Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dtqI9TbMGLgqOOjWMuIh0iIv26c.roa
File: dtqI9TbMGLgqOOjWMuIh0iIv26c.roa (raw, json)
Hash identifier: meUADvitvx814g1GPNGrEOj9q707k/PIMuyLE5lYYxI=
Subject key identifier: 76:DA:88:F5:36:CC:18:B8:2A:38:E8:D6:32:E2:21:D2:22:2F:DB:A7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182400239C23E179243D20DF7F514181F40
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dtqI9TbMGLgqOOjWMuIh0iIv26c.roa
Signing time: Wed 27 Jul 2022 14:14:23 +0000
ROA not before: Wed 27 Jul 2022 14:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:45a::/48 maxlen: 48
2a06:a005:13b0::/44 maxlen: 48
2a06:a005:45b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:02:39:c2:3e:17:92:43:d2:0d:f7:f5:14:18:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 27 14:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76da88f536cc18b82a38e8d632e221d2222fdba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:c6:a4:66:b9:52:a6:e2:5f:d2:43:47:4d:
ad:b5:a6:a3:43:bc:a7:99:45:6d:69:0d:33:60:c2:
8b:5f:72:7e:29:a6:9c:30:b5:ca:60:a6:58:5b:a8:
07:e8:a8:a7:ad:8e:a5:8a:c3:d3:75:aa:d2:74:ee:
f7:3b:6b:15:f4:f3:ac:a4:85:e4:75:b9:44:b1:24:
38:ba:55:61:e2:12:07:fa:a9:06:7b:c5:11:26:aa:
2d:e4:13:5a:3c:f6:e2:1d:ed:cf:b2:ec:9c:0a:1b:
3a:c2:c4:27:54:93:22:84:7b:83:88:3c:dd:7b:14:
c3:b2:a1:4c:21:ca:8b:2a:cf:8a:90:59:05:6a:d6:
44:f2:27:c3:d1:31:f7:77:04:74:cf:4a:ea:50:de:
97:61:97:3a:ba:b5:55:39:5e:53:55:54:a2:37:7b:
4a:78:5d:2f:fc:2d:6c:db:7d:0c:db:1d:7d:7f:62:
4f:40:dd:8e:d4:d6:bb:6b:0b:5e:45:c4:23:01:a3:
4e:16:43:dd:6b:9c:cf:b1:f8:29:6d:79:1b:ae:56:
bb:af:6f:78:e9:c2:e4:01:cd:21:3c:54:b8:3a:84:
ce:0d:02:87:63:73:be:a1:d9:e8:16:9a:80:78:d5:
da:96:02:02:66:e8:6a:db:42:2e:b2:b4:ee:2f:8a:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:88:F5:36:CC:18:B8:2A:38:E8:D6:32:E2:21:D2:22:2F:DB:A7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dtqI9TbMGLgqOOjWMuIh0iIv26c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45a::/47
2a06:a005:13b0::/44
Signature Algorithm: sha256WithRSAEncryption
37:1b:e1:f3:d0:5b:4d:fa:ef:4e:a7:52:da:45:02:19:7b:20:
a3:7a:90:7c:8c:e6:ee:c8:45:94:98:b9:6a:c0:a3:5f:97:fe:
12:cb:6e:1f:b8:f3:28:d9:d1:00:09:ff:7f:67:03:fd:54:15:
27:90:5c:71:44:7f:02:cd:59:cd:ec:d9:ff:30:6a:bc:74:ba:
7e:8e:88:fd:c6:e5:ff:98:dc:75:95:16:e3:7c:30:57:1d:8a:
ed:4a:63:da:e3:e5:b6:7b:be:2e:d2:ea:4c:cf:25:62:e7:de:
67:2a:c3:37:17:72:ac:6e:4c:d4:af:51:9e:dc:a7:59:c3:b3:
7c:d3:f9:7f:f1:00:13:88:05:ea:54:f6:1b:6e:fb:a8:10:32:
54:fe:4c:fc:e9:e0:a8:50:71:97:18:da:e1:2a:be:b8:ca:1d:
cc:0f:e2:44:52:7f:7b:5e:8c:6b:38:c4:95:f8:42:ad:2b:7b:
1a:9f:70:c5:6b:da:16:03:37:05:c2:08:8b:d3:4e:b8:17:c6:
c9:d0:9a:44:43:f7:bc:8b:18:82:23:bd:d2:78:4f:66:44:60:
08:7f:73:ba:b7:00:d6:bf:27:89:18:7e:e6:22:67:b6:ba:ab:
aa:57:6b:31:1c:c3:15:b7:1f:ec:52:94:c4:59:1b:29:f0:03:
a6:2f:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net