Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FqYem0Mr-zFq8do_lI0zJNVWqpg.roa
File: FqYem0Mr-zFq8do_lI0zJNVWqpg.roa (raw, json)
Hash identifier: lel8BdNF4TPN/1Q6MV0RTmUiSF9raPbAWymEbjuW89k=
Subject key identifier: 16:A6:1E:9B:43:2B:FB:31:6A:F1:DA:3F:94:8D:33:24:D5:56:AA:98
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184DD1BFD638690C01AA3AE73C5178FC319
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FqYem0Mr-zFq8do_lI0zJNVWqpg.roa
Signing time: Sun 04 Dec 2022 12:28:29 +0000
ROA not before: Sun 04 Dec 2022 12:28:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200993
IP address blocks: 2a06:a005:1d52::/48 maxlen: 48
2a06:a005:1160::/48 maxlen: 48
2a06:a005:855::/48 maxlen: 48
2a06:a005:1d53::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:1b:fd:63:86:90:c0:1a:a3:ae:73:c5:17:8f:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 4 12:28:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16a61e9b432bfb316af1da3f948d3324d556aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:53:c0:49:31:5e:d2:45:1a:5d:4a:45:9f:
1c:3f:1b:9f:0e:d5:ba:39:fe:45:c9:dd:fa:bd:31:
4a:e7:7b:90:1f:95:3a:18:a7:86:f7:ec:df:0f:9d:
49:39:4b:f3:1f:db:aa:2d:83:c6:59:8a:14:2e:a7:
36:e2:9b:4a:b9:a2:76:30:71:f2:bc:44:14:a6:07:
b5:41:f2:87:a7:b0:25:04:f4:83:20:2c:6e:9d:a3:
b7:d9:c4:62:72:f4:66:6a:6e:85:68:42:51:82:b2:
64:a9:79:6c:dc:85:d7:31:22:2c:d8:cb:bb:08:54:
e6:87:92:39:e5:48:50:66:56:55:c7:9d:d2:ad:65:
2a:db:d1:be:12:8b:67:3b:fb:95:40:5a:51:83:9e:
16:c6:ba:68:af:62:73:92:be:12:d3:ce:10:d3:30:
1e:08:a3:56:b9:b4:5e:d7:5c:c4:52:2e:37:2d:26:
62:38:30:68:f3:15:1e:b8:3e:9e:8f:3e:65:1b:81:
bd:d0:75:ae:92:aa:0e:22:8f:d2:f7:54:93:17:eb:
a4:c9:07:8c:c0:eb:dc:ca:3c:94:7b:5d:8a:17:62:
fe:ac:e7:26:81:05:3d:5d:95:ae:26:5e:0a:17:65:
e8:9b:40:fa:1a:50:7d:d0:57:f9:83:8a:d5:d9:b0:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:1E:9B:43:2B:FB:31:6A:F1:DA:3F:94:8D:33:24:D5:56:AA:98
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FqYem0Mr-zFq8do_lI0zJNVWqpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:855::/48
2a06:a005:1160::/48
2a06:a005:1d52::/47
Signature Algorithm: sha256WithRSAEncryption
47:00:32:e7:28:92:a9:fc:ee:ab:67:18:6b:c6:f8:1a:bd:85:
54:5b:89:0e:8b:94:4f:6e:96:83:7c:44:df:c3:c9:ad:33:00:
23:f9:1e:70:3a:97:c3:f9:2a:b7:ba:b8:85:34:c0:45:5c:dc:
cc:ab:6d:34:ab:ad:3f:79:93:b1:8c:ac:08:d7:1a:88:61:47:
ac:4b:96:8e:26:7f:3e:c0:b5:73:d3:6d:d2:72:4c:ac:e6:a5:
18:21:c0:aa:99:d9:12:4a:d6:c7:cc:fb:84:f7:67:74:23:88:
fe:03:16:de:f0:cc:d4:f2:0a:08:48:75:80:ca:9c:3e:d4:38:
5c:69:50:b8:84:61:66:02:9f:e4:cc:85:ae:dd:9c:7b:39:7a:
94:4f:41:be:0a:42:f9:44:76:2a:43:90:c4:ed:df:dc:27:d3:
99:f0:e6:ff:a0:e2:ac:b4:10:10:7f:ca:6d:2e:03:af:0b:17:
58:e8:1d:78:38:3d:5f:50:11:3b:54:71:58:f3:fd:51:8a:55:
1b:46:82:51:4e:e6:63:d1:8d:33:52:18:e1:89:d6:ae:94:a4:
e1:82:eb:0f:50:ce:bb:c5:0a:0b:9d:0e:f6:3a:17:c7:1d:7f:
3a:17:76:c0:ae:fe:83:d0:bf:32:1b:44:ca:5e:00:49:01:f2:
30:a1:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net