
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa
File: _BRhTFYGAPjrQGiOvi6lxoYyDtg.roa (raw, json)
Hash identifier: Iob6NzW3yLA6KcasnaHwzJCPeG+PZMM4N4qnEB5B/x4=
Subject key identifier: FC:14:61:4C:56:06:00:F8:EB:40:68:8E:BE:2E:A5:C6:86:32:0E:D8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018274412A78579663ED09CED1E408C190F3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa
Signing time: Sat 06 Aug 2022 17:43:23 +0000
ROA not before: Sat 06 Aug 2022 17:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:1660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:41:2a:78:57:96:63:ed:09:ce:d1:e4:08:c1:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 6 17:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc14614c560600f8eb40688ebe2ea5c686320ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:78:75:1c:ee:13:e2:8a:db:0e:e2:ec:7f:
85:c8:ee:a2:fe:f0:c5:88:26:fb:1b:94:ef:0c:66:
5e:4b:54:d0:c4:7d:1e:da:29:65:b9:ea:56:33:10:
e3:d7:0f:d6:3c:e8:68:ae:b8:75:fa:06:dd:75:39:
cb:02:f0:54:31:80:99:25:83:89:e4:44:34:dc:f5:
22:e6:a6:5f:76:76:f9:c8:2e:07:9d:0c:a6:35:3a:
a7:8a:6d:19:9b:1b:ad:9b:2f:74:53:a4:ab:9d:3d:
4a:5a:d8:d3:2c:6c:8f:a8:09:27:fb:e9:40:03:b8:
91:62:a8:dd:d8:6b:c5:a8:cb:ec:25:31:58:2f:c1:
57:bc:9d:fd:86:2a:98:d5:5d:66:2a:f1:e5:3d:9d:
00:c0:8a:ce:8e:13:e8:5b:d5:0e:ad:c9:e8:49:ec:
e4:ea:37:a6:65:3f:52:2f:f0:8e:ea:3d:b4:de:28:
f9:1d:48:d1:2c:9f:17:ef:2d:41:42:54:80:e7:f5:
ef:37:06:99:03:4b:d5:88:74:80:ce:27:3a:14:e4:
1d:91:21:97:c3:ed:e7:ad:88:23:0d:c8:3d:ee:dd:
73:95:a4:a1:65:2d:a1:b3:40:94:95:b0:34:55:8f:
27:f6:51:f4:40:06:b9:5c:e9:86:8e:4b:0a:30:a0:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:61:4C:56:06:00:F8:EB:40:68:8E:BE:2E:A5:C6:86:32:0E:D8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:1660::/44
Signature Algorithm: sha256WithRSAEncryption
34:af:1b:eb:a4:28:aa:4f:af:8b:64:f6:f4:60:2b:cf:4e:6d:
82:7b:9c:e2:43:38:03:c8:9c:d6:fa:7a:87:c6:c7:22:58:ec:
f9:3d:41:1c:5e:ad:0a:a5:ef:f5:b1:97:24:2f:87:13:c1:1d:
33:8c:20:79:b9:95:48:64:73:c9:97:ee:61:c4:55:08:43:3e:
0b:73:98:8e:e3:06:0f:ea:8d:f3:98:cb:f9:dc:03:2c:e1:9b:
21:10:e1:77:db:51:c7:58:b1:8d:d5:9e:e9:bd:ed:cf:ee:06:
05:a1:fd:f7:61:fa:f9:4a:76:8e:fe:f3:ff:cd:08:51:d1:66:
8e:20:fe:24:54:da:ac:77:ea:c6:4d:67:07:6f:25:c4:e1:97:
53:fe:20:5a:2b:5a:8e:f5:df:f8:f5:46:a4:90:85:fc:45:cd:
93:31:34:02:f1:10:e9:93:6b:21:6c:08:65:4f:aa:d9:ea:68:
ab:da:7a:03:e7:ac:d8:fc:90:e1:b8:7b:38:05:06:8c:bd:99:
8a:ad:ef:33:3e:34:4e:28:ac:0c:1e:fc:f3:ff:f2:91:ed:d6:
96:31:32:e2:3b:c9:b5:83:06:eb:06:f3:03:04:76:a8:3b:59:
76:85:ba:cf:6a:6d:5a:0a:0e:e2:65:aa:98:6f:03:7f:05:60:
c9:61:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net