Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bc95NkYSugv5VLOEBjZoiAxaV9I.roa
File: bc95NkYSugv5VLOEBjZoiAxaV9I.roa (raw, json)
Hash identifier: yMg8GPZBE49m2wH6yEHiBSxwr5JQFbH1lhu5MCT4eoM=
Subject key identifier: 6D:CF:79:36:46:12:BA:0B:F9:54:B3:84:06:36:68:88:0C:5A:57:D2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845507AE27D324CDBBD8E88E3F0EE41F39
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bc95NkYSugv5VLOEBjZoiAxaV9I.roa
Signing time: Tue 08 Nov 2022 02:17:57 +0000
ROA not before: Tue 08 Nov 2022 02:17:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:07:ae:27:d3:24:cd:bb:d8:e8:8e:3f:0e:e4:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 8 02:17:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dcf79364612ba0bf954b384063668880c5a57d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:d7:ce:0f:e5:19:51:30:e6:dc:2d:27:32:
64:52:d2:e3:13:33:6c:79:f3:a7:78:df:34:f5:c3:
1e:93:d2:47:b6:e9:32:f6:28:af:cc:2f:f3:d9:e2:
ae:28:26:23:c7:9c:9d:b5:dd:7a:e4:7a:73:24:72:
e1:9b:4e:a0:8b:ac:b1:7e:c3:66:98:8a:7f:7e:5c:
05:c4:eb:62:83:18:98:4d:06:39:36:e5:b3:83:1f:
e7:a1:80:90:9e:97:a3:ec:d6:7b:91:e3:dc:29:85:
2d:51:dd:e4:00:d2:75:5c:c0:10:95:a2:70:2c:6f:
3e:dd:d1:7b:b6:ae:96:b3:de:71:91:4d:cd:91:70:
d2:ba:6a:b7:b8:a9:46:63:3f:21:a7:f9:de:a7:2b:
77:98:68:3b:58:9f:20:90:46:d2:ae:93:d3:ce:56:
38:74:cc:26:95:30:3e:c0:41:32:80:82:2b:1f:c1:
ae:2f:18:4a:c1:2e:12:f8:71:d2:3b:5a:28:ad:a8:
68:df:67:f4:43:85:63:ea:55:b9:00:7c:a9:ed:f6:
fa:f0:06:bf:ca:23:b5:ea:97:0e:7d:10:81:db:c4:
aa:0a:e3:9f:c5:d3:4e:5e:a4:83:c8:6c:98:c8:78:
10:b8:cd:bc:79:13:1c:90:d3:38:e9:ed:91:2c:4f:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:79:36:46:12:BA:0B:F9:54:B3:84:06:36:68:88:0C:5A:57:D2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bc95NkYSugv5VLOEBjZoiAxaV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
20:f1:a1:ba:49:c6:60:3e:60:d8:0a:8e:0f:9b:4d:5b:75:42:
69:bf:19:f0:1f:1f:41:fa:7e:ba:05:9b:10:ef:c4:9e:9c:c4:
7e:2e:3f:60:4e:cd:0a:c0:bf:e7:df:f4:e0:cb:5a:56:c6:37:
d1:29:65:23:54:67:6d:4e:78:bc:e2:b4:43:40:34:45:24:c8:
e3:65:92:d4:03:c1:bb:58:1d:56:75:b5:d6:79:ba:e7:9a:ba:
b2:bb:2e:fe:f3:f2:ea:b9:aa:c4:63:fa:a5:34:e3:89:78:bc:
83:99:a4:01:fb:c4:e7:5c:bf:00:38:eb:8c:eb:03:90:0f:d6:
f5:14:0a:f9:6c:71:80:37:55:54:29:de:c6:dc:dd:b5:fb:90:
85:d2:24:3d:e4:28:f4:de:8c:05:03:05:ec:c7:81:83:0e:cb:
ce:b2:8a:07:c1:c6:6c:07:0c:ff:39:83:aa:24:61:08:45:d7:
1d:6b:84:94:1e:66:15:ab:44:5c:a2:e0:c0:ad:97:1c:29:1d:
ce:f1:0a:e2:02:a2:70:a6:de:f6:64:87:4d:11:2d:91:84:25:
e2:d0:3b:41:50:b8:5c:38:08:12:80:6b:af:b0:aa:7e:c8:5a:
fc:fb:f8:9a:c9:d6:00:4d:13:8c:ff:ab:c3:24:83:d7:ac:9d:
4c:98:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net