Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VbqNezYPdYNUBk_5vexyBs8YDNo.roa
File: VbqNezYPdYNUBk_5vexyBs8YDNo.roa (raw, json)
Hash identifier: PhDvhaqjG/7Je3c/4J2d86qiwJGVNHWgsFleBN7om34=
Subject key identifier: 55:BA:8D:7B:36:0F:75:83:54:06:4F:F9:BD:EC:72:06:CF:18:0C:DA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19D8E38B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VbqNezYPdYNUBk_5vexyBs8YDNo.roa
Signing time: Sun 15 May 2022 17:42:40 +0000
ROA not before: Sun 15 May 2022 17:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207941
IP address blocks: 2a06:a000:150::/44 maxlen: 48
2a06:a005:b0::/44 maxlen: 48
2a06:a005:9b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433644427 (0x19d8e38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 15 17:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55ba8d7b360f758354064ff9bdec7206cf180cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:e3:e1:a0:5e:8d:04:1e:40:c7:2f:e0:08:
57:06:af:64:7d:d7:bb:76:9c:63:08:d9:68:44:6e:
40:ba:e8:34:c2:6b:b3:e9:e6:c6:47:bc:db:09:a6:
b8:00:21:50:ff:01:c3:6e:66:19:35:9c:0d:20:7b:
db:c4:63:63:e4:fe:93:52:ed:49:ff:8e:be:00:48:
44:a1:09:18:cd:53:d5:e2:e2:a0:77:00:0a:64:dc:
a3:8b:4b:b1:4a:3f:21:67:a4:e9:e7:8d:73:ce:1f:
0a:4e:ed:d9:85:5e:cd:4b:ab:db:fa:98:99:39:dd:
ba:94:9b:94:65:ac:69:72:ef:c5:fd:6f:e0:9e:e5:
ae:49:90:2b:1e:55:a0:28:6a:ef:7f:bd:cb:0b:fb:
8f:a2:b9:43:18:43:23:79:12:56:a9:2e:ae:82:a0:
23:38:ba:53:64:aa:e2:08:e4:e7:c3:95:2c:2f:24:
8e:a8:40:12:ee:41:4f:e9:59:53:0b:5f:48:04:21:
b4:40:d7:c6:4b:52:6e:9e:40:91:56:cb:5a:d7:f6:
29:e2:ee:56:43:7d:6c:46:0b:7a:0c:cb:9d:2b:47:
b7:9f:03:49:b3:eb:62:e1:eb:f4:a2:7a:e2:7c:dd:
b9:f1:61:21:db:84:41:b6:2e:23:97:c4:ba:ea:ef:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:8D:7B:36:0F:75:83:54:06:4F:F9:BD:EC:72:06:CF:18:0C:DA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VbqNezYPdYNUBk_5vexyBs8YDNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:150::/44
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
2a06:a005:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
12:46:e1:59:39:6f:c7:46:a8:59:d9:52:32:a7:32:9a:46:0d:
76:f1:2d:67:c1:98:5d:b1:af:52:e4:4e:94:c4:6b:c1:2a:31:
b5:1e:1a:13:88:c1:fd:c4:e1:f1:06:e1:ed:4f:74:e8:de:f5:
56:7a:ea:d6:e5:54:d0:71:55:bd:8b:ae:22:b3:22:09:7b:6a:
35:b1:ea:0a:6e:d1:4f:80:d9:3b:43:65:3b:a2:d4:95:50:f5:
cc:69:c9:5f:7b:49:9a:c5:03:12:6b:4c:48:27:43:cb:a0:0e:
08:61:c2:3d:2f:eb:4e:6f:39:0f:d2:eb:eb:c5:83:e5:61:03:
c9:cc:4e:d5:9e:dc:2f:0e:9e:73:83:cf:d9:54:54:86:69:6e:
59:38:f5:ea:eb:92:e1:ee:02:e2:90:d0:00:7c:d4:9d:81:ee:
12:75:2f:1d:6a:a0:be:8a:79:53:2b:51:49:ea:a3:f0:ca:ee:
b1:e1:9b:88:ae:28:0f:3f:b4:da:86:58:a7:da:71:0c:7a:65:
0a:f3:5a:e7:77:7e:69:38:44:f6:be:a1:94:1f:0f:b5:dc:64:
34:d2:83:cd:57:37:20:24:93:93:1e:ca:a2:61:55:bc:76:27:
11:8e:e8:c6:f3:9c:e7:21:78:e5:84:bb:64:88:bf:72:28:83:
15:8c:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net