Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2URbGmboSPmAouBo6Xug25mPe58.roa
File: 2URbGmboSPmAouBo6Xug25mPe58.roa (raw, json)
Hash identifier: sU+UzhG8gW/P+TMdZQL7kIy8VfSrKTYxseYvUbUU9as=
Subject key identifier: D9:44:5B:1A:66:E8:48:F9:80:A2:E0:68:E9:7B:A0:DB:99:8F:7B:9F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845B64365DB871155DFB502E54A170BCA3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2URbGmboSPmAouBo6Xug25mPe58.roa
Signing time: Wed 09 Nov 2022 07:56:44 +0000
ROA not before: Wed 09 Nov 2022 07:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:64:36:5d:b8:71:15:5d:fb:50:2e:54:a1:70:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 9 07:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9445b1a66e848f980a2e068e97ba0db998f7b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:64:db:eb:80:76:f9:8d:9a:a8:31:70:ef:
f3:ba:63:71:ac:13:a9:d2:1b:43:86:a3:3d:d5:2d:
47:07:34:45:33:ae:d1:0a:68:04:0a:1b:29:29:d5:
b4:f3:a9:5d:2c:ea:a2:2e:a6:ef:e9:2c:30:6d:67:
a8:ac:50:53:dc:0c:28:7b:ec:e0:0d:df:d5:72:90:
0f:29:d6:3c:94:2b:29:2d:84:eb:59:f0:ab:2a:a5:
b9:a7:73:54:5d:7d:ce:0d:9f:f9:4f:2c:40:48:2b:
6f:2c:c3:9a:3e:a6:59:06:23:de:ce:2a:08:fa:40:
c2:ae:b2:76:71:4f:40:08:96:4f:f6:8c:a5:03:07:
d7:11:13:54:02:51:62:a6:10:8b:74:b0:61:bd:e4:
6a:f5:83:50:42:f1:d5:2e:36:13:12:5c:55:3c:33:
0d:a8:34:3a:93:40:86:17:ef:62:e5:17:6d:4e:eb:
8b:f8:f2:eb:7f:88:5a:1e:f8:d2:ef:80:41:e0:a2:
d7:80:f8:ca:12:6e:da:ae:b3:1d:ce:a6:ed:a0:c9:
bf:43:b9:fe:54:23:c0:46:b8:13:4e:f9:b5:1e:ec:
f0:96:4c:cb:b0:b6:df:e9:99:6d:04:28:83:32:68:
c1:cd:93:b9:4d:89:6d:9b:18:3c:55:49:1e:98:3d:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:5B:1A:66:E8:48:F9:80:A2:E0:68:E9:7B:A0:DB:99:8F:7B:9F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2URbGmboSPmAouBo6Xug25mPe58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
4b:47:1c:0a:db:9e:3c:d7:ac:5e:76:c9:99:cc:e8:22:90:66:
dd:98:58:0b:8b:5e:0c:96:45:f7:9a:52:dd:16:c2:de:60:aa:
0f:42:5a:63:8a:c6:b5:15:82:23:19:84:8d:3d:b4:27:31:81:
62:83:a6:87:a5:3a:4d:16:c6:90:ef:e0:af:1f:95:78:49:6b:
45:1a:4d:5d:2d:bf:a8:3d:26:c8:d0:b4:aa:97:43:6e:26:fe:
69:7b:50:fb:be:e0:63:32:ae:a4:4f:01:ce:21:ac:97:44:15:
51:8f:96:db:3c:39:29:1e:7f:3d:e9:a2:14:3a:58:b1:9b:f1:
f9:97:93:3f:60:11:5e:86:2a:b1:d4:12:03:d8:f7:63:bd:cc:
d0:9e:12:9f:3f:f5:46:25:c0:0a:43:bf:e4:85:b9:8a:a4:2c:
1f:c7:39:84:4b:94:ce:c5:eb:b6:d6:f4:ec:27:af:50:1b:5e:
13:e8:b4:33:75:85:5d:a7:a7:e4:10:e2:67:3f:5b:8d:52:66:
1b:b9:91:33:ed:b0:80:dd:01:7c:8f:68:4e:11:31:48:45:14:
87:1f:64:7c:c1:32:3b:33:02:c4:59:85:7d:a2:b1:06:c7:b1:
5a:9f:98:cd:24:99:f1:4b:e9:65:10:4b:2f:27:11:dc:30:ab:
a0:9a:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net