Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dlt5AvGdq0Ye8XuY7rM3hUD-fls.roa
File: Dlt5AvGdq0Ye8XuY7rM3hUD-fls.roa (raw, json)
Hash identifier: T8b7YMv7LWvQSKcxRrefsV44a6AnMzWrZGAIR6vyn50=
Subject key identifier: 0E:5B:79:02:F1:9D:AB:46:1E:F1:7B:98:EE:B3:37:85:40:FE:7E:5B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184453C9C6CADAB14CFEDEA27FA27F9C43B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dlt5AvGdq0Ye8XuY7rM3hUD-fls.roa
Signing time: Sat 05 Nov 2022 00:41:50 +0000
ROA not before: Sat 05 Nov 2022 00:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204375
IP address blocks: 2a06:a005:2270::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:5a0::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:45:3c:9c:6c:ad:ab:14:cf:ed:ea:27:fa:27:f9:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 5 00:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5b7902f19dab461ef17b98eeb3378540fe7e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:8e:78:65:87:63:a2:dd:02:ef:af:41:35:
02:fd:c3:c9:12:44:d5:28:e3:17:63:4f:31:1f:87:
07:be:61:7a:9e:0a:06:e9:ba:e8:88:66:25:fb:dc:
a6:4f:bc:0a:c3:ea:7a:2b:5b:db:ed:28:05:d3:b6:
3d:66:4f:20:3d:cb:76:3b:e0:e4:e0:06:5a:ec:bb:
5c:0c:03:1e:c1:40:c3:5b:3a:d9:af:80:59:19:1e:
ed:ed:4f:ee:77:a8:f4:4c:8e:b8:ae:c0:08:44:e2:
c1:e5:2e:5f:df:21:bd:86:ef:c5:74:f6:61:65:a3:
7f:c9:f3:95:64:38:ab:34:6d:8a:bd:5e:4e:a7:b2:
35:13:ca:e8:8d:3b:a5:c4:49:8a:b4:04:f0:3b:d3:
b3:5e:c9:f0:4e:70:bb:5e:5f:32:46:4a:a3:8e:cb:
ab:9f:c3:7e:d0:a5:56:d5:70:1d:ae:b7:e5:88:fd:
75:00:31:36:4b:30:79:40:34:93:15:06:87:f5:33:
2a:17:71:06:86:b0:09:06:e1:3e:52:7e:99:a4:37:
86:1f:73:70:8d:a7:1d:b8:db:f6:a0:be:68:65:b0:
85:8e:79:c4:93:5f:27:a9:2a:94:f8:04:69:b5:2f:
53:d7:0c:34:ba:f4:a4:91:99:e8:e8:2a:1f:2a:34:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:79:02:F1:9D:AB:46:1E:F1:7B:98:EE:B3:37:85:40:FE:7E:5B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dlt5AvGdq0Ye8XuY7rM3hUD-fls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:5a0::/48
2a06:a005:ad0::/44
2a06:a005:2270::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
7c:c7:eb:6c:c6:a0:4c:b6:64:a7:33:a5:8d:a1:1e:c6:67:a3:
93:f7:8d:6d:d0:4f:b8:db:16:a1:83:d0:a4:01:77:c9:d1:9c:
19:bf:bf:36:94:43:3b:fa:14:86:48:ee:4d:f1:16:fc:7c:c8:
1d:46:b8:42:de:94:90:e1:7a:bc:00:32:34:97:0c:4b:43:7a:
fd:8c:03:a3:1a:4e:80:17:93:a9:66:48:ab:99:9d:b0:c5:33:
4b:0b:9a:20:6f:b0:83:ff:ca:94:4f:e4:b9:7a:d5:7c:a1:62:
90:a9:27:a2:35:73:a5:17:f1:2c:a7:36:08:47:57:36:3d:32:
40:0e:34:e3:2b:24:0a:16:ae:51:6b:8c:3a:c4:56:ab:3d:64:
c5:f0:1d:ce:d1:f2:10:b0:fd:a2:27:88:6a:13:64:6f:61:1b:
4b:1d:2b:71:21:0e:33:53:b6:13:f8:b8:9e:ad:d1:42:5f:82:
f1:73:6e:f7:a3:9a:5c:b5:03:96:d6:81:6b:64:fb:fb:30:3f:
ce:90:e8:67:46:03:cd:14:33:95:be:6f:15:d4:8f:89:25:1e:
21:b3:3c:fc:53:9b:b3:a9:5e:86:3b:0b:e1:93:a5:a3:ef:9b:
fd:83:be:32:52:83:c1:1d:7c:d5:d8:63:6f:52:8a:6c:c1:60:
47:63:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net