Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/goP20wMBklV2GrgMCgumOL8aIJ8.roa
File: goP20wMBklV2GrgMCgumOL8aIJ8.roa (raw, json)
Hash identifier: dBrin5WOwC0N6EYR35TSI3L1s5AFxGzuBXPoxwNRgQU=
Subject key identifier: 82:83:F6:D3:03:01:92:55:76:1A:B8:0C:0A:0B:A6:38:BF:1A:20:9F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182B99F89BBD39D6DC6C3B40988F298BFEC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/goP20wMBklV2GrgMCgumOL8aIJ8.roa
Signing time: Sat 20 Aug 2022 05:00:16 +0000
ROA not before: Sat 20 Aug 2022 05:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400542
IP address blocks: 2a06:a005:f20::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
2a06:a005:ef0::/44 maxlen: 48
2a06:a005:ee0::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b9:9f:89:bb:d3:9d:6d:c6:c3:b4:09:88:f2:98:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 20 05:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8283f6d303019255761ab80c0a0ba638bf1a209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:37:e3:72:f8:da:a3:be:15:ff:84:db:9c:
de:95:4b:4d:bf:a3:55:55:ec:6c:be:27:f8:07:63:
9c:3e:7d:5d:95:56:74:5f:38:74:7c:01:24:f6:2a:
8d:fb:cd:98:3c:96:b6:ac:c8:b8:68:8c:99:b4:08:
8b:9e:3f:49:62:03:16:55:c1:20:61:31:65:12:6e:
4e:f3:2e:7a:9d:ad:cc:62:c1:35:d3:ee:a8:ad:de:
6d:b5:d1:80:30:d2:b7:dd:49:c4:3d:12:60:89:d8:
36:88:d7:34:43:09:35:f8:7a:91:16:72:88:79:b3:
54:85:e2:ab:e6:1a:95:65:0e:52:cc:d4:3d:cf:a7:
d2:4a:2d:2f:5c:92:b7:38:55:55:35:9e:0f:e4:9c:
2a:57:45:69:6c:16:97:25:fa:39:d2:d7:1a:df:62:
31:1a:05:0d:f1:53:6d:14:e8:78:1d:71:e2:49:c0:
b1:3f:ad:2f:13:e7:24:07:dd:a9:a3:d1:bc:57:b9:
23:67:12:cc:24:87:8d:03:3f:aa:2d:3f:f7:24:40:
d5:b5:a2:f8:4e:3c:15:89:03:92:02:7a:47:0b:2d:
77:95:60:7a:d8:f7:ad:5c:9f:3d:8c:9f:4c:a0:ce:
33:9b:9c:78:1a:ed:13:47:ca:59:0b:71:85:19:e2:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:F6:D3:03:01:92:55:76:1A:B8:0C:0A:0B:A6:38:BF:1A:20:9F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/goP20wMBklV2GrgMCgumOL8aIJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f6:6c:3b:4d:e1:38:a8:59:79:6e:7b:37:13:11:47:fd:49:
9d:fc:55:1a:37:f7:62:9a:90:a1:d5:4f:af:00:fb:e1:bf:4a:
7b:41:ca:f6:e4:7f:7d:d7:67:74:d7:96:f6:0e:4e:3f:aa:94:
7a:19:0b:93:09:a2:40:87:ce:06:39:a1:94:e4:f2:1c:5a:de:
1e:ae:29:24:49:47:dd:4b:4a:b1:df:5a:4d:d2:96:8f:90:ca:
3e:e3:b4:c1:6f:6b:25:5f:51:42:d5:fa:f3:60:dc:88:dd:75:
d4:55:28:fa:9c:99:1d:c4:68:9b:47:d8:5f:0d:e6:cd:a4:1a:
38:e2:32:74:9e:6a:12:0b:e6:c0:fe:9b:de:cb:d2:9a:ef:3c:
82:46:9d:ca:4f:f1:a0:c7:85:24:34:95:85:ce:42:ad:11:dc:
90:dc:8b:7f:a6:48:87:1d:35:09:6b:64:37:8c:1d:f9:0f:e8:
2f:94:b3:11:be:a4:ca:4e:3e:f0:fd:86:74:03:ff:ba:4e:31:
c7:c0:85:10:f0:09:90:1e:8e:95:c2:07:c5:b0:93:31:ee:fb:
8b:e5:73:8e:84:2a:ef:fb:8c:ef:e1:80:62:ac:e5:f9:88:3c:
40:69:b8:41:ea:a1:49:d2:80:f8:40:ec:81:3f:da:d1:97:59:
da:f1:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net