrIhZBmNSuFu4z1BHXXYTuEWsCw.roa (raw, json)
Hash identifier: 6PdkpMPTC/ILzqRzpeb0MwIjV972S6MSSGZHr//gS2Q=
Subject key identifier: BE:B2:21:64:19:8D:4A:E1:6E:E3:3D:41:1D:75:D8:4E:E1:16:B0:2C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183BFDE589DB7FED73AF8A087F7000E0E51
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vrIhZBmNSuFu4z1BHXXYTuEWsCw.roa
Signing time: Mon 10 Oct 2022 03:09:23 +0000
ROA not before: Mon 10 Oct 2022 03:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204005
IP address blocks: 2a06:a005:ba9::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bf:de:58:9d:b7:fe:d7:3a:f8:a0:87:f7:00:0e:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 10 03:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beb22164198d4ae16ee33d411d75d84ee116b02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:c9:0e:a6:63:66:4e:86:0e:e4:0b:3c:05:
00:be:ff:fe:6c:10:2c:d4:4d:df:42:33:37:8e:6b:
94:77:fc:88:7f:f9:d4:72:b4:c9:ae:91:cf:15:35:
00:58:39:f4:c1:55:de:a7:e8:71:b8:63:94:24:50:
27:1d:d6:19:06:f6:18:2c:b0:9d:11:fd:a4:1b:e8:
3a:ed:53:67:fc:bd:f5:03:f5:c9:97:e2:fd:18:d3:
c6:61:49:fc:b1:66:da:8e:3c:bd:cf:4d:8b:23:34:
c7:eb:87:44:53:53:51:d8:28:5f:56:b9:8b:fd:e2:
2e:ab:2c:34:51:3d:6b:d6:4b:5d:c6:a2:a0:5d:8f:
1b:fe:72:72:93:79:bf:12:49:a7:d1:2c:1b:74:b4:
b6:a4:86:4a:6f:83:53:13:60:93:9a:94:f8:0d:c3:
04:9a:8a:06:db:78:79:62:43:46:b7:e3:19:97:43:
b6:a5:f0:72:e5:58:88:b9:f4:61:00:80:bf:1f:0f:
8a:c6:04:8e:a9:9b:19:e7:53:6e:7d:53:65:52:32:
9e:58:df:4e:8c:bf:6c:75:fe:f0:49:d3:9b:51:12:
b7:71:d4:e4:1e:a3:60:d9:1e:1a:6d:b0:2e:cc:2d:
26:b8:47:c9:d6:e7:02:0c:4b:fa:af:87:4b:6a:5b:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:21:64:19:8D:4A:E1:6E:E3:3D:41:1D:75:D8:4E:E1:16:B0:2C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vrIhZBmNSuFu4z1BHXXYTuEWsCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba9::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
32:11:16:c0:6d:01:e5:c8:48:f2:7a:4d:3b:12:87:33:8d:26:
d9:f9:55:bd:30:e1:66:f4:aa:74:bd:28:3f:6f:70:37:d2:3d:
a1:cf:a9:71:16:89:9e:5a:4e:d9:ed:f4:e3:26:74:f0:40:4f:
64:bc:86:db:c5:c8:b8:86:99:af:e5:3e:6c:b9:ad:af:0d:90:
0f:f2:ee:bf:7c:3e:15:6e:e6:4d:e1:ca:d3:c1:b9:f9:dc:24:
87:d5:99:15:44:a6:cf:66:c4:96:3a:43:2e:ec:f4:9f:71:b6:
42:da:83:22:7c:a1:eb:b1:d7:78:17:a3:18:09:2b:30:d1:cc:
69:21:f8:9b:4f:f9:3c:23:0a:6b:a6:bd:46:03:c0:87:86:44:
4e:86:06:65:25:82:1f:e3:bf:6b:6d:08:d5:3c:c7:3e:85:0c:
09:e4:5c:64:1a:16:23:24:b9:33:cb:30:ce:ae:d2:d5:0a:ed:
04:dd:ca:7b:3b:73:66:24:e8:17:c1:7a:78:bd:47:7d:28:c5:
c4:53:1b:94:f0:9a:b5:82:60:36:c8:df:09:85:24:57:6a:1a:
66:fc:4c:97:88:3b:24:b6:8a:ba:a5:f9:c1:7a:f5:8f:40:fe:
f3:e1:9d:3a:e9:b9:d3:e8:18:e8:d4:29:96:f8:a1:f2:36:ea:
f9:9f:d5:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYO/3lidt/7XOvigh/cADg5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDEwMDMwOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWIyMjE2NDE5OGQ0YWUxNmVlMzNkNDExZDc1ZDg0ZWUxMTZiMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO/JDqZjZk6GDuQLPAUAvv/+bBAs
1E3fQjM3jmuUd/yIf/nUcrTJrpHPFTUAWDn0wVXep+hxuGOUJFAnHdYZBvYYLLCd
Ef2kG+g67VNn/L31A/XJl+L9GNPGYUn8sWbajjy9z02LIzTH64dEU1NR2ChfVrmL
/eIuqyw0UT1r1ktdxqKgXY8b/nJyk3m/Ekmn0SwbdLS2pIZKb4NTE2CTmpT4DcME
mooG23h5YkNGt+MZl0O2pfBy5ViIufRhAIC/Hw+KxgSOqZsZ51NufVNlUjKeWN9O
jL9sdf7wSdObURK3cdTkHqNg2R4abbAuzC0muEfJ1ucCDEv6r4dLalsadQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL6yIWQZjUrhbuM9QR112E7hFrAsMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdnJJaFpCbU5TdUZ1NHoxQkhYWFlUdUVXc0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgagBQup
AwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQAyERbAbQHlyEjyek07EoczjSbZ
+VW9MOFm9Kp0vSg/b3A30j2hz6lxFomeWk7Z7fTjJnTwQE9kvIbbxci4hpmv5T5s
ua2vDZAP8u6/fD4VbuZN4crTwbn53CSH1ZkVRKbPZsSWOkMu7PSfcbZC2oMifKHr
sdd4F6MYCSsw0cxpIfibT/k8Iwprpr1GA8CHhkROhgZlJYIf479rbQjVPMc+hQwJ
5FxkGhYjJLkzyzDOrtLVCu0E3cp7O3NmJOgXwXp4vUd9KMXEUxuU8Jq1gmA2yN8J
hSRXahpm/EyXiDsktoq6pfnBevWPQP7z4Z066bnT6Bjo1CmW+KHyNur5n9Ux
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org