Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2Q7KE6nZMBuEr4ff7RML_v4yrE.roa
File: a2Q7KE6nZMBuEr4ff7RML_v4yrE.roa (raw, json)
Hash identifier: 88XVkwRCEttIQTuGMmbQQ825TxpmCsHto1m+Bdi6PbE=
Subject key identifier: 6B:64:3B:28:4E:A7:64:C0:6E:12:BE:1F:7F:B4:4C:2F:FB:F8:CA:B1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183B84303D337C68644518807B3B783AD2D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2Q7KE6nZMBuEr4ff7RML_v4yrE.roa
Signing time: Sat 08 Oct 2022 15:42:23 +0000
ROA not before: Sat 08 Oct 2022 15:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202828
IP address blocks: 2a06:a005:43c::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:2dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:43:03:d3:37:c6:86:44:51:88:07:b3:b7:83:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 8 15:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b643b284ea764c06e12be1f7fb44c2ffbf8cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:ac:b3:0e:ad:5d:8e:78:c4:17:78:14:ee:
f1:c5:5e:5c:ee:bb:0f:8d:15:18:a0:1b:0d:02:37:
05:e1:dd:fa:4a:e3:f2:ae:99:66:9b:f4:a5:1f:2b:
b3:00:33:0c:19:0e:dd:03:85:37:2c:d4:ab:4f:0a:
e6:93:e7:b9:a7:1c:6e:0e:b6:0a:ee:b3:65:fd:10:
b0:d9:9f:df:cd:0d:7b:90:a9:85:53:8a:2b:5a:bb:
c1:24:0f:ef:6a:2e:54:03:4d:47:8d:39:f7:d6:35:
c5:dc:99:81:5b:a4:c8:3d:ad:a1:12:d9:b5:48:16:
eb:0b:fa:fc:b5:3d:f0:03:e9:bc:f2:7a:ee:20:8b:
13:54:2f:ca:c6:a3:ee:95:a5:2b:da:93:b2:bc:63:
6a:bc:50:fa:87:9d:f5:62:18:a4:c2:73:1f:79:28:
d7:04:47:3c:dc:4f:03:17:a8:b7:ab:44:c3:08:24:
60:1e:0b:d9:ab:25:07:c3:53:95:38:e4:d7:7b:10:
35:ab:12:e8:6d:99:da:19:f3:f7:39:1f:a7:f5:3c:
0b:62:b2:7e:0e:96:b7:b5:39:1e:ec:25:62:64:f9:
f2:ba:b6:51:57:0c:51:a5:d8:3e:be:11:5d:91:10:
f6:15:67:cc:65:50:3d:8a:af:9a:cd:ba:43:b5:72:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:3B:28:4E:A7:64:C0:6E:12:BE:1F:7F:B4:4C:2F:FB:F8:CA:B1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2Q7KE6nZMBuEr4ff7RML_v4yrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
9a:49:ca:61:96:83:bf:a6:f6:d4:c6:d0:d6:67:e0:de:6b:5e:
21:b3:4a:92:b4:d1:00:85:e8:17:32:de:d3:72:f0:62:39:84:
84:64:b7:28:e6:66:d0:f4:40:31:9b:0f:86:b0:34:ec:3e:db:
10:41:67:f5:7d:1d:b2:2a:b5:6a:0e:b6:c8:61:7b:d4:e4:82:
b8:aa:fa:d0:af:94:02:73:01:ad:94:c1:fc:d2:84:04:d2:34:
9e:87:15:4c:37:85:29:55:a0:4d:31:4c:16:de:68:56:ca:d7:
e0:95:5c:16:bc:74:87:28:5b:c8:f9:fe:39:c4:01:fc:aa:42:
b5:71:fb:d1:49:b5:82:27:96:5a:e3:08:b6:88:22:4c:1e:fa:
73:f1:f6:3e:2c:47:9e:e0:fd:73:4b:03:fd:2f:19:0b:b8:af:
ba:9d:20:dc:f5:d9:b0:5a:ef:a4:0a:e1:3b:13:4f:72:f3:2a:
a6:bb:8c:b5:f0:26:b3:37:f2:db:f2:1e:d2:e5:c2:fb:2d:21:
fe:01:fc:4a:0d:c4:de:e8:94:42:2c:c5:7e:ca:37:22:ad:83:
0c:10:78:56:d0:46:8e:0d:6a:5e:0c:ff:1b:ef:3f:54:64:13:
a7:0b:77:d0:23:f4:c5:10:7d:03:71:73:38:d4:38:94:db:22:
dc:c1:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net