Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlkDqnGTIdCpP-3sQ1P1jTi_DQ4.roa
File: IlkDqnGTIdCpP-3sQ1P1jTi_DQ4.roa (raw, json)
Hash identifier: nZ41T2yMCdmRZsk+h+FAw9FisWKyd2NKIt1WFxntrQM=
Subject key identifier: 22:59:03:AA:71:93:21:D0:A9:3F:ED:EC:43:53:F5:8D:38:BF:0D:0E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CCB591CF1627F6CBF8923C8796F5299E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlkDqnGTIdCpP-3sQ1P1jTi_DQ4.roa
Signing time: Thu 01 Dec 2022 08:02:41 +0000
ROA not before: Thu 01 Dec 2022 08:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:b5:91:cf:16:27:f6:cb:f8:92:3c:87:96:f5:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 08:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=225903aa719321d0a93fedec4353f58d38bf0d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:36:ba:e8:a4:72:fb:3d:f1:97:62:5b:32:
07:a0:79:7c:75:96:5e:e4:98:56:9b:e9:7a:42:9e:
82:1e:8e:16:bf:3e:eb:f2:0a:b4:9a:b6:76:6d:d3:
36:17:0f:f9:95:1f:37:94:3d:c7:98:14:54:70:59:
0c:c0:8f:79:c1:f7:1e:e2:39:68:6d:fb:fa:30:e8:
6d:e4:4a:48:cb:18:a6:a4:a8:e7:81:a8:20:f8:5f:
a0:13:2f:bf:87:0a:1e:63:59:02:e8:4e:df:8f:4f:
b2:c5:50:9c:58:d8:02:01:6e:1a:67:5a:a4:f9:c7:
b9:03:43:cd:f3:05:a6:5c:12:39:1e:8b:92:e0:02:
36:9e:ca:23:1a:a3:46:a5:61:6d:83:71:c5:22:a5:
47:b2:59:12:e1:0b:33:f0:51:51:03:15:e0:c2:e1:
cc:11:f3:7f:59:3a:57:56:a8:27:d1:50:38:16:41:
00:d0:97:d4:43:ec:de:b9:e5:23:f7:fa:77:e0:1d:
4e:ec:43:37:00:e1:58:c5:b2:be:92:c5:63:33:42:
15:f4:b7:45:c6:0d:93:77:45:df:0c:54:52:1b:ee:
09:0a:44:05:c0:4c:4c:57:7a:07:4d:47:8f:3c:92:
01:fb:e6:3f:3e:4b:0d:dc:e4:39:36:46:f4:f9:ee:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:03:AA:71:93:21:D0:A9:3F:ED:EC:43:53:F5:8D:38:BF:0D:0E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlkDqnGTIdCpP-3sQ1P1jTi_DQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:2480::/44
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
4e:9a:9d:3b:2d:7d:9c:41:1d:52:58:69:66:e6:58:f9:18:51:
c7:24:52:d9:2c:28:78:1e:52:90:04:e9:b5:85:16:71:6f:d2:
30:20:5a:54:65:e6:07:45:75:67:d0:d5:68:7e:10:88:66:86:
56:7a:49:0a:25:1b:fe:d0:11:2f:ab:5a:15:ea:98:39:21:77:
bd:40:87:8b:43:dd:8d:bc:ca:36:c8:15:a3:6c:6f:dd:9e:83:
d0:75:8a:2b:55:80:64:50:8a:44:16:8d:da:06:6c:fe:29:67:
f5:a8:73:5f:ce:aa:d9:8a:0e:a2:75:c6:56:6d:dd:81:3c:54:
cb:ef:1e:21:d3:6c:a3:7c:29:24:5a:94:1e:5a:67:ed:8c:7c:
dc:36:7c:92:23:38:58:84:b2:d4:43:46:aa:d1:24:b6:0c:c8:
49:01:f7:aa:0f:79:af:39:08:6c:db:52:0d:9e:00:a6:4b:69:
be:35:f0:7e:2d:b9:b3:82:f1:3e:b4:f1:ee:0f:b7:54:bd:c9:
6a:e0:b2:d9:bf:f2:4a:99:e6:5a:d1:de:8c:5d:88:98:dc:d6:
1d:01:a7:9b:4e:38:92:3f:36:9a:bf:7e:5c:c4:a7:8d:4e:81:
14:29:0f:2c:73:5d:8f:03:b5:0d:f8:15:40:66:18:21:3f:a5:
0d:bf:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net