Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hqo4a_Z-Fskk5QxISX9JaUiswgU.roa
File: hqo4a_Z-Fskk5QxISX9JaUiswgU.roa (raw, json)
Hash identifier: iBxV9Ug6N9X29q0+LJ3njmCEIgVQ9wGkDTW+R8EDL0k=
Subject key identifier: 86:AA:38:6B:F6:7E:16:C9:24:E5:0C:48:49:7F:49:69:48:AC:C2:05
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183DFDEB45F7053B58FFE029A6078B820F8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hqo4a_Z-Fskk5QxISX9JaUiswgU.roa
Signing time: Sun 16 Oct 2022 08:17:37 +0000
ROA not before: Sun 16 Oct 2022 08:17:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213105
IP address blocks: 2a06:a005:1f30::/44 maxlen: 48
2a06:a005:1260::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
2a06:a005:1f20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:de:b4:5f:70:53:b5:8f:fe:02:9a:60:78:b8:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 16 08:17:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86aa386bf67e16c924e50c48497f496948acc205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:52:3d:f3:0d:20:c3:25:10:7e:77:57:19:
ed:69:e2:f2:fa:5b:c6:97:47:01:6e:c5:a7:79:5b:
fa:87:86:79:06:f2:91:d6:c9:38:88:82:e6:73:3d:
22:8d:76:7d:c0:77:9a:05:08:8e:6d:26:ef:0c:7c:
5f:6a:05:54:9d:fd:c6:8e:be:55:93:15:a3:eb:ac:
ca:cf:f4:1e:55:75:e1:3c:6f:94:8a:e3:33:5d:87:
f3:f8:f0:fb:66:95:75:a4:31:3c:fc:aa:72:d3:f9:
3f:6f:fb:ad:53:46:40:04:98:47:e3:67:bb:7b:a7:
7d:3d:f8:21:97:33:53:86:36:57:09:57:04:23:51:
f9:6c:2e:eb:de:8a:d1:90:d1:29:8d:fe:fd:33:ad:
c2:2a:7d:c5:4e:10:70:ca:8d:0c:61:f0:23:12:8d:
ca:13:07:56:0c:78:1b:48:e8:8d:46:00:a7:96:f9:
88:0f:51:32:7a:f8:cc:47:7d:39:bc:2d:6d:f7:03:
7f:d3:fb:4f:94:4e:e1:51:50:c5:f3:98:6e:80:78:
04:86:1b:36:34:8b:e2:aa:47:d0:9e:b9:a5:d0:8e:
bf:95:a7:7f:b7:2c:b6:55:3f:09:ec:40:f4:57:66:
cc:c8:e8:e0:e5:51:92:f5:f5:16:87:6a:47:99:28:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:38:6B:F6:7E:16:C9:24:E5:0C:48:49:7F:49:69:48:AC:C2:05
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hqo4a_Z-Fskk5QxISX9JaUiswgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1260::/44
2a06:a005:18e0::/44
2a06:a005:1d30::/44
2a06:a005:1f20::/43
Signature Algorithm: sha256WithRSAEncryption
06:d1:03:a4:3b:5f:70:fb:fb:13:72:3f:89:c6:17:78:ba:69:
59:4a:7b:9e:76:fe:d6:69:f5:d6:fb:27:bb:07:71:6b:84:a3:
60:54:fa:e6:32:ae:fc:71:df:69:c5:55:a6:ec:76:49:61:57:
a2:56:73:b8:1d:56:c5:a9:38:02:eb:c2:91:4d:08:ff:9f:32:
1e:33:f5:32:8c:8e:5c:ed:d2:60:d4:76:94:3d:82:77:25:17:
1d:79:f8:bf:1d:20:fa:a2:4a:02:e8:c3:8a:c8:34:96:bd:fe:
a8:f3:06:fc:1c:d6:31:15:5f:85:f8:10:68:36:f3:af:5b:52:
dc:8c:b3:11:a2:87:df:04:fa:27:48:b3:c7:81:1b:b3:be:1d:
b3:68:9a:2f:20:1c:f0:30:b2:c4:f8:15:05:6a:ed:d6:09:57:
df:6b:f9:67:92:33:e1:92:23:ee:3f:5b:15:d9:eb:52:bf:f0:
79:01:46:6b:49:06:ce:bf:e5:86:11:c9:55:0b:f1:1d:dc:c1:
fb:75:2d:d1:0a:44:1d:38:5e:1d:9f:79:0f:fb:37:37:11:11:
51:17:63:d6:ca:c1:aa:2e:7d:dc:88:1d:90:eb:8b:67:e5:39:
3d:61:cd:57:a6:b9:ee:ba:ac:64:a7:eb:c1:69:e5:de:c9:d8:
e2:dd:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net