
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa
File: cTV5L-oqB7Q7PHubRfcimkhZaDY.roa (raw, json)
Hash identifier: DJuvTmYzi20OMr7PPb0rEwNCzSPrLye+Y/gwS424tU8=
Subject key identifier: 71:35:79:2F:EA:2A:07:B4:3B:3C:7B:9B:45:F7:22:9A:48:59:68:36
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840CB288F8DA0962192176EE9DCDE9DEC3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa
Signing time: Tue 25 Oct 2022 01:12:17 +0000
ROA not before: Tue 25 Oct 2022 01:12:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203967
IP address blocks: 2a07:54c4:7::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0c:b2:88:f8:da:09:62:19:21:76:ee:9d:cd:e9:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 01:12:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7135792fea2a07b43b3c7b9b45f7229a48596836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:73:d2:d7:a9:c4:4c:e5:48:9b:b7:68:c9:
2a:75:13:b1:07:21:51:0b:99:0e:b8:5a:4f:3d:13:
83:dd:d3:7e:60:47:7b:a9:72:85:64:96:e7:b1:d5:
a0:17:0c:e7:fa:27:ab:61:15:30:19:8c:97:ff:35:
a3:76:43:cb:4b:0b:fe:64:04:23:e8:9d:dc:90:38:
24:95:0a:38:49:7a:60:55:35:19:7e:21:55:4a:cf:
83:04:df:21:5d:16:81:dd:11:83:92:4b:68:98:2b:
1f:1d:c8:a9:84:96:43:09:b3:cc:ba:3e:41:d0:5a:
31:b8:18:bb:cf:f3:49:49:f1:c7:f2:6f:75:c7:e5:
37:b1:4f:d2:86:d0:c2:9a:d2:62:28:99:cd:6d:fb:
80:b7:6d:07:d1:a7:85:41:27:eb:29:b8:38:23:73:
3d:5c:50:a8:08:88:95:c0:99:d3:9a:e8:a5:30:2e:
5b:c7:c5:32:82:4d:91:91:a6:d1:a6:40:90:d2:78:
b3:5c:ce:84:54:07:f3:76:1f:32:91:3b:87:5e:b8:
2b:c2:c3:a3:29:0a:8f:03:ae:43:9a:9f:c6:1a:8d:
ab:3d:ba:0c:87:84:95:54:80:66:ae:cc:e5:ef:32:
3b:90:7f:3b:5d:82:59:98:df:07:4d:37:22:b4:5e:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:79:2F:EA:2A:07:B4:3B:3C:7B:9B:45:F7:22:9A:48:59:68:36
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
2a07:54c4:7::/48
Signature Algorithm: sha256WithRSAEncryption
73:8e:a8:da:bd:4b:73:87:67:76:4c:f7:84:68:bd:18:1d:12:
49:18:e9:8b:2e:45:08:1c:c4:ea:f8:eb:78:42:b6:3d:8a:17:
97:e0:83:03:c9:02:15:1a:aa:95:b3:38:a5:e5:28:c2:f6:24:
3f:cb:5f:fb:bd:34:ba:aa:da:6f:91:0c:65:a0:cf:0c:a0:81:
c5:2a:dd:b3:8b:3e:fa:e0:48:e2:8c:e7:0d:62:77:91:2a:ca:
f3:c0:b2:d6:a7:e6:29:5a:af:dd:2c:6b:3b:28:70:53:39:20:
8f:1e:85:f0:18:bd:ce:83:9e:d4:3e:26:e6:62:cc:e9:ee:a4:
0b:b2:b6:9b:3d:15:ca:c3:75:04:9e:e4:27:aa:15:32:08:b0:
8a:a7:ba:dd:92:f9:79:88:1e:9b:0a:32:8b:da:69:0e:c8:a8:
07:e6:ac:29:db:da:ed:61:4f:ed:de:eb:34:37:48:20:02:83:
3d:12:3c:ad:f6:82:1b:4e:b6:0c:4f:76:00:71:5b:0f:27:5c:
02:67:24:d5:47:a0:23:21:46:4a:95:fb:15:d8:8b:75:ff:77:
94:38:b3:d5:1d:24:00:5a:92:55:55:6b:02:0a:66:e0:ba:c7:
bc:b7:28:08:87:54:10:0a:65:7a:ee:b0:5c:d5:85:ff:1e:44:
c5:92:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net