Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NMMbMiX8a6xNJ_c9ZFVokkcjMWY.roa
File: NMMbMiX8a6xNJ_c9ZFVokkcjMWY.roa (raw, json)
Hash identifier: 73UiGYv9XeOvxB/Ov5d34RDG2Wb8RmIjoo8HBKYSQzo=
Subject key identifier: 34:C3:1B:32:25:FC:6B:AC:4D:27:F7:3D:64:55:68:92:47:23:31:66
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01844023132F1AE07539012E513E091CD514
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NMMbMiX8a6xNJ_c9ZFVokkcjMWY.roa
Signing time: Fri 04 Nov 2022 00:55:51 +0000
ROA not before: Fri 04 Nov 2022 00:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204375
IP address blocks: 2a06:a005:2270::/44 maxlen: 48
2a06:a005:5a0::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:40:23:13:2f:1a:e0:75:39:01:2e:51:3e:09:1c:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 4 00:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34c31b3225fc6bac4d27f73d6455689247233166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:7c:e6:62:7a:75:df:0c:b9:01:eb:4c:39:
c0:7b:22:ec:f4:14:b9:f9:e4:62:86:6d:51:e9:86:
22:0d:3a:5b:fa:9c:eb:ef:18:88:79:09:59:fd:85:
f5:a2:05:8e:c1:45:81:73:90:30:ab:59:34:0b:43:
c7:e4:34:62:8c:96:a8:8f:10:57:13:80:b1:f7:6d:
46:fe:f2:7e:78:3f:17:8f:9e:6d:51:5f:15:84:d9:
e6:f3:af:90:3b:50:58:bd:41:dd:9c:16:3c:ae:fd:
6a:91:69:ab:2f:74:80:44:f0:e3:ee:d4:30:bb:22:
59:8d:8f:17:81:d1:60:cd:1e:f2:d5:34:64:75:35:
14:c0:75:80:f9:fa:a2:cf:9e:08:85:67:96:5d:8f:
bd:8f:09:65:af:56:9c:99:f1:8f:b1:41:48:9e:3e:
28:87:65:30:d4:6d:51:d7:4e:ab:be:50:e9:d1:85:
91:7a:34:2c:57:f7:9a:3e:37:c0:a7:52:f4:68:dd:
78:e5:5e:e7:89:69:f1:36:27:11:f3:a0:45:eb:9f:
51:78:e8:dc:16:99:0f:44:5f:f2:70:34:c4:5a:6a:
fc:60:27:03:13:06:6e:ed:7b:9f:2c:3f:88:a2:ee:
3b:27:1c:45:73:b0:86:43:ba:3e:83:a3:0b:1c:dc:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:1B:32:25:FC:6B:AC:4D:27:F7:3D:64:55:68:92:47:23:31:66
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NMMbMiX8a6xNJ_c9ZFVokkcjMWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a0::/48
2a06:a005:2270::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
5b:4c:85:f2:25:f5:c5:46:2f:bc:15:87:df:76:97:2e:ba:47:
e0:bb:cd:90:39:58:5f:a4:37:88:9a:bd:82:61:e5:86:8f:11:
34:f7:cc:91:fb:f7:b8:e4:1b:4b:06:86:30:a8:9e:ad:b3:55:
69:9e:24:de:db:c8:2b:90:e8:62:81:08:48:7e:cd:be:fb:26:
5c:6c:e4:a5:18:2a:fd:f0:0c:ab:71:aa:90:8a:64:54:eb:58:
06:3c:42:3d:f5:d5:47:0f:3f:43:89:5b:fd:e3:e6:e2:19:87:
f0:7e:43:f9:82:7b:6b:57:86:ea:74:6e:ee:43:5c:3e:65:91:
f7:d2:82:1f:88:d1:d6:88:2c:35:12:23:57:d7:c5:ee:ea:ee:
75:50:84:25:38:b6:10:f7:67:17:3a:70:75:f9:f3:c7:e8:26:
26:61:6f:de:10:68:d0:64:cc:3e:43:07:c8:34:89:73:41:1e:
75:a3:9a:89:10:5c:17:12:9f:19:a3:52:f8:a6:c8:19:20:54:
f2:57:9d:db:34:6f:61:2c:8e:d6:d2:30:b2:b3:5a:f8:43:fe:
af:8b:13:b5:3b:a3:f9:4f:c6:0a:ce:0c:ba:42:a3:47:55:ea:
0b:05:ad:4f:f4:ed:2b:32:4e:a1:89:f1:33:5d:74:4b:98:8d:
6e:81:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net