Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVmBcWuu5HbU02q4J9iKXS-xODA.roa
File: YVmBcWuu5HbU02q4J9iKXS-xODA.roa (raw, json)
Hash identifier: 760ocwA3SM8pCDI49NNcWxXI4BsZqrCar2Hs+kIKepM=
Subject key identifier: 61:59:81:71:6B:AE:E4:76:D4:D3:6A:B8:27:D8:8A:5D:2F:B1:38:30
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183A081878372E0E2FD425BDA1588400D93
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVmBcWuu5HbU02q4J9iKXS-xODA.roa
Signing time: Tue 04 Oct 2022 00:59:46 +0000
ROA not before: Tue 04 Oct 2022 00:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:2dc::/48 maxlen: 48
2a06:a005:5a9::/48 maxlen: 48
2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a0:81:87:83:72:e0:e2:fd:42:5b:da:15:88:40:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 4 00:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=615981716baee476d4d36ab827d88a5d2fb13830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:f6:47:45:f9:42:df:b5:e3:04:f9:72:31:
8f:f3:37:23:a5:83:e2:e0:d0:f2:20:f0:8f:00:72:
a5:4f:aa:e6:b6:fc:27:1f:8b:d3:0e:2f:a2:ee:26:
66:ad:7d:c2:b3:13:44:55:9d:ca:6c:5d:26:88:71:
d0:3b:42:7b:62:a6:40:e8:9f:8b:97:c9:dc:70:bd:
c6:79:ef:a9:3b:1e:07:db:3a:e5:c3:2b:b9:fe:68:
fa:f5:c4:87:6e:33:72:2a:fb:03:8a:00:ae:c9:84:
26:32:dd:87:4a:a7:37:3f:5a:c9:a1:4a:b2:07:76:
3e:c1:01:46:d8:24:c0:1e:9c:7a:7d:86:b4:4e:06:
f0:89:93:fc:23:d6:8c:f0:fc:6a:08:35:5d:5e:a9:
72:28:30:c2:cf:68:af:9b:01:1b:d6:70:8e:85:b1:
c4:b6:e7:40:c8:0b:5d:02:88:3f:56:05:33:65:ce:
5f:87:3a:ff:4f:79:19:48:bc:55:d3:16:9f:f9:80:
df:43:92:1b:51:1e:28:7a:22:67:df:08:08:c1:00:
59:c9:e8:b7:42:0f:e4:2d:e9:09:06:19:03:49:21:
f9:5f:c4:f3:29:0c:3c:91:50:80:a8:f5:29:c7:f9:
2a:b4:84:ee:8a:db:7e:ba:4e:6d:97:f9:f3:68:a1:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:81:71:6B:AE:E4:76:D4:D3:6A:B8:27:D8:8A:5D:2F:B1:38:30
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVmBcWuu5HbU02q4J9iKXS-xODA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dc::/48
2a06:a005:5a2::/48
2a06:a005:5a9::/48
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
36:35:e6:15:6a:ba:31:b0:79:10:5e:1a:32:33:1d:28:f2:ea:
69:6d:8e:e6:4a:b1:4e:9e:d8:f4:68:4b:bf:65:9b:81:66:f0:
e7:0f:dc:e9:00:78:a2:6e:35:36:3e:7b:4a:2d:e1:41:b4:df:
35:3c:4e:fb:8c:68:30:a0:d6:5e:9f:12:b1:9c:58:fb:8a:6d:
5f:48:0c:3c:76:d5:c6:7f:b0:11:b6:4d:7d:57:72:6f:6d:c4:
c6:3e:5f:cd:3c:97:04:73:5a:d0:96:e7:0e:3c:22:d2:c9:92:
d8:27:d5:34:8c:6a:4c:4a:88:fd:cb:9e:1d:51:f2:75:cb:64:
60:27:cd:96:ec:dd:28:68:50:e6:06:47:5d:29:65:51:ec:d9:
a4:2a:70:c4:e1:87:3d:94:41:be:98:7b:ff:25:8b:67:99:75:
4d:a7:1b:a2:cf:f0:e8:61:f6:27:db:9f:1d:cd:c7:d8:99:75:
86:b6:48:66:06:af:48:3d:bb:34:5d:d2:c1:cb:e0:7f:48:5f:
7b:89:64:8a:f6:4a:e9:2d:1d:00:8b:98:a6:4d:88:a7:9a:8e:
46:fd:b9:89:c9:e8:e9:e0:b1:0d:3c:2c:3f:c6:76:30:d7:44:
67:a8:d4:9b:09:3c:89:c3:30:29:aa:61:b2:3a:e0:4d:41:63:
39:c7:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net