Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hJrSlsPirC3d5XDOB1RobDZ7MrM.roa
File: hJrSlsPirC3d5XDOB1RobDZ7MrM.roa (raw, json)
Hash identifier: sIRZMTTaeTT6E/0Cq6vXrLXXRf2wjmLjlB+eHxFybt4=
Subject key identifier: 84:9A:D2:96:C3:E2:AC:2D:DD:E5:70:CE:07:54:68:6C:36:7B:32:B3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C12C14ED65AF1216491404B1E8B29D6A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hJrSlsPirC3d5XDOB1RobDZ7MrM.roa
Signing time: Tue 29 Nov 2022 02:16:42 +0000
ROA not before: Tue 29 Nov 2022 02:16:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202218
IP address blocks: 2a0a:6040:ff00::/40 maxlen: 48
2a06:a005:23f0::/44 maxlen: 48
2a06:a005:23e0::/44 maxlen: 48
2a06:a005:23d0::/44 maxlen: 48
2a06:a005:23b0::/44 maxlen: 48
2a06:a005:1c7b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:2c:14:ed:65:af:12:16:49:14:04:b1:e8:b2:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 29 02:16:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849ad296c3e2ac2ddde570ce0754686c367b32b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:de:51:e6:10:84:ee:41:31:f6:97:b5:da:
49:9c:7d:04:47:f5:76:dc:09:80:36:5c:27:c4:ba:
f7:16:82:cf:dd:5c:2c:4b:4b:2c:e6:4c:9a:5e:74:
3c:2f:87:10:ac:80:b6:37:02:55:74:2d:d2:d8:b0:
4d:13:dc:d8:7d:60:14:d4:d1:40:19:84:db:70:74:
3f:fa:f8:ae:86:7a:53:f4:77:b5:8d:b6:af:5a:1c:
84:ae:7f:8a:54:d0:f2:52:4a:fd:2a:25:83:ec:05:
37:e8:cc:7a:a6:61:a4:78:24:ac:3d:e4:e3:b3:09:
4f:b2:13:e5:38:98:54:86:40:89:27:93:1d:aa:02:
df:0f:37:32:f6:11:80:5f:4e:1a:79:4f:08:a9:91:
84:cd:8f:4b:b8:d4:df:37:37:c8:e7:a3:40:02:b7:
b6:b4:fd:8b:98:d1:7d:47:cd:20:b1:e5:f3:cd:2b:
2e:5a:7e:52:1d:32:b5:82:de:62:26:84:16:58:41:
51:4a:39:09:21:b3:05:e0:a5:1c:8a:1b:32:7b:be:
89:ea:eb:14:ce:08:9c:f8:25:9c:e8:30:25:96:08:
1f:a5:76:ca:43:d9:60:5c:4f:76:c6:dd:a2:39:03:
26:7d:ca:ad:b2:eb:ba:c2:57:c0:73:36:72:a1:2b:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:D2:96:C3:E2:AC:2D:DD:E5:70:CE:07:54:68:6C:36:7B:32:B3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hJrSlsPirC3d5XDOB1RobDZ7MrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7b::/48
2a06:a005:23b0::/44
2a06:a005:23d0::-2a06:a005:23ff:ffff:ffff:ffff:ffff:ffff
2a0a:6040:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
4e:fc:f7:0a:b8:33:74:69:bf:75:03:8d:d2:02:c0:2d:d0:98:
72:4a:e0:cc:52:e0:80:95:d2:20:e3:5c:d7:14:65:60:1b:aa:
e2:bf:c3:dd:7a:3f:ca:0e:53:a4:ff:df:b4:2e:db:e8:ab:95:
f8:03:0c:d7:3c:b2:50:d1:6f:54:1c:ed:0b:1b:5d:30:47:f6:
64:f8:7b:8b:55:ae:80:d7:15:59:b3:fd:fc:dc:bf:51:67:09:
2e:83:ff:20:4b:b6:8e:95:59:4d:61:fa:f1:c9:64:53:14:fe:
9c:4e:89:32:00:1d:42:47:4f:ba:e6:fb:0a:d5:9c:24:0d:36:
40:5a:63:8f:c4:ed:2e:29:61:d3:1f:b1:e7:87:0e:57:13:f4:
8f:40:76:41:47:00:c5:ea:8f:5c:f6:2c:10:be:cf:95:52:94:
2e:f4:df:27:c3:61:ba:e9:fe:09:fa:25:b1:36:bf:ca:3f:16:
d6:65:b8:cb:e5:40:a7:8b:81:7f:3d:d3:49:ec:40:ed:2c:b3:
80:cf:06:0b:e1:bc:df:2d:9e:57:1e:79:9d:af:21:86:cf:88:
38:ac:76:82:12:fb:fa:8f:06:64:77:2d:39:da:12:d7:99:2a:
49:ed:cd:d0:1b:f3:1c:d3:cc:83:d5:8d:64:c8:09:47:13:bd:
b7:2f:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net