Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZzkkDhb9NeNSbDpuF96SSkTFf_g.roa
File: ZzkkDhb9NeNSbDpuF96SSkTFf_g.roa (raw, json)
Hash identifier: Sz4zD1CQshDNp7ni6Sw8/3/cepR493V4nzmw4BwD5Z0=
Subject key identifier: 67:39:24:0E:16:FD:35:E3:52:6C:3A:6E:17:DE:92:4A:44:C5:7F:F8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01844675B9F364CBAD5FD7EAE554D8485C04
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZzkkDhb9NeNSbDpuF96SSkTFf_g.roa
Signing time: Sat 05 Nov 2022 06:23:51 +0000
ROA not before: Sat 05 Nov 2022 06:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:2260::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:75:b9:f3:64:cb:ad:5f:d7:ea:e5:54:d8:48:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 5 06:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6739240e16fd35e3526c3a6e17de924a44c57ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:2b:14:82:b3:e9:9e:39:e5:e4:2d:03:a5:
56:45:61:d5:df:8f:74:96:96:de:27:83:d0:28:5f:
3f:aa:7b:8b:a0:7c:a1:20:6c:99:e7:be:60:92:34:
a2:a4:52:b7:ee:62:3a:af:6e:0f:e9:32:6e:59:29:
93:a4:d1:f1:af:73:8d:2e:69:12:9f:89:df:de:1b:
19:bd:8d:7b:06:e9:c8:3d:2c:8f:83:b1:66:d5:76:
3a:7a:07:63:60:61:ef:b5:02:62:5a:8f:dc:37:98:
a9:b3:0d:f4:eb:53:33:f7:06:34:78:f0:e1:42:3f:
f5:31:4c:f5:82:1a:ed:a6:68:06:26:03:ed:f5:87:
59:87:6d:d6:24:93:9a:13:c0:34:a5:dc:29:82:9b:
38:30:0e:68:c8:89:fa:ed:08:99:16:98:cd:0f:82:
ce:df:77:42:72:48:0f:48:f5:87:cd:ea:92:23:96:
c6:ef:57:9c:23:82:26:12:b9:71:e8:d4:e4:18:3f:
c9:84:a5:b2:46:54:76:ee:94:04:72:75:10:77:da:
8d:39:59:9c:62:c1:be:0b:07:37:9c:56:96:36:e4:
e4:84:1c:06:10:37:d2:76:cf:0e:af:fa:08:ab:79:
25:6a:63:4d:14:87:74:d6:c8:86:ff:41:d2:ca:ba:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:24:0E:16:FD:35:E3:52:6C:3A:6E:17:DE:92:4A:44:C5:7F:F8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZzkkDhb9NeNSbDpuF96SSkTFf_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
23:f4:08:fa:8c:33:e0:e9:62:a9:cf:f2:b1:e2:e5:38:5e:b6:
38:00:82:49:c4:46:ae:82:87:5e:5e:65:ea:70:79:99:fa:fe:
e5:1d:61:1f:47:e9:8b:8d:a1:39:e3:68:74:f3:67:55:6e:e6:
65:a8:55:10:d0:80:f0:c4:7f:ff:72:a9:70:6d:03:3d:77:44:
f3:57:07:c5:9e:83:2f:ae:ac:f1:1d:39:08:ea:23:d4:91:0c:
0a:79:3d:c7:f2:b4:5d:1e:07:0b:43:6b:ab:00:1b:f8:3b:1e:
32:94:64:db:42:c8:77:ec:a2:d9:b1:63:c5:57:12:00:f9:c4:
7b:c2:58:8c:88:17:1c:6f:43:44:d7:d6:eb:fe:11:70:2d:fa:
4c:f1:34:1f:62:6e:36:8e:e4:e9:72:dc:9d:d9:15:c5:e7:68:
b7:a2:b4:cd:4a:ee:2c:a0:ee:a3:f3:29:24:e2:76:be:77:fd:
48:3f:4d:91:d9:9a:9d:48:83:06:76:e4:ed:36:f5:c0:3b:9a:
1f:00:fc:7d:e4:14:a3:87:4a:76:98:00:ba:c4:00:af:47:d6:
c6:80:d7:a6:c6:d6:86:ad:95:f3:5c:22:9c:33:45:29:86:3e:
98:d9:58:c9:3d:6d:71:b2:aa:c5:52:dd:f2:f9:86:1d:6e:8f:
6a:be:93:ce
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYRGdbnzZMutX9fq5VTYSFwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTA1MDYyMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzM5MjQwZTE2ZmQzNWUzNTI2YzNhNmUxN2RlOTI0YTQ0YzU3ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCIrFIKz6Z455eQtA6VWRWHV3490
lpbeJ4PQKF8/qnuLoHyhIGyZ575gkjSipFK37mI6r24P6TJuWSmTpNHxr3ONLmkS
n4nf3hsZvY17BunIPSyPg7Fm1XY6egdjYGHvtQJiWo/cN5ipsw3061Mz9wY0ePDh
Qj/1MUz1ghrtpmgGJgPt9YdZh23WJJOaE8A0pdwpgps4MA5oyIn67QiZFpjND4LO
33dCckgPSPWHzeqSI5bG71ecI4ImErlx6NTkGD/JhKWyRlR27pQEcnUQd9qNOVmc
YsG+Cwc3nFaWNuTkhBwGEDfSds8Or/oIq3klamNNFId01siG/0HSyrp9hQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGc5JA4W/TXjUmw6bhfekkpExX/4MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvWnpra0RoYjlOZU5TYkRwdUY5NlNTa1RGZl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwcAKgagBQ0i
AwcAKgagBRUKAwcEKgagBRVQMBIDBwQqBqAFIlADBwQqBqAFImADBwAqB1TCsAsw
DQYJKoZIhvcNAQELBQADggEBACP0CPqMM+DpYqnP8rHi5ThetjgAgknERq6Ch15e
ZepweZn6/uUdYR9H6YuNoTnjaHTzZ1Vu5mWoVRDQgPDEf/9yqXBtAz13RPNXB8We
gy+urPEdOQjqI9SRDAp5PcfytF0eBwtDa6sAG/g7HjKUZNtCyHfsotmxY8VXEgD5
xHvCWIyIFxxvQ0TX1uv+EXAt+kzxNB9ibjaO5Oly3J3ZFcXnaLeitM1K7iyg7qPz
KSTidr53/Ug/TZHZmp1IgwZ25O029cA7mh8A/H3kFKOHSnaYALrEAK9H1saA16bG
1oatlfNcIpwzRSmGPpjZWMk9bXGyqsVS3fL5hh1uj2q+k84=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net