Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g20rFbrqYKokLZGyi5d-6cuxxPo.roa
File: g20rFbrqYKokLZGyi5d-6cuxxPo.roa (raw, json)
Hash identifier: NfQNarod2Bg3gvZl77zTy3XgemrjY0z7mMjE+D4gyaI=
Subject key identifier: 83:6D:2B:15:BA:EA:60:AA:24:2D:91:B2:8B:97:7E:E9:CB:B1:C4:FA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01829325C682CB1D61DA376B0006764113A1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g20rFbrqYKokLZGyi5d-6cuxxPo.roa
Signing time: Fri 12 Aug 2022 17:41:42 +0000
ROA not before: Fri 12 Aug 2022 17:41:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204291
IP address blocks: 2a06:a005:1740::/44 maxlen: 48
2a06:a005:1760::/44 maxlen: 48
2a06:a005:1780::/44 maxlen: 48
2a06:a005:1750::/44 maxlen: 48
2a06:a005:1770::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:25:c6:82:cb:1d:61:da:37:6b:00:06:76:41:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 17:41:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=836d2b15baea60aa242d91b28b977ee9cbb1c4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:06:fc:8c:c2:04:b1:c4:a7:02:c4:df:8b:
03:6b:a4:b4:99:5a:cc:e7:c4:14:df:20:59:c7:2d:
d2:7d:f3:c8:69:3e:a2:6c:6c:05:86:df:1a:4a:33:
bb:51:8e:91:c8:02:a3:ef:56:c1:75:d5:23:e4:78:
c6:9d:d6:bd:b3:46:71:6a:6b:48:68:5f:ed:37:8b:
41:d6:77:6b:ce:7e:95:22:9b:df:f9:56:f7:3a:62:
81:0f:eb:22:e2:20:c1:59:88:64:4e:9e:7d:69:dc:
88:79:d7:80:d2:0b:2c:d4:8d:3d:d6:e3:53:2f:17:
54:17:5d:f5:3f:21:65:10:f9:7b:f3:b9:e0:97:56:
a5:56:7d:24:57:9f:ee:7d:5f:d6:c8:7a:3b:1a:1c:
88:c6:ea:d4:cf:06:2b:dc:b5:80:7c:c8:28:cd:86:
54:04:c3:d8:a6:de:be:a1:81:31:a0:4e:37:7e:38:
4c:74:d1:ea:06:c1:b3:4e:34:13:78:1d:18:ea:93:
6d:69:9a:c6:32:94:2d:c7:bc:84:b4:b1:f2:fc:31:
b4:d5:c3:1b:ae:49:80:04:00:af:17:4f:64:e4:82:
4d:8f:78:cb:9f:f5:2d:e9:64:8f:f5:47:18:27:28:
27:7c:4e:a9:d3:a7:cc:9a:12:84:70:76:71:f9:76:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:2B:15:BA:EA:60:AA:24:2D:91:B2:8B:97:7E:E9:CB:B1:C4:FA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g20rFbrqYKokLZGyi5d-6cuxxPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1740::-2a06:a005:178f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:65:60:97:31:33:fb:1c:62:20:7f:e3:7f:66:cb:38:92:ef:
a4:19:88:08:84:93:35:fe:8d:04:b0:f9:50:dd:11:e4:63:4c:
9e:7a:2c:14:e9:79:1d:49:ad:70:c3:d8:b1:d6:d7:49:af:74:
85:e3:bc:84:19:83:26:c0:05:5c:87:92:95:8f:c4:8e:a0:64:
3a:69:23:2a:8b:23:7a:50:0a:b5:e3:d9:f6:6b:29:6c:71:bc:
73:f1:73:c6:eb:e3:5d:60:a0:82:7b:04:bf:f0:44:94:f9:cc:
a4:99:2b:15:08:29:99:5d:55:09:62:b7:19:7d:dc:80:e3:51:
da:3e:61:d3:d3:03:2d:bb:70:b0:59:25:1f:4e:9f:9b:e2:95:
cf:46:e2:e4:12:8f:4f:42:d9:38:05:aa:33:3c:47:0c:eb:5f:
e0:06:24:42:76:50:e8:74:14:af:3a:74:53:f5:5f:e3:9c:84:
fa:40:33:0b:6f:02:6a:c1:9e:09:f3:21:da:1e:7a:2b:4b:1b:
ad:f4:1f:e8:18:d0:38:4f:0a:91:96:db:17:45:3d:37:86:0a:
99:3d:e2:c1:8a:f6:cb:12:2f:7e:fe:3d:70:1b:59:01:47:48:
e3:e4:32:62:e0:d0:92:44:45:f7:db:da:75:f8:28:c0:89:ff:
fb:0d:5e:80
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYKTJcaCyx1h2jdrAAZ2QROhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODEyMTc0MTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzZkMmIxNWJhZWE2MGFhMjQyZDkxYjI4Yjk3N2VlOWNiYjFjNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtigG/IzCBLHEpwLE34sDa6S0mVrM
58QU3yBZxy3SffPIaT6ibGwFht8aSjO7UY6RyAKj71bBddUj5HjGnda9s0ZxamtI
aF/tN4tB1ndrzn6VIpvf+Vb3OmKBD+si4iDBWYhkTp59adyIedeA0gss1I091uNT
LxdUF131PyFlEPl787ngl1alVn0kV5/ufV/WyHo7GhyIxurUzwYr3LWAfMgozYZU
BMPYpt6+oYExoE43fjhMdNHqBsGzTjQTeB0Y6pNtaZrGMpQtx7yEtLHy/DG01cMb
rkmABACvF09k5IJNj3jLn/Ut6WSP9UcYJygnfE6p06fMmhKEcHZx+XZWowIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFINtKxW66mCqJC2RsouXfunLscT6MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZzIwckZicnFZS29rTFpHeWk1ZC02Y3V4eFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqBqAF
F0ADBwQqBqAFF4AwDQYJKoZIhvcNAQELBQADggEBACplYJcxM/scYiB/439myziS
76QZiAiEkzX+jQSw+VDdEeRjTJ56LBTpeR1JrXDD2LHW10mvdIXjvIQZgybABVyH
kpWPxI6gZDppIyqLI3pQCrXj2fZrKWxxvHPxc8br411goIJ7BL/wRJT5zKSZKxUI
KZldVQlitxl93IDjUdo+YdPTAy27cLBZJR9On5vilc9G4uQSj09C2TgFqjM8Rwzr
X+AGJEJ2UOh0FK86dFP1X+OchPpAMwtvAmrBngnzIdoeeitLG630H+gY0DhPCpGW
2xdFPTeGCpk94sGK9ssSL37+PXAbWQFHSOPkMmLg0JJERffb2nX4KMCJ//sNXoA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net