Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EUiSGtPcmnxzkpcYLaZzX5SUkAQ.roa
File: EUiSGtPcmnxzkpcYLaZzX5SUkAQ.roa (raw, json)
Hash identifier: mHVVU6tbm+ZgCQwIqKg2h7ITSAgRrYGrEE9KAjCNpm0=
Subject key identifier: 11:48:92:1A:D3:DC:9A:7C:73:92:97:18:2D:A6:73:5F:94:94:90:04
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A789114
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EUiSGtPcmnxzkpcYLaZzX5SUkAQ.roa
Signing time: Wed 01 Jun 2022 13:02:20 +0000
ROA not before: Wed 01 Jun 2022 13:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200897
IP address blocks: 2a06:a005:5b9::/48 maxlen: 48
2a05:dfc7:3300::/43 maxlen: 48
2a05:dfc7:3000::/43 maxlen: 48
2a05:dfc7:2900::/43 maxlen: 48
2a05:dfc7:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444109076 (0x1a789114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 1 13:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1148921ad3dc9a7c739297182da6735f94949004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:f3:e6:1c:c5:e0:5a:f0:e7:12:00:d9:9d:
e7:4d:08:05:7f:0a:23:74:4a:a4:c7:77:f0:0b:2f:
46:e0:a8:cc:6c:46:59:6d:f7:c7:cd:ee:4b:12:e3:
ec:ef:1a:f8:d2:c5:4b:54:7c:06:3f:d5:82:dd:5b:
ba:c2:48:ef:95:84:2d:12:f7:3b:04:c9:d8:96:44:
7f:50:5d:e7:1c:32:f8:bf:be:e1:40:5f:3d:60:07:
d7:cf:17:4f:5d:79:9d:8a:d1:bf:e3:2c:5e:1a:95:
6e:0f:b2:72:4f:66:c7:e7:8d:f0:21:6c:94:10:ff:
bc:e6:8e:56:af:98:87:12:a3:21:20:d3:94:58:95:
24:15:d1:d4:08:67:ac:a6:d5:38:f0:f0:55:26:f9:
5b:ce:97:06:fd:6a:0b:5c:c8:ff:7c:a8:b9:26:2f:
e7:5f:9f:1a:cd:4b:3d:87:7a:0b:e5:b2:89:2c:5d:
4c:31:94:ea:62:84:98:3a:96:d4:1f:3c:4c:21:ee:
5e:61:56:e3:41:4a:21:9f:f6:8b:d9:ff:71:1c:79:
05:0f:8d:fc:f8:ca:e9:0a:38:96:35:05:70:02:45:
0f:8c:92:62:f6:c2:59:ab:30:70:04:4b:d5:ba:6c:
ec:22:00:41:30:33:5c:02:7d:60:73:f2:2b:d0:fc:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:48:92:1A:D3:DC:9A:7C:73:92:97:18:2D:A6:73:5F:94:94:90:04
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EUiSGtPcmnxzkpcYLaZzX5SUkAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:8::/48
2a05:dfc7:2900::/43
2a05:dfc7:3000::/43
2a05:dfc7:3300::/43
2a06:a005:5b9::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ec:5f:8c:cd:db:06:1b:6c:ac:e0:8b:b3:45:4d:6c:32:20:
88:fd:14:bd:15:a5:f5:d4:3b:69:53:02:1c:df:bf:2a:83:04:
98:aa:7c:43:95:23:c3:71:20:43:8b:cf:50:2f:0d:a3:e6:ed:
5d:6d:69:ad:09:0c:76:18:2d:f8:42:80:0e:e0:22:d0:8b:c2:
79:bf:95:4c:07:f2:85:7c:c1:32:dd:f9:66:b7:9f:c6:c4:fb:
76:3d:85:1a:b1:1e:14:cc:cc:a1:6e:9d:fd:25:56:11:da:22:
d1:75:74:1c:b0:01:4b:18:0d:07:18:33:5a:dc:b9:df:46:36:
86:9e:bf:fb:c3:c6:09:2a:02:6f:96:c3:46:8f:f2:d5:89:29:
80:3b:1e:51:56:17:99:d5:99:d5:9e:a1:78:11:86:65:e0:2a:
67:68:a2:2c:a4:29:78:80:62:e8:12:7b:d9:8d:e8:a8:80:b2:
47:51:88:a7:5e:b5:59:b8:47:80:f8:5a:9e:c2:18:f2:d3:4f:
56:69:ef:da:1d:28:dc:64:fa:35:ff:16:ba:55:63:7a:0e:44:
50:0f:2f:0b:ea:4c:ad:b6:9d:66:f4:40:bf:b9:79:da:c0:c7:
33:be:d3:98:44:ff:ad:d9:6f:68:de:d5:cb:6f:15:45:3c:e8:
cf:c8:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net