Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wetqHtvph0BkZk0ZWiZ8l7wxUog.roa
File: wetqHtvph0BkZk0ZWiZ8l7wxUog.roa (raw, json)
Hash identifier: 245gV3IKN0NdPOMc/sNUTv80toiHD/sN+g9x1gNT2HE=
Subject key identifier: C1:EB:6A:1E:DB:E9:87:40:64:66:4D:19:5A:26:7C:97:BC:31:52:88
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018256AA188AC1F2DC29A182DC4D35A2945B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wetqHtvph0BkZk0ZWiZ8l7wxUog.roa
Signing time: Sun 31 Jul 2022 23:49:23 +0000
ROA not before: Sun 31 Jul 2022 23:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 926
IP address blocks: 2a06:a005:a0f::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:aa:18:8a:c1:f2:dc:29:a1:82:dc:4d:35:a2:94:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 31 23:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1eb6a1edbe9874064664d195a267c97bc315288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:c6:af:2c:13:93:4b:64:59:13:85:e2:81:
40:74:f1:b2:4d:b5:53:b0:6d:c7:b5:30:26:25:b6:
b9:c0:48:08:46:91:0f:96:dd:c7:64:86:0f:a6:7d:
7e:50:f2:ef:c7:b7:a6:0b:0e:a5:86:04:69:de:99:
a4:8c:ea:36:8b:ec:2a:99:a2:6c:90:84:61:15:30:
60:f5:2d:c1:2c:a4:2a:09:a5:d8:46:26:d1:1e:c4:
40:9b:92:bf:5a:5e:ee:06:c3:e1:4c:73:04:28:e1:
3c:3a:e1:d7:c5:8c:e4:65:0a:b1:51:1a:1d:df:ad:
70:2e:68:95:eb:87:e6:46:5a:59:f3:cb:28:7f:cb:
11:04:e3:ca:be:81:95:aa:6e:bc:a5:6e:f7:d6:74:
eb:44:52:0c:32:b9:a1:52:46:1f:fe:a5:0f:65:fd:
65:85:25:dd:a0:e7:41:48:b0:7d:2c:3b:18:a9:9d:
f5:30:7b:e8:74:71:76:b9:ca:6f:0a:44:b9:0c:56:
04:bb:b9:35:e5:95:5c:a6:3b:48:df:83:89:60:80:
32:d0:3c:46:ec:eb:12:59:49:c0:da:3e:9b:1e:a0:
5b:23:7b:45:59:16:63:c3:ca:17:b0:c3:c8:69:cb:
aa:be:fb:90:76:ea:d7:c1:e4:2b:c7:bd:d4:b4:a6:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:6A:1E:DB:E9:87:40:64:66:4D:19:5A:26:7C:97:BC:31:52:88
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wetqHtvph0BkZk0ZWiZ8l7wxUog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0f::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
07:25:38:07:d7:08:32:4d:bd:7e:19:e0:bf:15:f9:ac:c7:72:
c7:9d:52:25:8c:f4:71:00:be:48:eb:b1:ba:39:27:9c:37:89:
6f:90:f2:f8:e0:22:0d:87:a7:45:9f:ab:e1:14:6b:2c:ff:42:
a1:e3:81:41:37:eb:46:c9:4f:b4:dd:01:91:31:4a:33:cf:3f:
91:05:b0:a0:8f:f7:b6:18:52:0b:3a:c4:6b:5d:54:ca:ab:3b:
1b:31:44:34:fc:99:f4:d1:5a:a5:75:72:06:f7:24:78:1a:76:
33:a4:25:a0:d1:b0:f1:34:43:39:14:da:6d:02:1e:1c:34:c8:
64:03:6f:fc:25:7f:c7:a4:93:f6:7e:1e:ef:c7:6c:d4:74:bf:
0c:00:2c:49:19:f3:33:97:00:44:22:6f:02:1d:d8:4f:8c:06:
4f:3f:cf:a4:43:fe:de:5f:cb:32:e5:06:b9:75:13:40:1a:75:
18:32:a7:ed:5c:8d:89:b7:eb:30:f9:72:cc:24:93:bb:20:40:
49:4a:a2:71:5f:15:9c:e7:f2:02:2f:86:90:13:2e:14:06:73:
b3:ca:ae:74:a1:41:6d:fb:20:86:90:c2:7d:b5:2f:78:36:c6:
ad:1c:8d:aa:e8:b5:02:e6:23:1d:93:0e:9a:d4:6e:ec:63:e8:
4e:79:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org