Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa
File: KpLTNfuDFpYz54oneoLlRq_MD1s.roa (raw, json)
Hash identifier: B2y+dX1xgBA8ZN3bo++2Y2Sfmlsqxf+AfhJ3JstY/AQ=
Subject key identifier: 2A:92:D3:35:FB:83:16:96:33:E7:8A:27:7A:82:E5:46:AF:CC:0F:5B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184F490848296343CEC109E80AA0241529D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa
Signing time: Fri 09 Dec 2022 01:47:02 +0000
ROA not before: Fri 09 Dec 2022 01:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
2a06:a005:116d::/48 maxlen: 48
2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:90:84:82:96:34:3c:ec:10:9e:80:aa:02:41:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 9 01:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a92d335fb83169633e78a277a82e546afcc0f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:fa:4b:28:9b:f4:7c:95:1f:1d:4c:99:de:
70:25:90:c1:ec:1a:e1:7a:95:cf:78:e3:2b:f4:2f:
2a:16:83:46:ca:44:77:94:91:9a:f0:e5:49:9a:76:
36:66:05:21:e4:4b:13:9c:d1:3b:83:d8:92:d0:3f:
e4:62:6e:2a:de:be:27:91:0e:16:7e:30:f4:04:bf:
c9:d6:8c:85:aa:a2:20:fb:36:17:51:e2:e0:8d:2a:
69:b1:8c:fd:9d:10:5a:a7:47:28:5f:0b:8f:82:ad:
a0:a9:6b:67:b4:45:31:81:d3:cb:1d:6d:87:56:d2:
d2:a2:3e:11:a8:d3:39:b7:91:e7:87:51:82:1c:c5:
2f:ac:6d:bc:93:37:4d:22:c8:ce:f3:d0:37:36:87:
be:91:94:03:c7:77:fb:f1:8d:cb:7f:82:e2:94:64:
9c:04:a5:7d:a5:d1:07:d2:32:f2:06:e3:a0:52:ad:
d1:2b:30:18:ee:e3:be:60:ec:2b:f5:c4:94:6f:90:
a5:cf:1c:47:f8:3d:ba:eb:76:d4:c3:2a:a5:e5:eb:
8d:87:83:1b:47:86:48:d1:63:96:33:0b:09:b8:e0:
3e:8d:93:aa:ed:a3:a1:58:0d:24:ac:d0:19:3d:83:
a9:a2:5d:3c:19:d7:3e:fd:7b:6b:db:ee:fa:8a:c2:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:D3:35:FB:83:16:96:33:E7:8A:27:7A:82:E5:46:AF:CC:0F:5B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
2a06:a005:116d::/48
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
71:01:d5:c1:5d:14:6e:ff:b9:f8:06:e6:09:51:f4:cf:59:d3:
a4:a0:b8:84:eb:1b:34:0d:d8:6a:8f:14:a5:fd:3f:f1:85:62:
c0:4b:9c:63:48:ad:74:72:cd:5a:c2:3d:27:81:eb:1e:c8:c5:
e5:bd:7c:ad:be:9d:24:80:07:9e:57:23:64:dc:0f:59:9a:7f:
2b:0e:f7:8e:d8:43:db:ab:8e:2f:02:ea:11:dd:8a:e1:94:40:
b7:91:3c:c0:95:b4:7d:da:86:57:f1:ca:58:a9:40:a0:ed:b9:
10:39:6b:44:58:59:fa:28:6b:97:42:d9:c4:b0:17:a6:5a:d3:
cb:b6:c7:87:87:d3:f0:82:7e:81:44:5a:b1:78:29:c4:2c:5b:
1c:7f:d5:f6:4c:aa:48:d3:69:6e:96:f2:e5:51:f5:36:76:8b:
9d:0c:b4:36:62:8d:b4:12:b4:74:fc:94:ee:4c:ce:12:74:04:
5a:0e:f9:33:eb:84:15:d5:cc:8f:86:1c:dd:c9:34:9c:1e:be:
d7:a1:52:a0:47:24:bc:1d:cc:ae:67:5b:4c:36:1c:1a:04:2a:
53:00:ef:86:1c:b6:4d:42:81:87:f8:ad:d9:df:a8:a5:1b:d4:
e6:ec:f4:94:68:42:7e:f8:fb:dd:00:8f:12:cc:70:a1:43:4c:
fc:81:0c:fc
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYT0kISCljQ87BCegKoCQVKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA5MDE0NzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTkyZDMzNWZiODMxNjk2MzNlNzhhMjc3YTgyZTU0NmFmY2MwZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJf6Syib9HyVHx1Mmd5wJZDB7Brh
epXPeOMr9C8qFoNGykR3lJGa8OVJmnY2ZgUh5EsTnNE7g9iS0D/kYm4q3r4nkQ4W
fjD0BL/J1oyFqqIg+zYXUeLgjSppsYz9nRBap0coXwuPgq2gqWtntEUxgdPLHW2H
VtLSoj4RqNM5t5Hnh1GCHMUvrG28kzdNIsjO89A3Noe+kZQDx3f78Y3Lf4LilGSc
BKV9pdEH0jLyBuOgUq3RKzAY7uO+YOwr9cSUb5ClzxxH+D2663bUwyql5euNh4Mb
R4ZI0WOWMwsJuOA+jZOq7aOhWA0krNAZPYOpol08Gdc+/Xtr2+76isI3tQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCqS0zX7gxaWM+eKJ3qC5UavzA9bMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvS3BMVE5mdURGcFl6NTRvbmVvTGxScV9NRDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAKgagBQAG
AwcAKgagBRFtAwYAKgpgQPIwDQYJKoZIhvcNAQELBQADggEBAHEB1cFdFG7/ufgG
5glR9M9Z06SguITrGzQN2GqPFKX9P/GFYsBLnGNIrXRyzVrCPSeB6x7IxeW9fK2+
nSSAB55XI2TcD1mafysO947YQ9urji8C6hHdiuGUQLeRPMCVtH3ahlfxylipQKDt
uRA5a0RYWfooa5dC2cSwF6Za08u2x4eH0/CCfoFEWrF4KcQsWxx/1fZMqkjTaW6W
8uVR9TZ2i50MtDZijbQStHT8lO5MzhJ0BFoO+TPrhBXVzI+GHN3JNJwevtehUqBH
JLwdzK5nW0w2HBoEKlMA74Yctk1CgYf4rdnfqKUb1Obs9JRoQn74+90AjxLMcKFD
TPyBDPw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net