Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RJYLa_1ynfqFRbNXeU4zUwrOfVI.roa
File: RJYLa_1ynfqFRbNXeU4zUwrOfVI.roa (raw, json)
Hash identifier: BiL84ewPPqih6znSjIiDRUdcoOaGhoLClbSTH9u97oU=
Subject key identifier: 44:96:0B:6B:FD:72:9D:FA:85:45:B3:57:79:4E:33:53:0A:CE:7D:52
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D30EB72A27B3002F044D5C78809B215B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RJYLa_1ynfqFRbNXeU4zUwrOfVI.roa
Signing time: Fri 02 Dec 2022 13:37:47 +0000
ROA not before: Fri 02 Dec 2022 13:37:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205848
IP address blocks: 2a06:a005:1271::/48 maxlen: 48
2a0a:6040:f500::/40 maxlen: 48
2a06:a005:cf0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:4200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:b7:2a:27:b3:00:2f:04:4d:5c:78:80:9b:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 2 13:37:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44960b6bfd729dfa8545b357794e33530ace7d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:93:75:37:b5:d6:17:87:9d:a8:c2:ef:23:
9e:f8:65:d2:6c:5c:ca:10:2e:f1:ae:80:df:af:a3:
a2:50:b7:89:48:b7:fa:90:1c:db:cf:1e:8d:7f:df:
ef:ad:a3:d1:ba:8d:e3:04:44:85:63:ac:22:aa:a3:
1b:7b:0e:32:26:43:38:a6:c3:08:46:fd:9b:ec:25:
83:ec:b7:09:eb:ef:42:33:65:b3:d2:08:77:0b:bc:
84:df:fc:a4:ca:47:3e:46:41:ac:8e:27:39:a3:25:
4a:be:29:07:4c:f8:fd:3b:cf:7d:28:18:43:c2:ef:
84:43:2a:87:a7:90:5d:3a:35:ae:ab:ae:ca:bc:18:
87:3d:1a:3c:ee:5e:0e:aa:63:b8:68:54:49:02:bd:
25:39:f4:b7:c1:36:cd:e0:96:54:28:5e:f6:e3:4d:
47:df:26:e7:d9:64:3c:0e:83:aa:71:68:8c:c0:37:
bb:9b:11:07:9a:27:fb:76:30:ba:2b:ef:f7:0c:42:
5e:19:25:3b:cd:be:f8:1d:68:08:1a:ac:e0:e5:9d:
0a:ac:7d:33:42:47:4f:30:85:40:c3:f3:c0:e0:4e:
78:27:1a:87:63:d7:8d:61:09:66:87:32:00:dd:fd:
18:81:55:4b:80:34:e3:94:95:c0:66:75:83:79:e8:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:0B:6B:FD:72:9D:FA:85:45:B3:57:79:4E:33:53:0A:CE:7D:52
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RJYLa_1ynfqFRbNXeU4zUwrOfVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:4200::/39
2a06:a005:cf0::/44
2a06:a005:1271::/48
2a07:54c2:b00b::/48
2a0a:6040:f500::/40
Signature Algorithm: sha256WithRSAEncryption
82:8e:d6:ac:df:12:21:17:12:ac:03:1e:01:28:dd:02:73:b7:
3a:90:92:fa:93:c9:7b:87:b9:49:d9:2f:8a:4f:e5:83:50:18:
c9:2e:f9:eb:a1:43:99:df:7a:9e:15:d9:d3:4b:21:ab:e0:47:
b6:25:66:8a:e0:3b:67:fb:74:d1:0c:83:0d:7a:32:23:1e:05:
7a:07:ce:74:4f:3c:45:dd:06:69:77:dd:63:d6:54:e2:95:54:
64:96:e4:6c:08:c9:8e:c6:ea:5c:7c:97:57:af:f8:29:5c:15:
5e:1f:90:81:98:57:06:d6:ba:1a:1e:44:3e:96:81:10:53:ac:
2c:9a:05:f1:bb:07:c8:d9:e7:62:73:0a:f8:ef:f6:0d:1d:6e:
d4:c3:4c:dc:93:83:83:ba:a7:20:f0:2a:f5:11:5d:74:f5:4f:
dc:a8:b1:e2:4e:5f:8b:b5:c4:da:d3:8b:84:3e:a9:8b:33:a4:
9d:bf:4e:90:a7:0f:03:8a:4b:36:8f:58:67:8a:b7:d0:36:e2:
78:b8:b5:ec:52:32:07:8d:90:57:96:36:51:45:29:7a:42:a0:
87:b9:80:e0:dc:f3:50:9b:ba:f4:7b:aa:c2:7a:f2:b3:b2:a4:
99:b5:4f:2a:b2:e8:1d:28:f5:46:dc:e5:dc:58:c2:6a:0b:73:
14:af:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net