
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa
File: ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa (raw, json)
Hash identifier: +6bXpGbvtseCXc9TQbxiIkbcwW6MuHoifJkdaz+rLK0=
Subject key identifier: 39:14:43:D5:9A:2D:69:91:E0:8B:8D:D9:02:FA:4D:80:E6:01:49:B7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EE8D81AE2CD62BB9D32C191750D1DF86
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa
Signing time: Wed 07 Dec 2022 21:46:01 +0000
ROA not before: Wed 07 Dec 2022 21:46:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200775
IP address blocks: 2a0a:6040:c200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8d:81:ae:2c:d6:2b:b9:d3:2c:19:17:50:d1:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 21:46:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=391443d59a2d6991e08b8dd902fa4d80e60149b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:d2:e6:f5:0c:57:ff:b5:04:62:12:e7:fc:
93:e2:48:76:9c:b3:f6:66:26:82:0f:c4:96:20:3d:
f2:7b:cb:36:b1:c4:f4:bf:38:9b:9e:38:f6:de:c3:
a7:16:04:e9:4c:f2:e5:32:94:f4:f6:8b:6c:62:41:
77:3d:74:56:f1:aa:dc:9a:5b:ab:f8:67:65:eb:8e:
49:b8:dc:8f:74:0c:36:22:73:3e:66:c0:36:be:b8:
d2:9e:bb:39:c1:1a:a8:3a:0f:67:97:02:4a:c4:3f:
07:76:5d:32:32:ff:71:df:86:8b:62:fb:e7:40:a5:
b8:40:de:a2:2f:4a:d2:be:57:c6:fa:4c:5c:d1:04:
53:68:b2:b2:f6:8f:73:fe:c3:14:f2:0d:93:7c:bc:
82:76:c0:f0:95:5c:b6:7c:32:47:db:88:1b:5f:3a:
b5:c7:0e:40:cf:cd:b4:c4:57:62:0c:31:0e:c4:c8:
b4:90:5c:c7:63:33:60:e0:78:c8:3a:f1:9b:e7:52:
59:1f:be:da:48:0e:87:d1:a9:83:73:53:ee:d4:74:
e6:89:85:a4:5e:25:cb:c5:db:b9:8d:47:18:2e:cb:
65:85:92:55:19:0c:57:c1:0a:ee:58:90:78:96:20:
f9:04:3a:26:23:dc:1c:28:02:eb:94:b3:07:17:ef:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:43:D5:9A:2D:69:91:E0:8B:8D:D9:02:FA:4D:80:E6:01:49:B7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c200::/40
Signature Algorithm: sha256WithRSAEncryption
3a:c5:6c:bf:0b:12:f6:eb:b7:ff:70:0c:13:d8:e0:42:aa:11:
c6:e3:a7:11:5e:a7:10:50:6e:06:a9:80:fe:1b:ee:d5:60:d6:
cb:c6:ac:f7:42:f8:b8:a7:2b:e8:1c:7b:ef:c2:b2:b0:77:d2:
65:80:81:e4:aa:d1:03:20:98:2c:66:81:7c:17:a4:6c:23:e5:
10:d3:ad:b1:9f:fa:65:8f:b8:46:80:42:59:9e:97:35:2b:3a:
ef:e3:20:dd:3e:50:b8:74:1d:0e:f5:35:6a:95:ce:cc:fc:93:
f4:94:54:3f:89:e1:44:bf:dc:77:c0:24:03:b9:04:64:7f:b9:
31:66:25:5e:a0:78:0c:27:a3:ec:26:5d:90:f8:d9:bb:fc:90:
d3:00:70:30:9b:d6:ea:af:0c:a8:e6:51:d5:fe:68:c9:52:13:
18:b7:83:51:77:d3:7d:4d:75:fb:7b:56:93:05:24:c5:b6:99:
fe:83:5d:e2:99:a4:a3:09:5a:21:d3:f4:7e:3a:06:73:d0:65:
d0:8d:b4:14:88:3d:6c:bf:7c:ab:e8:6e:4c:8c:7b:02:e8:59:
91:79:f6:06:f4:45:6a:53:9c:ed:6b:a5:35:e8:32:52:e1:64:
b7:59:b2:b7:9a:b4:56:90:d8:22:c2:31:93:d6:3d:67:d8:34:
65:84:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net