Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1kKlzPei5mtWFpwP7JuT7EQjyw.roa
File: _1kKlzPei5mtWFpwP7JuT7EQjyw.roa (raw, json)
Hash identifier: Bu8IvxkByvnjAEzZmUWBbqpCN0s8OjkxmPO/0+k8DLc=
Subject key identifier: FF:59:0A:97:33:DE:8B:99:AD:58:5A:70:3F:B2:6E:4F:B1:10:8F:2C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184485F0849091307F88E20B34AADDDC401
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1kKlzPei5mtWFpwP7JuT7EQjyw.roa
Signing time: Sat 05 Nov 2022 15:18:18 +0000
ROA not before: Sat 05 Nov 2022 15:18:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:48:5f:08:49:09:13:07:f8:8e:20:b3:4a:ad:dd:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 5 15:18:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff590a9733de8b99ad585a703fb26e4fb1108f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:7c:b2:1b:84:1a:36:31:53:7a:e1:08:70:
85:11:29:9d:b8:f3:6f:32:a8:8b:c6:66:03:df:65:
24:29:de:f3:b3:6d:50:af:76:6c:cc:a5:22:0c:a3:
df:c6:ed:70:b5:12:fd:6f:98:57:18:9e:d1:b7:58:
57:26:c7:9e:ec:63:55:d4:95:08:b7:4e:ac:b2:b9:
26:3b:18:7e:81:d8:71:70:0b:2b:84:53:9e:9b:ec:
4a:9a:24:34:7e:38:bf:4e:8c:fe:54:b9:54:71:3a:
e8:14:c3:66:7a:42:b8:dc:42:5d:72:b5:84:cb:55:
5d:01:74:a4:2e:22:ab:70:29:5c:01:c1:af:6b:e7:
ac:e2:ef:33:f1:0c:c1:94:69:8a:14:d7:97:6c:e7:
ce:5f:99:da:c5:b6:c0:c7:8d:de:b5:df:b0:b4:91:
84:99:b2:18:8c:a4:03:20:2a:85:68:da:b7:b1:60:
01:37:f3:bd:de:16:3d:3d:7e:bb:dc:09:81:e9:48:
52:08:73:1d:fe:12:21:b7:97:f7:11:e3:22:fc:eb:
8e:8c:1e:bd:04:dc:69:2c:28:32:ee:dc:e9:85:3d:
60:6e:44:2a:80:dc:52:95:e4:29:9f:14:64:f9:45:
c7:81:a3:99:22:56:9f:c5:e0:45:85:bc:7b:4d:79:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:0A:97:33:DE:8B:99:AD:58:5A:70:3F:B2:6E:4F:B1:10:8F:2C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1kKlzPei5mtWFpwP7JuT7EQjyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
94:d4:a0:e4:83:d0:ac:dd:c2:e1:84:2f:82:ba:03:c6:45:ee:
5e:5f:cf:bb:d6:db:62:b0:e3:07:76:b6:59:69:58:63:ad:09:
4f:05:d2:f2:2a:61:62:d8:06:78:b2:80:c3:dc:82:5e:3a:bc:
83:ea:e7:3f:fc:54:48:d2:a4:a0:c0:a0:69:a5:85:e7:4c:58:
f6:b2:5a:56:26:92:a7:0f:a3:1c:7e:4d:bd:87:55:68:61:04:
c3:e3:36:40:ca:9e:0a:36:a2:6d:df:3a:ff:c2:f3:83:8b:5c:
a5:a6:bc:13:c6:e6:0a:5f:2f:18:a2:39:c9:ce:ff:88:86:cc:
0d:ea:42:24:01:6d:b3:30:a3:ae:f1:44:d6:ef:07:c9:b3:b8:
29:96:ae:8d:00:c3:2f:a0:54:0c:1b:f0:eb:97:60:b4:73:54:
3e:74:ae:03:59:3f:ca:e1:3c:fc:18:dc:83:13:c3:36:0d:96:
3c:fe:d4:56:61:34:05:79:b9:90:8f:72:c1:93:ba:5b:79:c0:
1b:4c:1b:47:95:74:6a:8d:b2:14:74:b6:f8:97:af:55:9e:cf:
1a:94:aa:43:35:26:41:5b:e7:8d:99:23:f2:c0:85:58:a1:a0:
25:f2:84:a8:f8:10:11:a9:04:51:32:68:60:aa:59:19:fb:0d:
0b:2c:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net