Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/azBzw6NyyuSVYA92BheQloPRj-c.roa
File: azBzw6NyyuSVYA92BheQloPRj-c.roa (raw, json)
Hash identifier: sFzWoBi7V/OrDMDVx2JWCWipm9RR0YsCV2ouK0Oh9C8=
Subject key identifier: 6B:30:73:C3:A3:72:CA:E4:95:60:0F:76:06:17:90:96:83:D1:8F:E7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01832DA4010E3A42E53876213C714E05AB75
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/azBzw6NyyuSVYA92BheQloPRj-c.roa
Signing time: Sun 11 Sep 2022 17:41:06 +0000
ROA not before: Sun 11 Sep 2022 17:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212294
IP address blocks: 2a06:a005:1c40::/44 maxlen: 48
2a06:a005:1800::/44 maxlen: 48
2a06:a005:19e0::/44 maxlen: 48
2a06:a005:1c30::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2d:a4:01:0e:3a:42:e5:38:76:21:3c:71:4e:05:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 11 17:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b3073c3a372cae495600f760617909683d18fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:a3:7b:56:46:26:1c:30:7c:a1:53:29:85:
c7:7a:9c:8d:62:7d:15:a0:f0:45:29:8d:80:bb:4d:
76:50:c4:17:71:42:91:38:9b:a8:91:ab:79:7c:aa:
b7:6d:ac:0e:8b:dd:96:c0:b7:30:69:a0:fe:b5:15:
1b:20:cd:1e:89:fa:3c:dd:6e:4d:77:74:83:e3:2c:
c9:4e:6c:2a:df:59:a6:59:62:18:a8:45:fc:50:f0:
4c:1e:c3:19:c5:18:d9:e4:e8:05:18:45:52:0e:af:
c8:c7:65:13:28:56:e4:2f:8c:ca:41:83:69:d7:49:
77:88:0a:00:18:dc:07:77:d3:16:59:7e:d8:1f:da:
f0:50:20:9c:95:c4:9c:9f:9c:cc:9c:74:ed:b7:7c:
ec:eb:ea:65:cd:29:4b:2b:26:40:82:a4:fa:10:30:
0e:a0:76:aa:14:e5:76:1f:8a:06:3f:6f:3e:dc:de:
29:a2:37:19:b9:61:fe:22:54:c3:61:84:68:ad:fb:
7f:7b:85:33:7e:45:b1:8f:b3:9b:69:3f:de:9c:76:
ac:7c:b9:5e:27:ae:e0:d6:a0:df:7d:fc:6a:4f:41:
f9:70:6d:9c:d7:ee:61:22:b9:9c:1a:43:25:79:69:
a4:5b:97:6e:b9:20:c1:26:3b:71:63:91:0a:d2:6f:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:73:C3:A3:72:CA:E4:95:60:0F:76:06:17:90:96:83:D1:8F:E7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/azBzw6NyyuSVYA92BheQloPRj-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1800::/44
2a06:a005:19e0::/44
2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
72:8b:7d:1f:fe:33:70:62:a1:d2:67:f3:20:37:70:a1:0c:a2:
c0:e9:b2:ca:fa:f2:4c:b4:de:c8:ea:17:12:5a:a8:8a:5d:05:
3d:dc:42:a6:1f:fb:88:ba:5c:54:58:c2:64:7c:c9:16:bb:52:
43:e5:a2:f5:48:1f:72:75:d2:b7:6c:98:aa:fc:13:a5:0c:74:
33:15:23:df:9d:d5:41:f1:68:e5:0a:12:37:dc:b7:38:03:02:
ee:ab:21:13:25:c4:c6:4c:20:56:72:3c:49:7e:d6:35:bb:c7:
47:a4:68:ab:90:d1:78:22:31:5a:b7:e3:c7:9e:70:1f:d2:e7:
cf:b7:f4:16:6e:b4:f8:8e:6c:25:0d:da:3b:4f:a9:d7:4e:40:
05:28:09:a8:0c:17:72:e2:9d:1c:5c:64:9c:68:f7:0d:04:80:
3c:3e:9c:5d:63:76:0f:12:75:40:8a:3b:79:2e:ad:8d:2c:f9:
4a:e3:0e:61:74:2e:bd:3a:49:50:d9:c4:18:7f:d3:b7:50:e8:
ff:8c:e8:64:00:3d:72:f8:7c:ba:46:53:de:2f:3c:48:f5:3a:
f4:bf:14:12:f9:9b:2b:a5:be:f7:fb:9f:4a:b5:8c:17:bf:3b:
88:75:e0:d3:42:17:4f:88:82:e9:9d:5b:1c:4e:e3:ab:2d:70:
06:7e:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net