Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa
File: w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa (raw, json)
Hash identifier: 0p933u0J0fj3QoO896yAc0LfMyxMh8J9DxXI7C0dkNM=
Subject key identifier: C3:65:0F:EE:B0:90:1F:24:77:CC:99:D7:C5:82:7B:38:12:25:1C:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01842F0E83881BD30A07821B2B619F796EAD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa
Signing time: Mon 31 Oct 2022 17:19:51 +0000
ROA not before: Mon 31 Oct 2022 17:19:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202941
IP address blocks: 2a06:a005:21e0::/44 maxlen: 48
2a06:a005:21d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:0e:83:88:1b:d3:0a:07:82:1b:2b:61:9f:79:6e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 31 17:19:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3650feeb0901f2477cc99d7c5827b3812251c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:35:a3:a8:3a:a0:83:6a:fb:df:cd:a6:0e:
22:32:d4:37:65:c8:3f:f3:d5:15:6c:61:19:8c:af:
0a:f7:2b:66:cd:1c:e6:b3:5a:96:98:41:df:1a:85:
94:a7:38:61:1f:c5:cd:29:80:f7:f9:a9:7e:07:20:
e5:e8:51:ab:04:22:5f:8f:2a:dd:b3:25:41:0e:4b:
96:89:16:a9:e5:f5:7a:19:90:f3:e3:97:39:2b:da:
87:1c:2e:84:e4:d7:ea:dc:ec:51:5c:4e:dd:12:e7:
3a:60:dd:5a:45:92:f8:c0:13:ea:0f:c3:bd:a0:4c:
44:80:08:6b:46:4a:ea:94:3a:11:07:27:42:86:ad:
0c:38:75:18:e6:85:79:3d:71:bf:d4:f5:37:5f:8b:
fa:d0:d2:3f:c6:ba:6e:a8:4f:bf:8b:45:1d:bd:02:
ba:43:1c:a6:9e:da:50:44:ae:29:76:47:57:a0:57:
b1:fa:0f:9a:61:17:37:34:ac:65:09:b2:79:10:ee:
9d:05:a1:01:cb:a6:3d:c0:ff:61:9b:b3:c5:6f:a0:
9b:61:93:55:f3:db:f9:ad:61:b9:03:86:a6:a9:e8:
ca:2b:bf:5a:17:38:79:22:82:61:12:79:44:20:5d:
6d:60:ab:a4:31:e9:ab:5d:88:43:8a:d6:30:63:39:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:0F:EE:B0:90:1F:24:77:CC:99:D7:C5:82:7B:38:12:25:1C:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:21d0::-2a06:a005:21ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:86:ab:c9:2f:3e:48:c1:36:14:47:c5:69:aa:6f:41:3b:a9:
3f:37:36:46:58:66:11:bb:b7:4a:58:33:31:24:7a:c5:00:d0:
47:57:37:8c:1a:66:60:d5:d7:59:bd:26:f6:45:7f:d5:29:90:
24:47:d6:df:d2:21:00:09:52:9c:b3:97:9a:67:19:72:21:08:
8c:ef:ba:e1:3e:07:ca:bd:be:66:54:a0:92:86:ac:51:1f:65:
cc:9f:96:fe:32:a3:70:f1:6c:a8:00:85:14:22:30:43:43:3f:
ae:d6:0b:63:5e:af:e4:c5:fd:c2:3d:1e:03:ed:66:06:b4:0a:
37:b7:2f:ba:05:9b:91:2f:e6:94:5d:28:ba:22:69:05:bb:46:
51:ce:82:35:8a:e5:5d:35:8c:63:62:59:a5:02:4d:dc:8a:6f:
25:92:47:89:0c:6b:f7:2b:ac:dc:c8:9d:32:26:c5:4f:db:6f:
c3:90:7c:d6:75:6d:61:de:65:13:20:99:18:68:51:ed:68:6c:
8a:75:86:72:6c:93:78:8f:65:22:35:6d:51:c1:ac:61:9c:fd:
61:35:50:d3:38:48:b5:aa:03:e0:b8:64:f2:9f:bc:c4:4c:8d:
cd:84:4f:90:99:a1:88:20:fc:d3:c7:6e:08:c2:3c:fd:7c:44:
63:51:9c:b1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYQvDoOIG9MKB4IbK2GfeW6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDMxMTcxOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzY1MGZlZWIwOTAxZjI0NzdjYzk5ZDdjNTgyN2IzODEyMjUxYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+E1o6g6oINq+9/Npg4iMtQ3Zcg/
89UVbGEZjK8K9ytmzRzms1qWmEHfGoWUpzhhH8XNKYD3+al+ByDl6FGrBCJfjyrd
syVBDkuWiRap5fV6GZDz45c5K9qHHC6E5Nfq3OxRXE7dEuc6YN1aRZL4wBPqD8O9
oExEgAhrRkrqlDoRBydChq0MOHUY5oV5PXG/1PU3X4v60NI/xrpuqE+/i0UdvQK6
QxymntpQRK4pdkdXoFex+g+aYRc3NKxlCbJ5EO6dBaEBy6Y9wP9hm7PFb6CbYZNV
89v5rWG5A4amqejKK79aFzh5IoJhEnlEIF1tYKukMemrXYhDitYwYznN8QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMNlD+6wkB8kd8yZ18WCezgSJRxkMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdzJVUDdyQ1FIeVIzekpuWHhZSjdPQklsSEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAF
IdADBwQqBqAFIeAwDQYJKoZIhvcNAQELBQADggEBAAqGq8kvPkjBNhRHxWmqb0E7
qT83NkZYZhG7t0pYMzEkesUA0EdXN4waZmDV11m9JvZFf9UpkCRH1t/SIQAJUpyz
l5pnGXIhCIzvuuE+B8q9vmZUoJKGrFEfZcyflv4yo3DxbKgAhRQiMENDP67WC2Ne
r+TF/cI9HgPtZga0Cje3L7oFm5Ev5pRdKLoiaQW7RlHOgjWK5V01jGNiWaUCTdyK
byWSR4kMa/crrNzInTImxU/bb8OQfNZ1bWHeZRMgmRhoUe1obIp1hnJsk3iPZSI1
bVHBrGGc/WE1UNM4SLWqA+C4ZPKfvMRMjc2ET5CZoYgg/NPHbgjCPP18RGNRnLE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org