Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QKM4dRGWnHJW2NxNWkoNDP63PRo.roa
File: QKM4dRGWnHJW2NxNWkoNDP63PRo.roa (raw, json)
Hash identifier: oDJvqpblvyAcHyCrK0jAFWPM/jJp/Ax9AztqcTI7nNI=
Subject key identifier: 40:A3:38:75:11:96:9C:72:56:D8:DC:4D:5A:4A:0D:0C:FE:B7:3D:1A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821A0F90B059A4242326EE233FD5F2A7E0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QKM4dRGWnHJW2NxNWkoNDP63PRo.roa
Signing time: Wed 20 Jul 2022 05:23:23 +0000
ROA not before: Wed 20 Jul 2022 05:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209310
IP address blocks: 2a06:a005:439::/48 maxlen: 48
2a06:a005:43a::/48 maxlen: 48
2a06:a005:450::/48 maxlen: 48
2a06:a005:438::/48 maxlen: 48
2a06:a005:43b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:0f:90:b0:59:a4:24:23:26:ee:23:3f:d5:f2:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 05:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40a3387511969c7256d8dc4d5a4a0d0cfeb73d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:bb:6c:ae:7d:95:a0:41:26:42:30:73:eb:
94:61:58:a3:a3:f9:38:ad:2b:0d:6b:40:f3:5a:4a:
5f:32:d1:b5:6f:26:89:e9:f3:2f:95:02:ae:a3:b5:
60:12:93:f5:e2:18:05:44:3a:c8:56:60:03:ea:35:
1a:e2:b9:18:db:e3:fc:d6:4f:65:f2:9e:e2:03:a9:
22:c4:19:9d:22:ba:61:c7:eb:f9:17:26:91:5b:3c:
cc:fd:96:95:1f:02:b9:a1:b8:db:e5:2e:93:00:1f:
cc:dd:60:dd:e9:e0:c0:b1:34:97:ff:80:95:ce:74:
87:ad:5d:ad:61:37:f8:67:ca:6c:15:33:9a:6e:f6:
28:ed:b0:ff:c0:7a:c2:b6:2e:e1:c6:d0:fb:8e:f4:
76:b8:ef:fe:5b:fa:a1:f1:c3:d2:64:9f:ab:57:a8:
dc:b4:20:4e:f7:0c:df:8f:b1:64:35:c7:c3:4f:48:
03:c5:81:bc:f5:2d:23:d6:b2:56:4c:22:d1:66:13:
e0:fa:2c:26:31:cc:86:22:a0:59:f5:29:97:27:c3:
99:76:76:c2:9d:f5:dd:73:7c:0b:7a:56:59:7e:1f:
9a:92:f5:e3:e6:bd:9f:8e:44:9e:ef:94:d3:5b:73:
45:05:a8:0b:05:59:1c:fa:9b:65:2a:43:fb:b6:56:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:38:75:11:96:9C:72:56:D8:DC:4D:5A:4A:0D:0C:FE:B7:3D:1A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QKM4dRGWnHJW2NxNWkoNDP63PRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:438::/46
2a06:a005:450::/48
Signature Algorithm: sha256WithRSAEncryption
93:64:fc:c2:5d:21:4d:48:ab:2c:3f:e9:2b:b6:16:b9:7f:a4:
d5:ec:20:f4:4c:fa:86:2d:66:c1:15:6c:e2:50:d2:98:20:47:
17:7e:00:71:b7:9f:1b:7f:63:27:3e:c2:4a:3c:5c:a5:60:05:
67:88:78:cc:b7:67:75:4b:1f:3e:1f:a9:2e:0a:f2:e7:d1:e6:
0a:e9:7e:de:19:f5:24:19:6d:11:40:7e:64:a6:39:30:63:8a:
e5:a1:76:ac:6c:59:23:3e:7a:f8:ef:39:86:6a:bd:a3:1b:c9:
e0:c3:fd:65:0c:cd:95:02:46:bb:1d:d8:fe:6e:f7:b2:27:de:
e7:45:14:dd:06:0c:d2:5e:06:b9:f4:ee:0e:ff:19:d2:5a:13:
de:38:a1:c5:b1:8c:f1:45:47:9c:b5:5c:60:b0:54:51:83:c0:
c8:63:12:89:99:76:c7:63:df:81:0e:19:cf:c1:ae:af:a6:49:
91:73:63:2f:fb:43:ba:9e:6e:02:63:70:96:52:4a:7a:0c:3e:
b4:29:cb:cc:74:33:d4:22:b5:5b:9c:6e:c4:6b:ee:bf:95:12:
ee:c2:f5:3e:de:0f:f3:68:33:0c:c5:ee:77:cc:3b:6d:5a:e1:
d6:0f:48:6c:1d:e7:1d:c1:81:ca:c8:5e:98:e9:7c:41:a1:9e:
e2:6c:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net