Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xf9aYsSUnCeBN4RHCLYVB0NLoV0.roa
File: Xf9aYsSUnCeBN4RHCLYVB0NLoV0.roa (raw, json)
Hash identifier: cIw+2vSjLIhXM86Cbkxt6mlbIdUd4fIixAFuoIvrcAk=
Subject key identifier: 5D:FF:5A:62:C4:94:9C:27:81:37:84:47:08:B6:15:07:43:4B:A1:5D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19D337C3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xf9aYsSUnCeBN4RHCLYVB0NLoV0.roa
Signing time: Sun 15 May 2022 08:34:40 +0000
ROA not before: Sun 15 May 2022 08:34:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205092
IP address blocks: 2a06:a005:980::/44 maxlen: 48
2a06:a005:930::/44 maxlen: 48
2a06:a005:970::/44 maxlen: 48
2a06:a005:960::/44 maxlen: 48
2a06:a005:940::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433272771 (0x19d337c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 15 08:34:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dff5a62c4949c278137844708b61507434ba15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:b6:53:b2:65:45:01:80:d3:79:ec:91:77:
40:3b:e4:be:1e:72:d2:f8:c2:d5:2f:a1:ab:99:e2:
e3:76:00:58:71:1b:6d:98:56:36:11:c6:94:38:12:
08:57:a8:05:d7:00:d7:33:bc:cd:46:69:b9:c3:5e:
40:46:a1:e2:7b:cc:5a:dd:99:7c:6d:cb:01:8b:22:
9e:1f:41:c9:6b:a0:f2:53:87:35:63:c7:57:07:eb:
e8:f6:38:92:09:2e:a7:36:7e:3f:e1:24:2b:75:99:
d4:06:a3:31:49:69:88:73:d6:3f:34:6c:d8:7c:f3:
6c:bb:c1:44:b0:92:89:7c:a2:e2:b9:d8:df:43:5f:
ff:71:0b:ac:d9:cf:ad:31:c4:e2:44:c3:19:e1:53:
5c:87:3b:1a:bd:d3:8f:ce:70:f8:4e:2a:95:d2:86:
bf:c8:c6:2b:67:c4:8e:69:9f:f8:65:f2:46:94:89:
7e:72:70:1a:73:cd:13:18:24:44:e6:63:c4:a7:87:
05:5d:32:62:64:ae:ab:81:06:a8:83:98:4f:f0:a4:
91:75:b7:64:b9:e7:7b:5b:29:e2:1d:1a:ae:d1:39:
c2:43:8b:5d:f4:ab:43:c7:7b:bd:85:72:56:f4:b5:
c0:8f:e7:3d:53:eb:bf:8a:7a:dd:e9:3a:32:d8:6d:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FF:5A:62:C4:94:9C:27:81:37:84:47:08:B6:15:07:43:4B:A1:5D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xf9aYsSUnCeBN4RHCLYVB0NLoV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:42:24:6c:15:e3:36:b4:ae:53:ce:51:5f:74:6e:c1:dc:64:
02:b2:d2:fe:44:20:b5:b6:7f:d2:9c:0f:13:59:4e:21:1b:90:
8f:f8:18:4e:70:29:f8:69:70:0a:3f:8d:a5:81:6e:ea:78:3b:
2e:9d:8f:19:9e:b0:9c:53:4f:1f:ed:12:55:ba:84:68:ed:42:
36:c1:2b:07:12:bf:45:71:a0:d8:a0:68:5e:67:d5:0e:f2:99:
d5:a7:b0:b8:c6:4b:84:01:99:4a:8d:85:a7:a1:c8:c2:1a:f3:
03:ac:f8:22:4f:ca:91:df:d4:9f:12:01:74:b1:ce:51:27:cb:
86:98:1b:27:2d:26:69:c7:c4:c3:1d:7b:30:67:f6:e7:0e:0d:
26:46:5f:e0:ca:05:36:40:7e:50:25:71:6a:75:e9:61:69:11:
75:c4:5e:a1:48:16:5e:c2:04:47:b5:4e:ae:78:35:83:ac:5a:
d5:8d:fb:8a:dd:20:93:76:54:2d:38:37:77:f2:ae:49:b2:95:
44:cc:e0:5d:d8:d5:a3:3f:df:ca:a5:f8:67:e5:7f:6b:23:9d:
33:68:d6:04:64:55:f0:24:33:69:15:67:0f:aa:10:e6:59:90:
6a:04:07:2e:bf:65:65:6e:10:53:25:d5:f2:dd:24:40:23:b9:
69:ee:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net