Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BGjnh5p3vgObYxqOoVYuAXf8fU4.roa
File: BGjnh5p3vgObYxqOoVYuAXf8fU4.roa (raw, json)
Hash identifier: UMgZ8BUpMEhIf9NNX29M8Je8KtBHxM399u4yy+YUZqU=
Subject key identifier: 04:68:E7:87:9A:77:BE:03:9B:63:1A:8E:A1:56:2E:01:77:FC:7D:4E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182FF36EA463E6C5517E6A16639BAD2C082
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BGjnh5p3vgObYxqOoVYuAXf8fU4.roa
Signing time: Fri 02 Sep 2022 17:19:25 +0000
ROA not before: Fri 02 Sep 2022 17:19:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:a005:487::/48 maxlen: 48
2a06:a005:5af::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:36:ea:46:3e:6c:55:17:e6:a1:66:39:ba:d2:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 2 17:19:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0468e7879a77be039b631a8ea1562e0177fc7d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:aa:82:ed:40:d4:67:d1:a8:4c:3a:1e:0b:
22:06:a4:f0:b3:cf:2e:56:5d:70:55:63:a4:64:16:
cc:6d:db:4c:71:80:37:74:1a:35:41:c2:13:c5:f3:
c9:d7:b6:01:aa:dc:34:37:f6:0b:72:c2:22:d8:ab:
ef:7c:7f:24:d8:4c:fd:e7:62:95:b0:a0:79:65:13:
07:5f:6d:e8:a2:6d:65:4b:cd:03:10:12:0c:f1:42:
94:75:3f:a2:f9:f5:c9:9c:c2:a2:1e:c2:9d:b0:f1:
5f:78:76:ef:4e:41:c6:16:6a:64:17:9b:de:7a:7e:
d7:e8:1f:b6:5c:16:8d:6f:1c:22:68:a2:a9:9d:b4:
2e:e1:9c:6b:bb:07:29:ff:30:ed:f8:6b:92:ac:45:
36:50:47:a7:55:b0:17:6d:6d:aa:c4:7e:ec:5d:b7:
2a:3c:47:cc:38:bb:f5:0e:ee:f7:01:7b:13:7e:25:
47:99:0e:1c:56:29:1e:47:5c:2e:90:8e:8f:6c:fd:
6c:29:53:64:c2:c6:d5:32:48:51:a7:29:f2:6b:15:
aa:08:d5:1c:73:fa:78:f3:78:e4:3a:d0:1f:0a:2f:
0c:ad:8f:30:e2:e0:73:1e:75:93:99:a5:22:2f:28:
01:07:4e:df:d7:1d:e5:4b:d5:82:de:cd:8e:58:1d:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:E7:87:9A:77:BE:03:9B:63:1A:8E:A1:56:2E:01:77:FC:7D:4E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BGjnh5p3vgObYxqOoVYuAXf8fU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:a005:487::/48
2a06:a005:5af::/48
Signature Algorithm: sha256WithRSAEncryption
48:d5:79:fe:0c:12:ab:14:f9:0b:2b:a5:b0:54:00:c6:74:71:
62:cf:7f:1b:22:36:de:97:33:0b:7e:a0:ea:dc:b5:9a:f9:39:
4b:3d:e0:1a:21:fb:d9:0b:f9:bf:85:d9:fd:c5:69:12:ae:ed:
f2:03:eb:5f:e4:de:df:92:88:42:39:36:86:92:62:fc:f3:2d:
d1:0c:5e:28:1c:1d:6a:52:4f:5e:ff:0a:f8:9b:d6:04:25:86:
55:e7:38:cf:1c:db:b5:3b:43:97:9b:d5:b6:e6:1f:33:39:61:
5e:5c:9f:bc:ed:9f:2e:6a:6a:57:f4:3f:a4:23:18:a4:99:65:
c0:67:cb:e4:ad:07:8a:1c:4b:54:f9:28:f5:d9:cc:98:f1:e1:
65:08:a2:24:76:6b:3a:be:9c:3b:32:e3:6e:3c:02:de:c1:a8:
e2:b9:aa:5b:62:f2:60:6b:e0:50:27:19:77:74:58:bf:e8:cc:
ff:f9:e8:5e:ef:e5:79:70:e2:ee:23:89:1a:6e:e8:bc:ae:4b:
99:62:a9:b6:ea:41:8c:73:a5:96:ff:41:69:34:d2:74:47:38:
ed:24:6c:2d:da:56:96:3e:f9:b6:0c:ac:79:c9:77:03:99:cd:
06:d1:03:6c:d5:9d:6a:00:2b:cc:88:5c:f7:45:de:5d:28:9a:
67:00:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net