Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFXQHiNFwZoRTMClcajuY3eUYmg.roa
File: zFXQHiNFwZoRTMClcajuY3eUYmg.roa (raw, json)
Hash identifier: XtefTL0INJfuVwTIH/TouTSQyhUhXwTBu3w+AAoZ7lM=
Subject key identifier: CC:55:D0:1E:23:45:C1:9A:11:4C:C0:A5:71:A8:EE:63:77:94:62:68
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01841F5C48709C1AC5F23E579B0FE8EAD3A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFXQHiNFwZoRTMClcajuY3eUYmg.roa
Signing time: Fri 28 Oct 2022 16:10:52 +0000
ROA not before: Fri 28 Oct 2022 16:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212948
IP address blocks: 2a06:a005:1509::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:5c:48:70:9c:1a:c5:f2:3e:57:9b:0f:e8:ea:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 28 16:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc55d01e2345c19a114cc0a571a8ee6377946268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b4:8d:c5:83:0b:a8:b6:7c:bf:c2:d3:1e:55:
c6:68:61:f3:45:4c:1b:3a:1e:50:0f:7a:9e:fc:f8:
1a:0f:59:b4:ff:c5:01:7a:60:20:4e:91:c8:ba:a3:
79:6e:da:1f:73:2f:6c:73:cc:e5:cd:70:c0:6d:39:
00:20:1d:ed:19:cc:70:c8:cc:25:11:98:ed:70:a2:
85:10:03:8e:74:f3:8d:61:5f:71:4e:4d:39:97:16:
e9:6e:76:3c:52:b5:18:d3:7c:9e:11:1f:d3:7e:2b:
8d:f1:fe:36:c1:be:fe:72:fb:64:4c:cb:71:70:3c:
bf:9e:40:58:e1:0a:a4:81:59:34:bd:7b:99:c2:33:
a1:a6:76:6d:79:fc:7a:73:09:06:82:c0:64:03:49:
b6:c7:c6:f1:b4:46:8d:22:12:e4:f3:fe:74:77:2d:
ba:7e:bb:fe:e1:9b:61:0e:f4:95:62:09:9e:af:ef:
1e:76:fe:12:95:3c:42:e4:b1:88:22:ba:73:31:10:
f6:68:40:8d:eb:4c:b2:56:18:74:98:01:e2:4a:4f:
b5:81:d3:3c:43:b6:e4:b4:b8:30:9c:85:82:00:19:
26:1a:3c:53:e1:44:4b:7f:96:8b:1f:d6:ea:20:f2:
92:ac:37:18:b0:44:71:62:74:2a:37:90:b8:9d:0c:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:D0:1E:23:45:C1:9A:11:4C:C0:A5:71:A8:EE:63:77:94:62:68
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFXQHiNFwZoRTMClcajuY3eUYmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1509::/48
Signature Algorithm: sha256WithRSAEncryption
00:52:ab:da:a5:a6:e7:3d:d7:42:e5:fc:a0:6e:37:3b:c4:cc:
51:44:3a:fa:82:12:1d:76:9c:78:62:ca:b5:ea:b1:7f:81:13:
43:16:c1:fb:5c:9e:b3:e8:0e:3d:b7:cc:be:3c:e6:ec:6d:c7:
7c:7c:67:cf:4d:06:b8:3b:6b:8a:0d:1e:80:04:d2:bd:f9:0e:
22:3f:90:d0:70:a0:41:ec:a3:f9:42:e6:84:70:e2:ac:fb:75:
9f:2a:dc:f2:c5:38:dc:99:b6:27:48:8b:bb:68:7a:40:49:bb:
a3:ed:49:7e:77:15:99:c4:ab:00:2d:ec:44:9d:6b:e1:b9:32:
30:43:aa:da:e4:e3:e8:01:d2:40:c1:4d:d0:34:40:fc:a8:02:
02:8b:83:6f:ed:2f:02:23:00:4f:a4:14:6b:e0:6a:f6:90:8a:
9e:4f:85:27:87:86:72:3a:24:57:fc:c3:6f:a8:6d:5d:a4:f9:
1f:bd:1f:a6:eb:bd:4f:7f:fa:13:81:0d:dd:b5:49:4b:e5:35:
ec:61:f4:bd:9a:8e:01:94:28:e4:54:87:15:05:5b:68:ee:ea:
e0:a3:4a:01:16:fc:b5:b8:c6:fa:41:ac:ed:e0:19:f8:a0:22:
21:23:95:18:c4:9d:63:11:33:bc:1e:9f:55:42:cc:78:a0:15:
9c:ba:4a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org