Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fdoicgbuc6JR5VfcPpIObUsGvIk.roa
File: Fdoicgbuc6JR5VfcPpIObUsGvIk.roa (raw, json)
Hash identifier: +cYbMdtvqnShncrA+6x0UzmJDcYFmmmo7LOODUv16HU=
Subject key identifier: 15:DA:22:72:06:EE:73:A2:51:E5:57:DC:3E:92:0E:6D:4B:06:BC:89
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01820501A75CD2043732B271D091BA90DEBA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fdoicgbuc6JR5VfcPpIObUsGvIk.roa
Signing time: Sat 16 Jul 2022 03:16:10 +0000
ROA not before: Sat 16 Jul 2022 03:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210667
IP address blocks: 2a06:a005:1250::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:2de::/48 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:01:a7:5c:d2:04:37:32:b2:71:d0:91:ba:90:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 16 03:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15da227206ee73a251e557dc3e920e6d4b06bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:2a:6c:7e:71:e1:81:99:ec:67:12:2b:72:
68:55:a1:3d:eb:f9:2a:33:3a:6d:9f:4b:69:33:c2:
80:e0:63:60:c3:ad:a6:78:46:f6:c4:3d:75:f5:78:
77:5e:3c:50:b6:28:14:de:ee:33:46:bb:6a:56:32:
f7:ce:4d:0f:89:a5:b9:62:c7:ca:8d:b8:ea:e2:08:
bd:c6:63:b7:ad:91:a3:a6:21:b3:c9:1a:a8:1d:30:
6f:06:ef:a3:bd:d9:e5:8e:df:fc:e6:89:43:c4:6c:
ae:44:f1:44:d3:26:48:87:23:ae:e3:2c:9c:08:bc:
ee:4d:be:9f:01:a4:fe:1a:61:58:88:27:6e:af:7a:
41:b2:53:f8:e0:33:45:a2:dc:cf:55:fe:ca:bc:c9:
d1:92:67:32:ff:09:9f:d8:0f:ee:d7:ff:8b:28:25:
50:12:30:fd:95:0f:06:87:aa:7d:ac:11:11:51:a3:
e3:bf:f6:0c:34:4c:b3:8b:52:d7:6b:6c:2a:dd:b3:
07:32:b7:c8:64:03:80:83:52:d5:1c:7c:9b:ee:e7:
97:1b:d9:65:01:16:d4:9e:b1:53:20:df:3a:fd:fe:
fd:f9:63:f2:4f:80:ea:6a:03:42:94:d9:63:c5:07:
f7:3a:d4:61:46:40:4f:d1:45:94:23:8c:27:bb:6e:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:22:72:06:EE:73:A2:51:E5:57:DC:3E:92:0E:6D:4B:06:BC:89
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Fdoicgbuc6JR5VfcPpIObUsGvIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:2de::/48
2a06:a005:ad0::/44
2a06:a005:1250::/44
Signature Algorithm: sha256WithRSAEncryption
28:1d:1c:44:4c:2a:fe:e2:a2:89:cf:ee:3e:15:0d:4b:e8:cf:
6c:f4:49:e4:a3:4c:dd:26:57:e9:e4:18:8b:9c:4e:0e:b0:c8:
9d:53:1a:89:ca:e5:99:37:0a:b9:a4:88:43:59:74:1e:dc:69:
90:79:c6:b3:27:cc:0e:93:75:0e:aa:d0:2c:5f:28:cf:ff:f8:
9d:7f:54:12:60:98:a8:74:00:0d:cf:e5:90:38:00:68:a1:ce:
d2:44:bc:ce:20:f3:6a:c4:e5:6f:b0:8b:23:b8:1b:ff:49:c9:
e4:44:18:7a:3b:51:ad:ff:cc:90:e9:2a:84:f3:ba:69:09:0f:
92:90:a3:74:a4:8e:ae:44:f7:c6:39:5e:6a:36:a6:5f:cf:e4:
5e:23:2d:60:5c:9d:74:74:13:49:01:98:e5:aa:15:00:78:fc:
9e:ef:0b:5f:09:c0:95:b5:39:bf:b7:2c:4c:fe:fe:ef:3a:18:
95:36:f2:37:39:d2:d4:00:17:81:51:78:7e:8b:97:2f:19:45:
0f:cf:37:d2:51:70:55:82:47:7d:f7:23:7e:d0:b3:18:4b:86:
97:f9:46:5c:6b:d0:40:54:08:32:b5:ca:d3:48:fd:42:16:a1:
38:37:1b:6f:f3:97:ee:f5:0a:4d:f9:b9:f6:87:52:61:0b:17:
38:38:49:45
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYIFAadc0gQ3MrJx0JG6kN66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE2MDMxNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRhMjI3MjA2ZWU3M2EyNTFlNTU3ZGMzZTkyMGU2ZDRiMDZiYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOcqbH5x4YGZ7GcSK3JoVaE96/kq
Mzptn0tpM8KA4GNgw62meEb2xD119Xh3XjxQtigU3u4zRrtqVjL3zk0PiaW5YsfK
jbjq4gi9xmO3rZGjpiGzyRqoHTBvBu+jvdnljt/85olDxGyuRPFE0yZIhyOu4yyc
CLzuTb6fAaT+GmFYiCdur3pBslP44DNFotzPVf7KvMnRkmcy/wmf2A/u1/+LKCVQ
EjD9lQ8Gh6p9rBERUaPjv/YMNEyzi1LXa2wq3bMHMrfIZAOAg1LVHHyb7ueXG9ll
ARbUnrFTIN86/f79+WPyT4DqagNClNljxQf3OtRhRkBP0UWUI4wnu24ZmwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBXaInIG7nOiUeVX3D6SDm1LBryJMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvRmRvaWNnYnVjNkpSNVZmY1BwSU9iVXNHdklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgagBQLT
AwcAKgagBQLeAwcEKgagBQrQAwcEKgagBRJQMA0GCSqGSIb3DQEBCwUAA4IBAQAo
HRxETCr+4qKJz+4+FQ1L6M9s9Enko0zdJlfp5BiLnE4OsMidUxqJyuWZNwq5pIhD
WXQe3GmQecazJ8wOk3UOqtAsXyjP//idf1QSYJiodAANz+WQOABooc7SRLzOIPNq
xOVvsIsjuBv/ScnkRBh6O1Gt/8yQ6SqE87ppCQ+SkKN0pI6uRPfGOV5qNqZfz+Re
Iy1gXJ10dBNJAZjlqhUAePye7wtfCcCVtTm/tyxM/v7vOhiVNvI3OdLUABeBUXh+
i5cvGUUPzzfSUXBVgkd99yN+0LMYS4aX+UZca9BAVAgytcrTSP1CFqE4Nxtv85fu
9QpN+bn2h1JhCxc4OElF
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net