Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CdPJBp576V4zsfJ5hCm9A2va3ZA.roa
File: CdPJBp576V4zsfJ5hCm9A2va3ZA.roa (raw, json)
Hash identifier: saj8cRwlsEPavnj1Y64AVcGm9yYBI6Ma46X6Q2XsOEQ=
Subject key identifier: 09:D3:C9:06:9E:7B:E9:5E:33:B1:F2:79:84:29:BD:03:6B:DA:DD:90
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01820CB2FA3F4DCF7612DC53450DC0C94D0B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CdPJBp576V4zsfJ5hCm9A2va3ZA.roa
Signing time: Sun 17 Jul 2022 15:07:12 +0000
ROA not before: Sun 17 Jul 2022 15:07:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210445
IP address blocks: 2a06:a005:d2c::/46 maxlen: 48
2a06:a005:f70::/44 maxlen: 48
2a06:a005:f60::/44 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
2a06:a005:1278::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:b2:fa:3f:4d:cf:76:12:dc:53:45:0d:c0:c9:4d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 17 15:07:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09d3c9069e7be95e33b1f2798429bd036bdadd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:6d:02:b0:7e:2d:e2:8b:d5:35:d6:5e:2c:
c0:6c:96:51:d0:1e:cb:7a:7e:5d:12:cd:95:a5:d3:
5d:0b:80:47:75:f9:23:f2:c0:97:f1:60:3e:0e:60:
20:22:a8:77:88:a6:aa:89:04:b7:cd:3e:68:db:58:
35:c0:ba:93:91:b1:8e:8a:44:da:f2:af:b2:54:d9:
45:47:d5:b9:2b:54:ac:41:8b:68:ae:c6:9d:dc:c5:
ea:da:fe:3e:53:dc:60:da:8e:c0:75:60:bb:e9:0d:
1f:ea:0e:3a:75:be:70:f6:39:08:07:46:78:f5:00:
a6:7b:23:0b:1e:35:80:fc:4c:9d:6b:99:0f:2b:67:
50:9d:ff:6e:eb:db:20:c1:19:b0:ed:4f:a0:68:79:
2b:b1:fc:a5:1d:36:01:16:eb:86:40:56:b8:e2:52:
e6:e3:73:26:75:ec:31:3e:ad:b6:fc:94:10:e1:34:
69:28:34:0b:e5:b3:1d:60:7f:fd:9b:65:ec:64:62:
97:41:ef:12:4d:d9:4b:58:7e:bf:14:c0:ad:54:72:
6c:8d:55:9a:ef:48:01:b8:de:9d:57:8f:09:b9:d7:
c5:89:a6:a1:de:06:63:29:0c:4a:33:be:5d:a9:e3:
ca:c8:45:b3:d6:b8:5a:8f:36:63:51:32:f6:98:d2:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D3:C9:06:9E:7B:E9:5E:33:B1:F2:79:84:29:BD:03:6B:DA:DD:90
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CdPJBp576V4zsfJ5hCm9A2va3ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2c::/46
2a06:a005:f60::/43
2a06:a005:1278::/46
2a06:a005:12f0::/44
Signature Algorithm: sha256WithRSAEncryption
25:98:f1:34:ff:9d:ce:ed:6b:42:27:97:98:d2:e2:b8:00:aa:
7b:ee:0d:5f:d1:f1:ca:e3:9c:05:30:33:d9:c9:60:7a:1a:af:
fd:63:d2:d8:ae:4a:d4:af:38:4b:aa:50:e7:30:a9:99:5e:3e:
bf:61:c1:63:4d:cf:32:91:14:94:d9:27:b1:bf:c9:5d:01:a2:
85:ec:3e:49:0b:f8:89:b9:3a:9f:dc:24:ed:04:93:c4:6f:ed:
5d:34:84:9f:ac:04:2f:30:36:d9:8b:eb:99:b5:4e:c6:a7:81:
42:e6:9d:d4:7f:24:42:60:79:ab:22:2e:14:42:5b:28:c0:8b:
08:42:f3:bc:a3:d5:f8:6a:27:04:ba:03:90:d4:ee:03:3d:19:
73:26:b8:7e:71:e2:91:9e:cb:78:a0:11:b7:5e:cd:7a:d1:67:
13:a7:53:f4:af:ae:09:65:06:8f:49:db:a8:fd:d1:0d:f2:e1:
55:bd:18:f1:46:72:ff:13:93:80:de:7a:f8:32:cb:eb:d9:0b:
d1:3b:32:0d:03:02:dd:1c:bb:6c:3f:b5:9f:bd:31:9e:b0:aa:
df:a0:64:0d:c8:15:54:41:80:c6:30:26:07:e6:81:43:ce:4d:
84:c6:cf:1b:0a:70:b5:45:96:6f:1e:ee:b2:4b:c5:9e:49:7a:
af:ff:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net