Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa
File: DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa (raw, json)
Hash identifier: XKZHjQBamNmN7orHYlz0xykHn4jHV6XNLn5o4C36S6A=
Subject key identifier: 0E:92:52:B0:E8:54:83:A1:4C:3F:35:46:3C:B6:C2:80:34:6E:45:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018229C35E18EFEA1E8B27C4A1D4AB1E1AF8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa
Signing time: Sat 23 Jul 2022 06:34:05 +0000
ROA not before: Sat 23 Jul 2022 06:34:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208679
IP address blocks: 2a06:a005:8c0::/44 maxlen: 48
2a06:a005:9a0::/44 maxlen: 48
2a06:a005:8d0::/44 maxlen: 48
2a06:a005:990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:c3:5e:18:ef:ea:1e:8b:27:c4:a1:d4:ab:1e:1a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 23 06:34:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e9252b0e85483a14c3f35463cb6c280346e45a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:b7:6c:41:36:e1:d9:2a:e6:d4:ab:fa:66:
19:93:4f:82:2e:9e:98:ba:6b:39:9a:94:13:c3:c9:
1e:b7:d9:6a:60:1a:d1:95:df:8a:4c:ab:33:0a:d2:
b0:69:b1:fd:9c:7c:d0:1e:43:4d:24:06:20:98:40:
f2:02:fc:2a:fd:26:00:7d:34:76:a9:17:a4:04:14:
01:f4:b9:32:e4:c4:e5:23:aa:b3:46:c4:44:b3:bb:
c8:5e:c4:56:c0:aa:e7:4e:8b:da:6f:88:cb:15:22:
67:70:0c:cc:b1:41:71:aa:46:2e:cf:f7:bb:26:cf:
f2:e1:a2:38:e5:bd:da:dd:8d:04:93:2c:7b:00:cc:
5b:9c:d5:ed:27:f5:56:73:7a:ee:f4:33:74:0b:73:
99:ad:e3:e6:cb:8b:eb:ce:d6:f4:84:69:aa:ec:c2:
74:64:1c:fb:ea:03:a0:70:cd:20:84:78:66:4b:9e:
9b:ba:d9:a4:c1:ed:ac:63:2e:67:48:75:e0:65:86:
c7:2f:fe:92:f4:20:12:2d:b2:30:01:52:f2:d8:46:
bf:4d:6f:29:95:66:f1:34:14:db:18:2c:66:38:27:
0d:6f:54:d5:4e:6e:37:31:52:1d:ff:6d:71:0c:33:
cb:d2:2b:1f:92:0c:ff:6b:bc:6a:8b:77:06:88:ab:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:92:52:B0:E8:54:83:A1:4C:3F:35:46:3C:B6:C2:80:34:6E:45:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/43
2a06:a005:990::-2a06:a005:9af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:e7:b9:3b:e5:d7:6b:3a:b5:df:6a:19:81:5a:1a:83:7a:c3:
0a:2f:5e:4a:a6:8d:2a:ec:e0:db:97:76:2f:b5:60:05:25:1a:
39:43:fd:54:a0:5a:5f:cf:41:9d:6a:fe:77:8d:c3:fa:01:7e:
43:3c:1f:a0:1d:8b:74:96:dc:f8:d0:8e:cd:49:4b:0c:96:d4:
b2:5f:6f:02:35:01:f8:43:8c:a9:b3:84:6a:75:c7:57:df:5f:
55:33:7d:1d:19:d1:19:e4:c4:22:03:f1:33:4d:12:0c:17:48:
8a:65:d5:c4:65:89:2f:ea:1d:d3:72:4d:46:76:b0:1c:05:ca:
53:ea:f5:a6:37:76:8b:fb:fb:6d:47:6f:b0:44:b4:fc:ce:78:
29:67:f3:b1:b2:ae:54:54:37:d6:e8:c6:cc:b7:6e:2e:29:58:
ce:1f:4c:3d:a8:bb:9d:02:4a:a8:cf:36:b3:3d:30:c7:28:2f:
93:5e:54:13:8e:03:c2:02:a7:c9:bb:73:67:47:85:8d:38:77:
1f:b9:07:a2:0e:3e:b8:59:fd:d7:cd:24:65:2f:5a:8e:cc:ca:
37:df:a4:1a:0e:72:d9:1d:22:a6:89:bd:1e:c4:f9:76:76:e4:
76:f4:34:f8:37:95:cc:81:9f:ed:bb:02:7f:e2:2f:a3:45:30:
6a:9b:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net