Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa
File: AigaUaceasPDpNdy5KHVwZCkpYQ.roa (raw, json)
Hash identifier: xsr4XyDiszAYVwioW+q7YBl4/885RScf/TYmp86Frzo=
Subject key identifier: 02:28:1A:51:A7:1E:6A:C3:C3:A4:D7:72:E4:A1:D5:C1:90:A4:A5:84
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184A56FB7DD7243B5CE13601FED453F7B1D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa
Signing time: Wed 23 Nov 2022 17:01:12 +0000
ROA not before: Wed 23 Nov 2022 17:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48
2a06:a005:437::/48 maxlen: 48
2a0a:6040:ef00::/40 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:6f:b7:dd:72:43:b5:ce:13:60:1f:ed:45:3f:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 23 17:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02281a51a71e6ac3c3a4d772e4a1d5c190a4a584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:ee:cb:8c:9f:91:3c:6a:db:11:79:0b:f9:
2f:f0:1c:fe:b8:02:00:1e:ea:30:4b:b1:7d:aa:03:
8a:82:fc:94:22:9a:d1:ba:e1:b3:fe:65:ac:48:05:
4f:54:3b:c4:9d:42:e4:a6:83:d9:d5:54:e0:f1:4a:
67:5c:12:71:ea:02:c9:2d:56:2a:92:6c:91:c5:8d:
bd:81:48:ec:88:17:4a:57:4d:d5:98:04:fa:ff:7b:
bf:2c:42:be:31:00:a0:69:e0:06:7c:06:a2:a9:8f:
16:1c:5d:1e:8d:3c:71:4b:d6:76:08:a8:b2:d8:fb:
7d:34:43:c8:0a:e6:34:a9:12:37:d9:fd:ff:58:17:
1d:15:a7:48:77:11:1c:3d:dc:48:cc:71:61:05:b3:
3a:49:c0:64:96:e1:9b:c9:ee:3c:cb:7d:5b:e6:68:
7b:25:4d:0c:94:41:b7:ad:ef:43:6e:db:29:e4:72:
98:19:36:8b:99:21:d0:d3:01:ca:6b:2f:ad:72:b5:
9d:29:c0:32:f2:d9:c0:2a:82:d5:2c:4f:e6:b5:2d:
10:ec:7b:79:9a:14:89:43:96:75:2c:d7:85:0f:c4:
39:80:73:ae:91:5c:1a:31:88:96:46:67:76:84:b8:
b9:9a:ee:f8:3d:0b:23:08:d8:61:56:91:f9:1a:37:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:28:1A:51:A7:1E:6A:C3:C3:A4:D7:72:E4:A1:D5:C1:90:A4:A5:84
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
2a07:54c2:b00b::/48
2a0a:6040:ef00::/40
2a0a:6040:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
48:39:6b:f9:c9:f1:83:12:e4:42:58:e3:7e:df:85:52:9d:de:
c5:30:a0:56:3b:5e:e1:bf:6e:4d:35:c4:01:fa:c6:d9:de:ac:
c7:e5:3a:d9:a3:2b:fe:7b:85:c4:7d:1c:ba:38:d0:8a:0b:d6:
f1:59:69:67:24:76:47:d5:c4:9d:ab:b1:e8:38:fb:f2:41:5d:
4a:ae:6a:7e:be:ed:73:e0:ce:83:25:57:4c:d9:3f:bc:d8:3e:
64:21:d5:45:01:8f:4e:03:8f:da:90:a5:73:a1:74:0b:fb:6c:
87:15:86:69:cb:9d:c3:9d:91:8b:d3:06:56:7b:97:c8:e9:23:
55:55:54:fa:72:58:ac:d5:c1:b2:fa:e2:33:6b:f1:73:eb:fb:
fb:3f:fb:93:c4:ea:f1:cc:83:a0:99:88:d5:26:4e:21:84:0f:
36:f6:c0:74:90:33:38:13:62:66:ff:11:eb:69:9d:a9:c6:7f:
93:6c:f9:ed:dd:5b:8a:c1:a3:14:1d:60:b4:6b:6f:0f:22:43:
ca:d8:d7:06:a4:34:e2:dc:e1:3c:b6:a3:73:35:d6:1b:74:91:
56:84:fe:4a:fe:c3:36:9a:fa:1d:95:5f:3b:98:fc:89:60:62:
0f:ec:c8:06:3e:4e:1e:32:00:d6:3f:dd:d9:e5:70:17:e5:60:
c9:95:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net