Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa
File: C4TA86E1vr60X4ZkudVawQLtOj4.roa (raw, json)
Hash identifier: G09d4v12+KW/MBDXXj5s/2nTjfJLIi/Hu/tqtc+p3GI=
Subject key identifier: 0B:84:C0:F3:A1:35:BE:BE:B4:5F:86:64:B9:D5:5A:C1:02:ED:3A:3E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833D0F9F122D425A4DC3B343605954DE92
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa
Signing time: Wed 14 Sep 2022 17:32:57 +0000
ROA not before: Wed 14 Sep 2022 17:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a002::/32 maxlen: 48
2a06:a005:1d10::/44 maxlen: 48
2a06:a005:1d20::/44 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:0f:9f:12:2d:42:5a:4d:c3:b3:43:60:59:54:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 14 17:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b84c0f3a135bebeb45f8664b9d55ac102ed3a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:b6:2e:e5:86:d1:7e:09:de:e9:37:16:86:
79:e1:dc:a1:16:af:5d:7f:6d:67:1a:f4:1d:08:74:
34:2a:ee:5c:e3:67:c3:a2:e3:ff:02:1d:c9:2c:3c:
7e:a7:3b:e6:8e:3a:78:6c:63:ba:ee:4e:6c:f1:bf:
b3:76:c1:df:12:f7:e0:f7:f1:0a:a5:00:e1:70:46:
9e:e5:a4:4b:4e:40:a7:d4:a6:26:0d:3e:8f:de:1b:
51:69:b6:1e:b4:4a:9a:4b:ac:1a:62:e7:3f:1c:6d:
45:0f:d0:8f:ee:61:c7:be:70:de:b6:36:4a:87:7b:
89:84:8d:0d:d4:00:4c:63:59:ac:65:4e:ce:8f:26:
ce:fa:13:30:e4:f6:18:bc:ee:9f:13:b5:c2:ec:9e:
bc:c7:a9:9f:4b:43:af:9f:81:cc:a6:84:ae:9b:06:
52:2d:f7:73:a3:e7:81:21:b3:d8:e7:bf:a5:59:de:
6d:8e:43:53:37:c7:0b:bd:e4:0f:1d:74:a3:e6:fd:
91:1c:5f:16:e4:93:25:aa:36:17:e6:7b:1c:93:84:
dd:6b:bb:5b:00:f4:b5:70:f8:3a:0d:cb:33:bc:e4:
f7:a4:eb:f0:86:1e:90:c3:8b:ea:49:b2:3c:bc:f1:
66:e3:b5:24:8f:1a:9c:36:96:7f:81:dc:ff:13:9d:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:C0:F3:A1:35:BE:BE:B4:5F:86:64:B9:D5:5A:C1:02:ED:3A:3E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
2a06:a005:5a4::/48
2a06:a005:17a0::/44
2a06:a005:1d10::-2a06:a005:1d3f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:56:6e:68:a2:e6:65:00:d7:9b:22:f4:ca:82:21:2c:5b:fc:
ef:76:44:69:f3:9c:55:3f:94:72:c9:b9:76:37:9a:d0:54:7a:
a0:ea:dd:0a:19:98:59:ed:9d:c4:02:56:54:46:2b:84:0d:33:
15:4a:32:f0:e8:45:c6:ef:38:00:83:7d:89:40:56:97:1c:0e:
56:06:c8:98:59:f3:53:c5:45:ee:b4:b9:7e:23:75:07:2f:9e:
13:82:a6:6d:4b:12:c8:e9:ae:ba:c8:ec:be:62:9d:64:c1:0e:
8d:8f:54:5d:64:61:6d:9f:47:56:b8:fb:37:f5:a0:70:a3:88:
ef:30:27:f6:9e:a5:b1:bc:53:49:93:e1:ab:a3:07:30:9d:8e:
9d:4a:98:bc:e5:32:bf:f6:ea:e2:58:6e:fd:ab:a6:99:fe:8b:
bf:0f:bf:e4:4a:cb:fd:d9:ea:8e:f7:61:ae:0d:45:5b:d9:cc:
da:f1:14:f0:6e:db:94:11:d8:16:3c:f4:5d:7a:4d:b6:1d:53:
39:09:b0:df:10:dd:53:4c:c1:7d:2d:5a:7a:23:79:92:50:a1:
f5:fe:0a:e0:6b:c9:da:d2:5b:7c:fa:a4:c7:e8:65:65:5d:43:
c9:9e:51:ec:54:f6:5e:5a:f6:76:83:e3:c1:59:0d:84:c8:55:
a4:04:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net