Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eBFG7dxF8bmhO5O9gDQ1M7mzP1M.roa
File: eBFG7dxF8bmhO5O9gDQ1M7mzP1M.roa (raw, json)
Hash identifier: L6j7jlKUpWzMp4LLPBINtN6Emvm3eXoMjjfyfh+DonU=
Subject key identifier: 78:11:46:ED:DC:45:F1:B9:A1:3B:93:BD:80:34:35:33:B9:B3:3F:53
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825AE09724FF47E5717D91D9A8A0D9D128
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eBFG7dxF8bmhO5O9gDQ1M7mzP1M.roa
Signing time: Mon 01 Aug 2022 19:27:24 +0000
ROA not before: Mon 01 Aug 2022 19:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139882
IP address blocks: 2a0a:6040::/32 maxlen: 48
2a06:a005:380::/44 maxlen: 48
2a06:a005:360::/44 maxlen: 48
2a06:a005:390::/44 maxlen: 48
2a06:a005:370::/44 maxlen: 48
2a06:a005:3a0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:e0:97:24:ff:47:e5:71:7d:91:d9:a8:a0:d9:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 19:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=781146eddc45f1b9a13b93bd80343533b9b33f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:a3:52:e7:5f:c9:dd:9e:52:be:d3:1f:7b:
98:d7:1f:14:ca:d4:4f:41:40:39:71:f9:fa:b6:6f:
78:39:69:25:c8:7c:04:b5:b6:16:19:5b:c9:8a:79:
c5:9e:70:05:e3:0d:7e:4c:a3:90:b4:a4:0c:f9:d0:
c4:ab:c7:b6:30:45:2e:52:7c:0c:1c:0f:dc:9e:70:
b2:de:47:f2:da:58:48:d0:ee:73:16:3c:d5:2a:77:
32:a8:fa:b0:01:f5:7a:86:a2:57:ff:98:e3:4a:f5:
ed:3e:71:cb:44:93:d5:a8:b2:e0:5b:32:b7:a3:bf:
8e:07:9c:b1:d7:08:ff:4f:65:db:2d:cc:bc:40:70:
40:ca:e4:59:18:8a:cc:0f:88:95:b1:7f:b1:f4:5f:
7e:34:c7:30:f3:4a:ba:d2:8e:e2:44:80:0e:11:fc:
2d:5a:ed:7a:4d:75:06:25:43:b1:77:ec:83:f2:57:
0c:d1:f2:78:7b:94:35:c1:2a:e1:84:a3:59:9f:67:
ca:9b:2a:27:03:3c:04:a4:6b:5a:11:c0:29:a6:2a:
be:bd:b4:b5:8d:78:16:cd:17:9a:af:28:9d:09:87:
04:c0:38:f5:0b:85:91:47:f1:33:e7:b7:67:ab:39:
5d:36:0e:ac:46:4a:b1:58:db:04:8e:d6:69:e9:bf:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:46:ED:DC:45:F1:B9:A1:3B:93:BD:80:34:35:33:B9:B3:3F:53
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eBFG7dxF8bmhO5O9gDQ1M7mzP1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:360::-2a06:a005:3af:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
11:0e:85:fa:5a:82:bb:88:b8:33:ff:7e:2b:1c:90:50:26:0e:
90:f0:e7:c0:a2:4c:29:67:da:0a:94:45:fe:50:39:1d:3f:da:
9d:32:c6:ce:0c:fb:29:9f:e5:1e:cd:4e:8c:4d:1d:c1:89:45:
d9:f1:2b:0d:4d:ba:00:31:6c:98:bc:5a:66:51:ad:56:9c:01:
86:38:48:b1:88:de:88:12:28:aa:d5:6f:96:5f:dc:08:03:60:
fe:48:f0:0a:37:f4:9d:6c:a5:d3:0f:70:cd:7f:d6:1a:b4:fa:
d1:4f:fd:df:00:31:56:de:07:3f:69:d4:c5:c1:94:99:c2:d3:
7a:d2:5b:d1:42:e3:4d:27:ae:57:aa:c9:32:36:4f:ea:93:38:
a1:72:42:ca:af:f0:05:5e:b5:3e:90:ed:55:1e:19:d7:d4:00:
84:12:03:49:40:7a:02:ac:e4:bd:2d:34:6e:30:e6:f3:fa:73:
dc:f5:ba:42:44:6b:b8:c1:70:4d:54:3b:5d:a9:a4:be:b5:e0:
dd:3d:64:e0:06:f6:48:e9:94:6d:d5:54:7f:b3:80:4e:2f:cb:
c9:3a:c7:c0:fc:51:2a:ab:ec:40:33:ba:23:3a:ca:f6:2d:6e:
c9:e6:60:3f:00:17:12:f7:e1:d9:c0:d4:9d:35:ee:14:40:40:
02:41:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net