Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa
File: W18xLd5BTqc44KJEHY_GLJ6wWuA.roa (raw, json)
Hash identifier: /Rbf3eo4PKoIwOyeZhHHRBkqa6n/fSimWfUL5oNRd9E=
Subject key identifier: 5B:5F:31:2D:DE:41:4E:A7:38:E0:A2:44:1D:8F:C6:2C:9E:B0:5A:E0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D8CA0859780BE71B008164A2B12B2A72
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa
Signing time: Sat 03 Dec 2022 16:20:29 +0000
ROA not before: Sat 03 Dec 2022 16:20:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204789
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:1de0::/44 maxlen: 48
2a06:a005:1df0::/44 maxlen: 48
2a06:a005:1dd0::/44 maxlen: 48
2a06:a005:1dc0::/44 maxlen: 48
2a06:1287:9000::/36 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:ca:08:59:78:0b:e7:1b:00:81:64:a2:b1:2b:2a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 3 16:20:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b5f312dde414ea738e0a2441d8fc62c9eb05ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:20:f6:a2:b2:21:0d:96:79:88:50:18:98:
0d:62:76:54:91:bb:81:34:5e:d1:21:04:e2:4d:d3:
e8:24:b6:1a:56:0b:7e:35:84:76:6c:59:10:2c:3a:
c0:66:73:33:62:0b:d2:eb:06:cf:07:f4:59:e7:f6:
0f:7d:a3:ce:84:6b:3a:fb:18:ca:e9:5d:c5:b6:fd:
99:c2:d8:e0:bf:dc:d4:77:25:e3:77:3d:82:21:d6:
78:8d:66:39:61:f6:83:1a:bc:e6:4d:ae:9a:19:10:
b7:d6:34:f9:ac:32:a3:d1:b1:b4:24:2a:c0:3b:40:
8b:01:ec:a6:41:98:d6:e4:0f:7e:88:52:95:24:3a:
6e:c5:18:7e:7c:7f:30:a7:e5:e5:5a:04:2b:70:70:
60:4c:15:f5:29:0c:aa:87:32:84:f5:a9:92:11:dd:
c3:5e:ee:f7:80:4e:0b:25:c3:19:4d:fc:73:b5:94:
65:6e:28:71:be:e7:f2:00:31:de:18:c2:9f:47:b5:
23:58:c7:4b:e6:1b:1e:e8:e5:25:f3:7f:fc:c4:5f:
93:e6:61:63:61:9b:1f:89:42:3e:cb:5a:a2:82:87:
6d:bf:42:5e:f1:05:f3:b2:f8:57:7e:e7:d9:3c:32:
29:d2:7b:6b:f0:65:07:a7:d0:7c:e0:9e:46:b2:88:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:31:2D:DE:41:4E:A7:38:E0:A2:44:1D:8F:C6:2C:9E:B0:5A:E0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:1287:9000::/36
2a06:a005:1db0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:e6:4e:76:d8:0a:02:d6:58:9f:1c:8d:92:ae:7b:d1:45:e4:
c7:c7:b1:13:cf:46:4b:53:26:f7:48:92:46:02:ca:03:e1:ce:
ad:4e:79:e4:a1:c9:2d:97:fe:5f:f0:5d:0b:98:2c:e2:c1:e6:
b8:23:f3:13:b2:3f:3c:48:70:c8:4e:f4:61:61:2c:89:5e:93:
a1:57:1b:53:34:0a:db:b2:4b:44:07:3c:00:60:1c:21:fa:c8:
8a:2f:df:94:04:26:0b:fd:71:0e:03:6a:59:94:d2:bc:41:3d:
b3:fa:81:48:c5:59:c1:67:01:bb:a3:e1:b5:78:e2:27:a5:0b:
ad:36:54:93:70:da:4c:bf:ae:12:fa:0b:73:52:80:2a:35:ed:
70:7a:32:26:a5:2d:d6:c8:c5:b9:18:03:c1:e7:bb:eb:35:79:
84:30:33:f5:70:9c:86:48:bf:ff:37:da:34:1f:ee:0d:8d:b8:
04:66:44:eb:21:e4:66:19:d0:f6:0e:0f:68:8c:d4:22:cc:45:
d7:4d:cf:62:b7:80:be:a6:f0:72:bf:bc:c3:60:40:da:47:5e:
5b:61:b2:75:b3:75:3b:14:6b:cc:e0:27:04:c3:18:1f:59:84:
49:87:a2:7a:d9:07:d9:ed:46:41:ad:01:87:0b:27:30:27:a0:
90:ac:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net