Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CbmPxWIq1WkvZDxq92VY9IOjlms.roa
File: CbmPxWIq1WkvZDxq92VY9IOjlms.roa (raw, json)
Hash identifier: Yt2cgnpjfZvfSZKN23nP3nVTFyY6iZ7LCn7YC4iFj1E=
Subject key identifier: 09:B9:8F:C5:62:2A:D5:69:2F:64:3C:6A:F7:65:58:F4:83:A3:96:6B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181D9C34D3E06786DB4F93959262472389C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CbmPxWIq1WkvZDxq92VY9IOjlms.roa
Signing time: Thu 07 Jul 2022 17:44:23 +0000
ROA not before: Thu 07 Jul 2022 17:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209263
IP address blocks: 2a06:a005:1070::/44 maxlen: 48
2a06:a005:e40::/44 maxlen: 48
2a06:a005:1080::/44 maxlen: 48
2a06:a005:1190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:c3:4d:3e:06:78:6d:b4:f9:39:59:26:24:72:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 7 17:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09b98fc5622ad5692f643c6af76558f483a3966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:d7:ca:3f:6d:5c:16:c1:3e:04:60:7b:05:
74:0c:d6:d7:25:46:03:16:66:4b:1f:ff:17:97:67:
ec:93:c3:46:28:6f:40:34:34:2e:83:24:73:d0:78:
d2:7e:55:90:48:24:65:ee:d4:23:37:ed:06:3e:a4:
03:c2:74:68:ca:77:a0:c5:e4:29:01:a6:0d:ca:99:
44:33:d1:46:f7:be:c0:ee:31:5d:86:53:02:9c:b4:
07:38:7a:1b:a8:0f:60:44:bc:e1:4f:01:21:b3:8a:
bf:03:c2:2f:a7:74:0f:c3:c6:34:7d:6a:91:6c:06:
cb:8c:02:11:b3:5c:cc:31:b6:1d:2b:ee:6e:e0:42:
55:07:4a:74:2f:3c:4e:2b:8c:a2:19:46:4c:26:17:
53:56:f7:27:7f:c2:f7:d0:de:ca:23:55:96:4f:e9:
34:f5:be:02:11:13:1e:68:aa:2f:58:e7:0d:df:d0:
ef:e8:ee:fa:29:23:40:dc:c7:c9:d1:71:ea:60:4d:
c9:e7:e9:74:b3:fd:f6:4e:03:b5:59:48:74:14:92:
c5:e5:99:05:22:01:ad:d6:1d:76:c4:f6:be:84:f4:
e3:c1:2e:77:f9:56:e5:cd:0e:88:5c:60:ec:a5:48:
3e:dc:53:f3:ab:1e:0d:3a:ee:79:54:6e:4d:bf:a6:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:8F:C5:62:2A:D5:69:2F:64:3C:6A:F7:65:58:F4:83:A3:96:6B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CbmPxWIq1WkvZDxq92VY9IOjlms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e40::/44
2a06:a005:1070::-2a06:a005:108f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1190::/44
Signature Algorithm: sha256WithRSAEncryption
77:a0:e9:5e:ce:aa:75:fc:11:f9:a0:4a:71:ef:2c:6c:8b:61:
bc:98:bd:6b:92:f1:03:48:10:36:59:d6:74:f6:04:e4:9a:4e:
14:dd:d7:bd:31:df:27:5e:ff:e1:a1:49:4a:4d:a1:d3:98:8f:
2b:16:0a:34:cf:58:cf:88:39:ea:ef:55:cb:1e:f4:47:92:a6:
00:2d:46:f4:b0:84:27:81:ce:a0:43:27:c2:f4:64:5d:ae:53:
22:cc:b1:c7:0c:be:92:68:90:f4:57:13:8a:a4:10:78:5f:38:
67:2d:c4:70:9d:03:89:fe:e5:a9:39:ec:0e:59:97:f7:c3:0f:
77:46:d1:b2:ff:8a:c6:09:96:da:3d:78:77:10:6c:84:01:ee:
aa:0d:49:a4:8c:6b:f1:b2:27:ee:f0:98:e8:77:55:a0:5e:66:
65:01:81:a1:c2:53:c9:17:b5:0a:7f:dd:3b:47:48:df:10:77:
b3:fc:88:9e:28:a2:b5:0c:b1:bc:a8:12:17:d9:0b:7c:2d:8c:
8f:53:72:83:98:88:a4:62:99:ff:35:b1:be:28:40:ad:5a:98:
9d:b2:90:e5:d9:91:29:22:e5:f7:20:4f:16:d3:2c:b8:62:34:
21:7a:32:13:65:ca:71:2c:56:dd:df:af:0b:82:db:a7:09:44:
c1:7c:25:61
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYHZw00+BnhttPk5WSYkcjicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzA3MTc0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI5OGZjNTYyMmFkNTY5MmY2NDNjNmFmNzY1NThmNDgzYTM5NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPLXyj9tXBbBPgRgewV0DNbXJUYD
FmZLH/8Xl2fsk8NGKG9ANDQugyRz0HjSflWQSCRl7tQjN+0GPqQDwnRoynegxeQp
AaYNyplEM9FG977A7jFdhlMCnLQHOHobqA9gRLzhTwEhs4q/A8Ivp3QPw8Y0fWqR
bAbLjAIRs1zMMbYdK+5u4EJVB0p0LzxOK4yiGUZMJhdTVvcnf8L30N7KI1WWT+k0
9b4CERMeaKovWOcN39Dv6O76KSNA3MfJ0XHqYE3J5+l0s/32TgO1WUh0FJLF5ZkF
IgGt1h12xPa+hPTjwS53+VblzQ6IXGDspUg+3FPzqx4NOu55VG5Nv6YuOwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAm5j8ViKtVpL2Q8avdlWPSDo5ZrMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQ2JtUHhXSXExV2t2WkR4cTkyVlk5SU9qbG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcEKgagBQ5A
MBIDBwQqBqAFEHADBwQqBqAFEIADBwQqBqAFEZAwDQYJKoZIhvcNAQELBQADggEB
AHeg6V7OqnX8EfmgSnHvLGyLYbyYvWuS8QNIEDZZ1nT2BOSaThTd170x3yde/+Gh
SUpNodOYjysWCjTPWM+IOervVcse9EeSpgAtRvSwhCeBzqBDJ8L0ZF2uUyLMsccM
vpJokPRXE4qkEHhfOGctxHCdA4n+5ak57A5Zl/fDD3dG0bL/isYJlto9eHcQbIQB
7qoNSaSMa/GyJ+7wmOh3VaBeZmUBgaHCU8kXtQp/3TtHSN8Qd7P8iJ4oorUMsbyo
EhfZC3wtjI9TcoOYiKRimf81sb4oQK1amJ2ykOXZkSki5fcgTxbTLLhiNCF6MhNl
ynEsVt3frwuC26cJRMF8JWE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net