Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8WhCwtI1FPxHtcpjSFlUUeUDlEg.roa
File: 8WhCwtI1FPxHtcpjSFlUUeUDlEg.roa (raw, json)
Hash identifier: jK9ZBJFjuDfruUgfeFL1ae/cy9phQ9AZXq8/4kX/lco=
Subject key identifier: F1:68:42:C2:D2:35:14:FC:47:B5:CA:63:48:59:54:51:E5:03:94:48
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018409C3CD88A3962F01071789F12BF85A10
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8WhCwtI1FPxHtcpjSFlUUeUDlEg.roa
Signing time: Mon 24 Oct 2022 11:32:17 +0000
ROA not before: Mon 24 Oct 2022 11:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202000
IP address blocks: 2a06:a005:2110::/44 maxlen: 48
2a06:a005:2120::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
2a06:a005:2100::/44 maxlen: 48
2a06:a005:2010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:c3:cd:88:a3:96:2f:01:07:17:89:f1:2b:f8:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 24 11:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f16842c2d23514fc47b5ca6348595451e5039448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:7d:d8:e3:ec:56:f0:dd:57:56:88:ce:b6:
a9:2e:d5:45:16:75:d8:de:18:72:8c:67:aa:fa:ee:
4d:f1:ca:2c:77:df:77:ae:c9:a3:ce:4d:3e:16:01:
31:92:cc:cf:f7:cc:6e:56:83:e2:f8:f3:66:03:68:
99:e1:28:25:82:00:59:ab:71:c8:47:63:a7:af:6c:
1e:73:53:fa:83:43:3c:60:89:66:74:1c:9c:dc:57:
ff:99:18:ca:47:4b:b4:f5:73:c4:f8:ef:e6:6f:90:
b1:55:db:a7:25:d3:5c:c9:1b:04:0a:6f:b0:46:17:
54:92:8f:13:c3:88:53:1f:b5:69:e4:96:2e:e8:7a:
45:8c:e1:cf:a2:b9:c3:f8:0f:4f:2a:9c:d2:6e:25:
49:58:20:f6:f0:40:e1:5b:f7:b9:d0:06:d0:87:8c:
4b:40:be:3f:24:f3:14:c7:cd:dc:b1:c3:a6:b0:b2:
ea:79:05:bd:02:98:9d:8a:a6:f9:4f:e1:d7:46:fd:
02:83:e5:bc:1e:7a:3b:13:b1:26:02:8e:86:0a:78:
75:8d:87:6b:fe:b6:48:a8:48:68:eb:f3:5e:7f:99:
69:4f:84:83:15:ae:d0:2c:f1:ee:20:ee:53:73:11:
c5:c9:7a:01:7e:01:6d:76:c2:91:aa:75:ac:24:8e:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:42:C2:D2:35:14:FC:47:B5:CA:63:48:59:54:51:E5:03:94:48
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8WhCwtI1FPxHtcpjSFlUUeUDlEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::-2a06:a005:212f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:a4:d8:d2:e1:3c:4b:97:a7:38:53:00:10:76:26:67:f9:d9:
3e:fe:98:9d:a7:65:23:85:78:8c:36:c8:5d:99:53:d6:d6:eb:
53:5f:58:bd:af:09:ba:01:fe:63:fa:13:14:4d:c1:e4:b2:77:
fc:a0:f6:d5:25:9c:dd:68:67:38:86:57:38:d4:f8:ef:0e:94:
c5:43:0d:62:6e:b3:12:f5:47:71:fe:02:fb:06:90:79:22:6b:
98:c1:20:51:31:3e:70:fc:b5:ff:40:66:99:4b:92:a1:11:15:
4e:3a:a7:c0:eb:0f:3c:2c:57:05:d7:d0:05:14:22:06:6b:0b:
9f:e0:81:e9:92:62:0a:05:61:90:41:26:88:73:14:02:67:9f:
61:b6:85:0f:1a:49:40:ca:72:cd:ba:0e:bd:cf:70:df:42:02:
83:2b:18:a4:44:0a:74:df:42:2b:22:64:be:8e:45:38:47:e4:
32:5b:e1:8f:c2:58:37:14:f8:42:0c:07:2f:0b:89:1b:49:5e:
1e:26:bc:bf:79:d4:be:d4:61:73:c7:19:d9:18:c3:42:af:9d:
96:a9:cb:6c:54:09:15:34:28:48:76:85:45:44:c1:02:e2:5b:
f5:3f:47:77:79:f6:d5:04:ff:66:5c:ae:04:65:b3:8b:d4:d4:
34:39:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net