Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EDR0gX6-3PNqZcEPsZQhIVUO-xc.roa
File: EDR0gX6-3PNqZcEPsZQhIVUO-xc.roa (raw, json)
Hash identifier: fGUTp2BntceI3191o/kRfBkpMIu0wBdtAxP6W0v8KW8=
Subject key identifier: 10:34:74:81:7E:BE:DC:F3:6A:65:C1:0F:B1:94:21:21:55:0E:FB:17
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018305171B2B265595D03D67AA2043801D63
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EDR0gX6-3PNqZcEPsZQhIVUO-xc.roa
Signing time: Sat 03 Sep 2022 20:42:23 +0000
ROA not before: Sat 03 Sep 2022 20:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211405
IP address blocks: 2a06:a005:857::/48 maxlen: 48
2a06:a005:1920::/44 maxlen: 48
2a06:a005:1b50::/44 maxlen: 48
2a06:a005:1ae0::/44 maxlen: 48
2a06:a005:1ad0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:05:17:1b:2b:26:55:95:d0:3d:67:aa:20:43:80:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 3 20:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=103474817ebedcf36a65c10fb1942121550efb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:8b:8a:70:1a:3d:90:cf:e6:a2:14:85:5a:
9b:18:ab:7e:cb:28:18:e7:de:af:87:52:ff:ec:21:
9e:4c:63:00:2e:95:73:85:eb:bd:9a:1c:8d:20:f7:
b0:7d:08:3d:54:1f:3e:ca:9c:d5:e1:73:5e:b9:88:
10:51:5e:00:20:07:c4:05:db:8c:2c:29:d2:11:98:
53:42:e0:ae:a2:c0:d5:95:2f:76:73:b4:60:97:2c:
03:7c:ef:d7:0a:1a:f7:7c:c2:b6:9c:88:4d:9a:9c:
1c:61:13:25:98:80:d3:89:c1:8c:03:13:c8:2b:db:
fd:6d:1e:7e:c4:84:af:00:02:c8:be:50:c5:36:a3:
b0:2e:d8:e9:c7:a2:70:61:c3:ee:83:d5:a5:66:cf:
36:7f:16:7d:b4:7d:57:78:6b:9b:62:9e:d7:c2:ed:
70:99:45:85:80:5f:13:06:f7:52:2d:d1:38:d7:8b:
64:e2:5b:70:0a:65:8f:72:8f:fe:6e:a3:31:e7:90:
d5:f5:77:d1:1b:68:1e:cd:65:3a:f9:52:53:72:ba:
0d:8c:fc:52:12:b9:bd:4b:49:4b:d2:3c:d0:cc:1c:
87:23:15:b5:b9:37:94:f1:3c:6f:b1:1c:97:55:93:
43:64:ad:51:c8:02:a6:a1:b8:ce:22:84:19:6c:6b:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:74:81:7E:BE:DC:F3:6A:65:C1:0F:B1:94:21:21:55:0E:FB:17
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EDR0gX6-3PNqZcEPsZQhIVUO-xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:857::/48
2a06:a005:1920::/44
2a06:a005:1ad0::-2a06:a005:1aef:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b50::/44
Signature Algorithm: sha256WithRSAEncryption
4c:2c:81:b8:57:18:1c:c3:eb:30:f8:00:88:ec:54:fc:fe:82:
50:cb:6e:d9:c8:17:a1:9c:88:c6:8d:88:33:15:8e:97:05:6e:
e6:fe:37:24:ad:0c:34:7e:6f:97:bf:05:c0:01:d8:8f:11:1d:
13:99:13:9c:01:a4:38:0a:ce:1a:a4:f4:1b:6a:fc:f9:dd:d1:
36:7e:50:d2:45:94:a7:8b:d2:bf:aa:87:ca:4e:ec:7f:66:79:
f5:7f:32:7d:b5:50:7e:e8:d6:f0:c4:9e:43:aa:1f:61:c3:95:
58:b0:74:66:00:7e:a4:1b:02:35:7a:c1:1f:18:3c:94:75:17:
fd:b6:42:4c:b5:c4:fd:80:3c:f9:a1:99:83:ce:ba:79:fa:7c:
1f:e1:29:19:eb:52:d1:6c:61:89:6d:df:e6:97:9c:d3:f0:3b:
f6:6e:18:92:b6:39:c5:1a:fd:84:ba:b2:19:14:89:a2:ff:52:
18:36:0a:75:e4:b9:31:f5:a9:45:80:6a:3b:78:4d:eb:6e:7f:
a4:72:56:9b:03:92:02:34:d1:ed:db:ee:e0:44:40:c9:8c:18:
c4:b4:ec:eb:b0:76:dc:8b:65:a3:8b:29:d2:ca:80:1d:c9:f4:
63:17:e7:2f:62:58:d5:48:32:72:73:01:0b:2a:57:cd:bd:c1:
f0:e7:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net