Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa
File: c6U9DPuB6wvj11LJTiKlKTibN_I.roa (raw, json)
Hash identifier: 9ZLiPVbdtD5rsNB8eTuDGwodGQuQ4nZgPJKpaHHBwsw=
Subject key identifier: 73:A5:3D:0C:FB:81:EB:0B:E3:D7:52:C9:4E:22:A5:29:38:9B:37:F2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 189AE539
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa
Signing time: Fri 22 Apr 2022 21:40:20 +0000
ROA not before: Fri 22 Apr 2022 21:40:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18526
IP address blocks: 2a06:a005:5b6::/47 maxlen: 48
2a06:a005:5b1::/48 maxlen: 48
2a06:a005:5b2::/48 maxlen: 48
2a06:a005:5b0::/48 maxlen: 48
2a06:a005:5b3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412804409 (0x189ae539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 22 21:40:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a53d0cfb81eb0be3d752c94e22a529389b37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:ca:7a:f2:85:5b:56:c7:3e:65:ca:bd:1f:
e2:1c:64:cf:f3:d6:cf:9f:4c:81:f0:a9:ce:b4:de:
25:06:3f:76:c9:99:5c:02:bc:04:02:39:5f:3d:0a:
37:dc:78:95:a2:b3:bc:49:95:93:bc:2e:1a:53:6d:
f6:0b:fc:da:cd:1d:78:1f:f2:95:d8:78:20:cb:7a:
bf:db:62:74:5b:bb:93:af:64:a6:e9:d0:b8:f4:dd:
e0:80:74:85:a2:86:a8:f1:c9:b2:5a:a8:d4:c2:b8:
6b:2b:ef:6b:2b:86:82:5e:ad:62:df:cd:31:7e:25:
6c:e2:cc:3e:1a:b8:d2:2c:77:d6:55:60:ca:be:61:
1e:37:79:c9:94:49:50:32:08:c5:3c:8e:3c:c3:92:
36:af:89:79:4c:dc:0b:35:50:46:3e:fd:ce:3a:ed:
26:e0:2c:dd:a4:bd:61:83:2e:31:ee:39:4b:2c:73:
46:5b:cb:b3:f8:e0:b2:83:09:b8:52:89:3e:33:4d:
df:e7:5a:d4:bd:3b:a3:f5:4d:fa:83:ed:1b:85:b0:
c5:d0:15:2c:a9:88:f9:a1:2a:31:ba:ec:7e:ba:ab:
12:17:ca:6c:c8:29:9d:ed:0e:6f:59:5c:8b:74:77:
57:dd:b1:48:dc:a6:82:18:fd:53:55:4f:7b:ab:09:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:3D:0C:FB:81:EB:0B:E3:D7:52:C9:4E:22:A5:29:38:9B:37:F2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b0::/46
2a06:a005:5b6::/47
Signature Algorithm: sha256WithRSAEncryption
26:6c:79:ce:0f:b3:9f:7e:1d:96:6d:a3:e5:c5:1e:4e:94:03:
87:86:2b:47:16:ec:00:ef:f1:0a:3f:0e:ad:3b:29:7c:4f:5b:
d1:c9:a9:69:bc:7d:12:5c:00:c9:e7:2b:f5:ef:c0:4a:d6:f8:
ee:a9:0b:60:aa:6d:da:fb:79:f7:b0:2c:3e:9f:6a:c5:a5:f3:
e3:12:09:a7:79:36:22:e5:1b:2f:a6:fb:95:18:bc:33:fb:1f:
c1:d6:36:5f:94:5f:37:e7:9d:72:f7:74:27:73:d6:e2:b2:1b:
a2:90:3c:af:5b:d4:7f:73:1c:87:80:8a:ae:93:07:48:1a:95:
63:1b:ad:74:ad:63:cd:ac:bb:21:98:20:87:9e:09:3d:8d:d3:
ac:32:4c:2d:25:33:9c:2f:6f:f1:2d:b4:0a:ee:c5:96:07:30:
f7:03:d0:48:3b:e2:d8:c7:6a:0b:68:45:ca:d3:c6:5f:28:52:
7e:ce:b3:c1:b4:29:dd:44:53:73:cb:f4:25:c4:9b:22:73:0e:
44:86:15:22:fc:9f:5b:d4:c5:c7:ab:ae:9f:97:7b:42:bf:42:
01:78:44:9f:6a:99:c5:b1:d9:c9:58:ce:dc:82:e5:ef:46:00:
67:09:41:b8:c9:d7:14:0c:60:61:ab:0c:26:12:1f:c2:c3:0c:
50:60:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net