Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5ooZeL8m6CB_NtCoH4LQB8CeVck.roa
File: 5ooZeL8m6CB_NtCoH4LQB8CeVck.roa (raw, json)
Hash identifier: d85rfcgcFyov7b/Wv54lsdXdqHWTt+SQ0siZiy5nmgs=
Subject key identifier: E6:8A:19:78:BF:26:E8:20:7F:36:D0:A8:1F:82:D0:07:C0:9E:55:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01828D32578585A4CC39930D95F8B5CB7E5B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5ooZeL8m6CB_NtCoH4LQB8CeVck.roa
Signing time: Thu 11 Aug 2022 13:57:42 +0000
ROA not before: Thu 11 Aug 2022 13:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204466
IP address blocks: 2a06:a005:ed0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
2a06:a005:d40::/44 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:32:57:85:85:a4:cc:39:93:0d:95:f8:b5:cb:7e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 11 13:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e68a1978bf26e8207f36d0a81f82d007c09e55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:a7:df:c1:88:b7:97:d7:c0:33:85:51:6f:
a7:0f:67:2e:2a:be:36:09:87:49:3a:97:b4:57:9d:
38:de:13:e0:e5:a1:2b:15:bc:97:72:b5:4d:60:c0:
bd:a2:d9:9d:a3:c9:3d:13:fe:8d:0c:b0:ca:40:eb:
4f:ad:70:69:03:0c:2a:90:e6:ff:31:1f:bd:29:ed:
bc:16:f4:c2:e8:b6:3d:31:3a:a2:92:a9:81:83:98:
19:01:a1:e2:58:16:f2:bb:7e:2b:63:ec:7c:a2:cf:
00:4f:31:fe:f7:04:4a:9a:c5:77:77:87:af:f7:cc:
32:2f:b8:d8:b6:2b:59:26:d1:80:41:5c:03:fd:39:
00:db:30:83:8f:bd:61:8c:98:78:dc:ad:7b:77:32:
5d:43:ef:6f:84:cb:77:81:bd:17:bd:9d:91:81:be:
62:ea:4c:11:03:a2:6f:6b:d6:29:a4:12:87:42:be:
7d:7a:8a:0b:52:97:ba:27:c8:de:80:3a:ab:a8:ac:
4c:5d:a1:1b:e8:ba:cc:1f:06:de:0a:76:77:50:ee:
fc:72:f3:ac:f6:f8:03:a8:4b:9b:e3:65:47:a6:40:
f9:10:25:ab:32:ea:92:29:aa:45:45:58:27:d2:97:
9d:50:08:5e:ea:bb:c3:0c:a0:17:dd:1f:1d:47:5a:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:19:78:BF:26:E8:20:7F:36:D0:A8:1F:82:D0:07:C0:9E:55:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5ooZeL8m6CB_NtCoH4LQB8CeVck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
Signature Algorithm: sha256WithRSAEncryption
62:5a:ad:19:95:fb:89:0e:47:f0:f8:49:92:26:86:6b:5a:53:
ea:93:93:60:b3:2b:d1:2c:c9:b5:1d:1d:6b:83:02:94:20:b6:
91:9a:61:00:dc:6b:82:ab:68:cc:05:e8:d6:22:ce:2e:6c:ea:
47:9a:87:b9:ad:ae:61:5e:eb:22:93:82:fc:a3:5a:f2:15:71:
d0:3a:0d:ca:03:73:e3:c7:ea:5d:00:fc:4e:81:07:d9:d2:d4:
ee:22:24:a3:d5:c6:a4:1c:89:af:72:16:73:04:42:bb:d8:e1:
e0:40:c5:61:0c:0a:a7:48:60:10:d1:5b:90:72:4f:df:8f:54:
36:2e:5c:9e:33:65:9a:34:39:92:4e:f2:21:6f:ba:d3:ae:5f:
cc:43:77:45:70:e7:10:9f:2e:0f:4b:80:38:ea:36:cc:37:1f:
3d:b0:df:4c:40:c9:d0:20:c3:9e:d4:4f:55:6d:de:fa:bd:c5:
d3:cc:63:e1:42:70:df:83:05:03:e6:b4:8b:86:69:6a:55:d2:
d5:f2:46:9b:91:a9:aa:e3:89:26:e6:79:a0:4c:1d:25:25:35:
cf:2b:5e:07:0e:b6:37:f4:c8:ad:4c:66:76:20:f1:73:89:3a:
ac:38:b0:8b:75:04:b8:ba:e9:73:9c:cf:ab:b7:d2:48:08:d2:
1e:ca:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net