Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa
File: ZDa7-zgwaHR9K7pmq5RZck0taFc.roa (raw, json)
Hash identifier: eVj8FB2LzAoY15c65qne+0OcTx+Xgv0XlXXNIfEwNfE=
Subject key identifier: 64:36:BB:FB:38:30:68:74:7D:2B:BA:66:AB:94:59:72:4D:2D:68:57
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CAF321F884CE372F509FC3A17371B8AA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa
Signing time: Wed 30 Nov 2022 23:50:42 +0000
ROA not before: Wed 30 Nov 2022 23:50:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202199
IP address blocks: 2a06:a005:1c7f::/48 maxlen: 48
2a06:a005:1640::/44 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a05:dfc7:5400::/39 maxlen: 48
2a05:dfc7:1700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:f3:21:f8:84:ce:37:2f:50:9f:c3:a1:73:71:b8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 23:50:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6436bbfb383068747d2bba66ab9459724d2d6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:dd:54:1c:d3:d7:8d:09:b2:15:7c:07:16:
ab:3a:bb:0d:f9:ab:4f:46:46:88:6f:8e:de:29:12:
3d:f3:15:f8:ca:25:aa:b2:43:58:1d:b4:6e:70:09:
ee:42:8d:c8:18:77:e8:9f:ad:0c:fe:ab:1e:96:4d:
7a:cd:ba:58:b9:8a:27:77:32:72:6f:e5:71:6b:a3:
d6:f0:15:92:4b:75:14:b5:cc:41:26:47:a9:9f:07:
3e:f9:c4:27:a6:fa:65:4d:db:47:e4:f1:60:a7:d7:
6d:b8:17:a6:bc:86:63:ed:96:7f:8d:ee:0d:b0:b6:
e3:81:5b:89:1f:f1:c8:be:11:04:73:60:e4:8e:6a:
c5:c9:61:71:ad:17:c8:25:03:f2:c3:66:c1:16:b5:
27:60:c7:cf:f3:6c:15:ce:2c:6d:b6:75:27:99:e3:
e6:79:5f:3b:d3:c1:75:a5:2b:da:de:db:3d:78:70:
21:0f:2d:75:ef:da:c7:88:57:ad:ab:dc:6f:00:f5:
82:b6:f3:2b:50:fe:b9:7d:96:5c:ec:e6:9a:75:70:
19:13:4a:ff:27:50:21:1a:5d:15:61:c3:02:56:94:
f5:25:e3:df:42:78:e4:d8:b7:e9:6e:54:52:bd:78:
75:84:a5:01:56:1b:9b:b0:8b:b6:5a:b2:ee:58:c3:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:BB:FB:38:30:68:74:7D:2B:BA:66:AB:94:59:72:4D:2D:68:57
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1700::/40
2a05:dfc7:5400::/39
2a06:a005:1505::/48
2a06:a005:1640::/44
2a06:a005:1c7f::/48
Signature Algorithm: sha256WithRSAEncryption
48:7c:8c:74:3b:72:71:f2:a1:cc:86:eb:30:7b:e0:72:31:51:
b6:9b:47:d5:d0:e8:51:89:19:d2:6e:56:1d:5e:a2:2b:79:d7:
44:2a:b7:7b:a2:47:3e:2d:ff:a4:12:65:f8:e9:94:37:0a:71:
20:c3:c9:52:3d:35:cf:b5:d9:e2:08:0d:01:77:48:a1:78:ca:
b2:c9:e0:4d:c4:38:84:b6:5c:33:18:ce:e0:48:15:e5:e8:9a:
56:80:2c:eb:f7:60:e0:e7:cc:84:4c:07:58:b8:a2:c7:e2:58:
0c:26:88:44:94:14:29:4f:a3:87:3b:cf:08:9a:06:7d:49:17:
87:05:f3:f4:7f:9c:03:77:f7:e8:3c:af:dd:c6:54:56:60:34:
b7:aa:3e:02:c1:42:83:ff:14:93:35:d7:f2:2a:d1:84:66:ff:
e6:db:32:22:73:e4:94:68:38:12:45:0b:cc:5e:ec:dd:f5:ae:
ef:9d:49:3d:83:50:06:e2:20:7d:8d:bb:fc:e5:7a:d3:7b:06:
73:d8:c7:96:c6:a7:92:7b:25:37:14:29:3d:ed:8c:5b:db:90:
d2:d4:44:6e:e9:79:e3:66:56:26:47:2a:8f:d3:a9:b4:9c:30:
9d:2b:9f:06:fb:3f:4a:af:9a:46:7f:60:42:5f:1d:49:5e:b3:
eb:f9:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net