Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wuS9O6p-KBXuCsnmkck4TJW3ogk.roa
File: wuS9O6p-KBXuCsnmkck4TJW3ogk.roa (raw, json)
Hash identifier: KTZeWz63m/Fdyha3YYdRB5VcgvBy04aSslcOFXpNg8w=
Subject key identifier: C2:E4:BD:3B:AA:7E:28:15:EE:0A:C9:E6:91:C9:38:4C:95:B7:A2:09
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17AF11DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wuS9O6p-KBXuCsnmkck4TJW3ogk.roa
Signing time: Mon 04 Apr 2022 08:56:59 +0000
ROA not before: Mon 04 Apr 2022 08:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139882
IP address blocks: 2a0a:6040::/32 maxlen: 48
2a06:a005:390::/44 maxlen: 48
2a06:a005:360::/44 maxlen: 48
2a06:a005:380::/44 maxlen: 48
2a06:a005:370::/44 maxlen: 48
2a06:a005:3a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397349341 (0x17af11dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 4 08:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e4bd3baa7e2815ee0ac9e691c9384c95b7a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:73:af:05:64:b8:d9:2a:e5:9c:94:09:2a:
e2:13:b2:20:3a:71:53:5e:ee:32:a7:9b:59:f6:0e:
50:13:10:bd:21:c8:fe:7b:0b:6c:d0:d6:c9:45:87:
f9:58:1d:f1:b3:7d:2c:59:e2:55:44:94:44:61:5a:
24:12:c5:1d:30:91:79:e5:5f:76:53:b4:8c:d9:46:
90:89:82:40:f6:e7:22:83:1d:ad:22:7b:02:0c:08:
97:52:a6:6e:18:b9:28:86:f3:a1:b3:7d:d6:1f:bc:
48:8f:fd:8f:c0:de:10:5e:6a:43:b5:4a:53:0b:52:
c5:e4:df:48:c4:ef:c8:74:ac:45:05:85:b3:a5:72:
72:80:32:5c:1a:43:d4:0d:df:3d:ef:6a:16:1e:f2:
a9:a6:eb:3e:d5:29:1b:43:9b:11:2b:98:e3:15:42:
c1:6a:23:ca:30:b9:aa:45:b1:06:08:fd:f9:9d:16:
27:31:bc:56:f3:f4:74:7e:14:b8:e9:4e:94:a6:0f:
53:ef:4e:53:0f:40:d5:d4:c5:87:00:79:cf:3a:03:
cb:5d:3b:92:2e:c4:cb:3c:10:41:e1:d7:9f:39:00:
48:46:41:49:01:fa:e5:11:ed:a4:23:2a:26:1e:41:
81:e6:8a:e9:ef:4a:c5:53:0f:7a:e3:9e:ee:d7:28:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:BD:3B:AA:7E:28:15:EE:0A:C9:E6:91:C9:38:4C:95:B7:A2:09
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wuS9O6p-KBXuCsnmkck4TJW3ogk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:360::-2a06:a005:3af:ffff:ffff:ffff:ffff:ffff
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
3a:35:06:95:56:a1:4a:a8:84:37:46:3a:36:1c:1c:51:6e:c9:
ef:1b:3c:69:38:b5:12:44:5f:a0:b6:45:0a:b0:39:84:fe:22:
11:f3:50:30:70:b5:32:2f:96:2a:54:78:c9:40:a0:8e:2f:4a:
3c:1d:63:6f:fc:4b:0e:d4:60:f8:c8:4a:ef:00:f6:28:39:70:
0b:36:ef:98:17:80:3c:c6:f0:4c:ba:d7:83:0c:ac:fd:b1:0d:
65:e7:5c:e3:13:d3:fa:cf:5f:85:6e:16:6f:f6:6e:f3:d6:0b:
ba:9e:62:d1:4e:f2:36:1a:53:23:ec:48:1e:42:88:9a:e5:a1:
4e:05:42:d5:fa:35:d6:d1:82:fd:47:47:fb:46:5a:2f:cf:ea:
56:91:f1:56:e2:2b:a7:78:b6:d3:29:63:ff:da:6b:54:8d:c4:
b5:ce:1c:a4:58:b0:82:70:3f:01:44:9f:99:a0:64:9a:28:c5:
d7:8f:c5:6b:5d:7b:cf:ae:29:79:5e:9a:17:af:0a:36:10:4c:
ac:f5:2a:b3:00:bd:29:11:31:f1:3a:7c:73:af:02:9c:b6:c3:
28:6f:9a:9d:53:67:52:8c:4c:2f:69:7a:29:c4:eb:05:c0:41:
ac:7c:2b:27:e3:cb:da:ea:8f:e5:08:64:c2:2a:bc:f5:34:c6:
63:d3:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org