Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/50EA-dvrkS0y3Dn8G6G7Dwjf3h4.roa
File: 50EA-dvrkS0y3Dn8G6G7Dwjf3h4.roa (raw, json)
Hash identifier: a1AgT++xsVhPqk5TO0XckEbPGj7hzW8d257Q7nVsHOM=
Subject key identifier: E7:41:00:F9:DB:EB:91:2D:32:DC:39:FC:1B:A1:BB:0F:08:DF:DE:1E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840CB0BA1AB669FE27422D8B81703513CD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/50EA-dvrkS0y3Dn8G6G7Dwjf3h4.roa
Signing time: Tue 25 Oct 2022 01:10:19 +0000
ROA not before: Tue 25 Oct 2022 01:10:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204005
IP address blocks: 2a06:a005:ba9::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a07:54c4:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0c:b0:ba:1a:b6:69:fe:27:42:2d:8b:81:70:35:13:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 01:10:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e74100f9dbeb912d32dc39fc1ba1bb0f08dfde1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:f8:34:a4:3d:9d:4e:ce:21:a3:5e:35:eb:
f3:26:ba:87:49:a7:60:f6:84:c2:f0:56:88:ca:72:
4c:ac:b1:6a:64:b2:e6:c2:ce:ff:75:d6:78:57:0d:
49:5d:aa:e2:aa:0d:5a:3b:62:38:2f:fe:fa:fb:70:
d9:43:f7:85:7b:4e:da:f6:2c:7a:ca:5e:4f:64:30:
ad:e3:68:b4:c0:86:d7:16:27:76:04:82:15:5f:f5:
94:ef:cc:bc:ab:52:b6:04:72:f3:52:b5:f1:ae:af:
ed:97:98:36:9a:07:23:42:af:82:6d:cb:50:3b:2d:
8e:ad:3a:3b:76:c8:9d:c9:64:57:ef:62:c7:1a:9f:
79:65:b7:61:b4:1a:f3:78:73:e4:1b:5d:41:b5:a3:
e4:80:8f:9d:c1:e2:d2:ef:f7:6a:17:93:75:ae:76:
6d:a0:ff:18:8f:56:79:ea:52:d7:b3:b9:e8:ed:4c:
7f:09:de:3a:c3:b6:37:47:8b:78:70:92:d5:f9:57:
f5:cc:f8:b1:be:ab:46:37:a0:c9:32:e3:30:e4:25:
09:75:26:cf:ff:8d:45:5e:b4:88:e7:cf:62:65:d5:
aa:08:8f:66:a7:b7:e2:e0:18:4d:15:3f:1b:e5:44:
5f:14:43:34:6c:7f:d9:22:6b:00:6b:4a:c5:9e:26:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:00:F9:DB:EB:91:2D:32:DC:39:FC:1B:A1:BB:0F:08:DF:DE:1E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/50EA-dvrkS0y3Dn8G6G7Dwjf3h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba9::/48
2a07:54c2:b00b::/48
2a07:54c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
2a:09:a0:e5:6e:d5:67:3c:bd:93:6a:8e:54:44:13:62:74:90:
4f:2c:ab:17:e2:7b:ec:af:3a:78:2a:3b:68:62:3d:bf:c0:af:
24:5c:3d:34:a7:be:9b:0c:72:25:68:fd:15:c5:4e:9c:38:7b:
67:8c:d0:0c:be:a7:8c:c7:a0:f5:60:8c:27:59:96:6d:77:36:
0d:ea:bd:e0:e9:b3:58:17:12:5e:b9:4d:a2:69:ca:11:72:45:
7b:60:9e:37:65:5a:ab:d8:81:d9:4c:47:14:88:e9:9e:48:6d:
1f:aa:9e:37:f1:f0:4f:41:f7:ee:d3:13:cf:b6:32:94:69:d3:
bf:57:ed:e5:f0:10:ab:b7:71:a8:80:5e:0d:7b:c4:2f:ac:0c:
0b:c0:5f:76:b9:2a:2c:67:45:b4:0a:2b:53:9f:7f:00:76:08:
ce:c1:32:bb:a8:e4:6e:6d:c2:09:9f:ed:bf:8e:71:c8:53:6d:
26:70:66:52:0b:6d:bd:00:df:0f:a7:0c:1e:85:52:4f:6a:0f:
eb:c9:d6:db:69:a7:cc:20:25:4a:87:1e:65:3d:24:63:59:51:
53:bc:b1:de:ac:e1:c6:cd:00:6d:05:90:7c:6f:74:7f:dc:93:
e8:3a:67:2a:1c:33:55:8a:21:4f:3f:fa:c3:76:6b:6e:cf:41:
3a:88:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net