Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa
File: SXp_qWITFA_EmhDDYXhoNm-niV8.roa (raw, json)
Hash identifier: 5z5/ZfmnnzjGNd7hv3HZ54cUpibkMYtWtznALWI1ajs=
Subject key identifier: 49:7A:7F:A9:62:13:14:0F:C4:9A:10:C3:61:78:68:36:6F:A7:89:5F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19A2202B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa
Signing time: Mon 09 May 2022 06:00:30 +0000
ROA not before: Mon 09 May 2022 06:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a06:a005:520::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430055467 (0x19a2202b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 9 06:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=497a7fa96213140fc49a10c3617868366fa7895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:ec:32:0a:0f:dc:b4:d2:1e:8d:de:cd:38:
b2:47:a0:89:dc:f4:c1:85:b2:3c:6e:29:de:8a:2f:
b2:8b:b0:a0:4f:9c:7c:4b:86:12:47:9b:6b:cb:36:
58:39:5a:d1:74:97:ac:97:77:ff:0d:31:95:5d:13:
70:0f:75:18:80:6d:5c:86:46:72:b7:eb:c4:45:7d:
0f:b5:e1:08:e8:5d:b5:d6:6a:b3:11:46:03:2e:1d:
22:b5:af:da:c4:40:a7:f3:f2:cb:6a:9b:f6:ef:6a:
0f:e4:99:5e:b3:38:cd:d1:32:9e:75:24:00:58:12:
d1:b3:d2:a3:63:20:3f:a1:b7:bd:36:10:e5:6a:56:
5b:ad:00:ae:3f:5e:a7:8a:94:83:5f:9f:41:0b:e9:
c8:d8:d6:a1:8c:c3:6a:59:b5:65:0c:20:52:2b:e6:
7a:2b:c8:53:0f:d2:6d:02:4f:00:a3:a9:37:db:0f:
15:72:ff:16:fc:1d:37:58:b0:24:3a:d9:56:4c:7e:
ca:4a:d4:26:f1:0f:db:a2:0c:16:b2:a8:fa:b7:0c:
5d:b7:9f:f8:fe:1d:a3:f5:0a:46:3e:b5:04:82:67:
64:9d:1b:32:2f:af:47:b3:d6:92:a7:3f:12:e4:34:
f2:78:06:49:3d:fa:2c:2e:38:87:da:98:ae:b1:d7:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:7F:A9:62:13:14:0F:C4:9A:10:C3:61:78:68:36:6F:A7:89:5F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
Signature Algorithm: sha256WithRSAEncryption
60:14:77:bd:3f:49:09:88:5f:cd:1a:cd:26:1c:6f:ba:15:7d:
f2:bf:94:8e:82:e1:f1:f1:c3:9d:92:cb:54:ec:98:66:20:be:
f1:09:b6:0f:c5:22:09:61:3c:54:ad:14:3e:cb:d2:8b:d2:38:
4e:aa:56:4e:b5:e9:29:a6:80:33:a9:ed:ee:92:57:4a:7f:15:
5e:60:d5:e0:d8:b3:e2:29:28:7d:16:56:37:05:f3:99:57:5f:
f5:4d:14:ee:b5:13:c2:a9:89:a5:da:92:d7:59:0a:72:8b:35:
a1:ff:62:a0:be:87:21:a3:0e:54:bc:ce:3a:28:a6:51:0c:80:
52:02:85:d0:b9:ef:39:b2:44:26:73:17:52:ac:79:cb:49:df:
d7:21:93:a5:92:6e:34:96:41:7d:a4:10:c6:0b:1d:17:59:f4:
3b:e8:6d:0c:06:ca:01:c4:bc:32:77:ad:28:da:90:6e:90:3e:
74:18:46:12:50:e6:aa:d1:f3:fd:cf:d3:9b:67:e9:4f:8d:5a:
94:20:9b:ae:8a:cc:73:3a:15:ee:93:0e:83:f3:c0:da:e3:c2:
a8:0e:d5:0e:b1:07:89:56:ff:60:1c:c5:8c:a5:b4:43:71:50:
32:d7:b5:5a:da:4f:13:08:49:f1:44:25:b7:0f:04:59:7c:22:
bf:d9:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net