Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqAmIQkZ2bPtdx85R1BwD83qdaM.roa
File: iqAmIQkZ2bPtdx85R1BwD83qdaM.roa (raw, json)
Hash identifier: j8jaD2i2gHzJpW415BgV1CKls3bsMb0ypu/iGqlTkOM=
Subject key identifier: 8A:A0:26:21:09:19:D9:B3:ED:77:1F:39:47:50:70:0F:CD:EA:75:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1974CDCA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqAmIQkZ2bPtdx85R1BwD83qdaM.roa
Signing time: Sat 07 May 2022 12:39:17 +0000
ROA not before: Sat 07 May 2022 12:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427085258 (0x1974cdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 7 12:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aa026210919d9b3ed771f394750700fcdea75a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:20:b6:bd:45:3f:3d:76:26:b0:d0:1a:03:
df:72:eb:f3:20:7a:51:76:6c:7b:12:a0:60:f0:04:
51:fe:7c:84:0c:1f:a4:f6:1e:76:31:44:ad:97:9d:
0c:8c:6a:13:c1:22:ab:b4:7b:4a:6e:a5:c4:c6:fa:
9c:84:ea:c1:61:cb:cf:f2:9b:d0:1b:bf:12:02:da:
81:28:d7:45:00:dd:93:66:bc:83:3f:b6:17:c2:dd:
1d:4d:50:aa:7c:13:91:f6:a3:76:bb:44:95:31:da:
67:a4:da:89:19:8d:cd:ff:68:4a:8e:3e:70:76:47:
94:d2:e7:fa:c5:ae:46:d2:8f:bc:fa:90:6e:fb:de:
8d:71:a8:14:45:a5:e7:81:59:c6:9a:7d:2e:75:db:
6d:02:fd:f9:01:48:25:6f:58:ef:08:85:37:39:52:
4a:6d:9c:5b:73:0a:cf:bf:c5:50:7b:95:ea:7d:95:
98:a0:42:51:c8:03:ff:75:e0:c3:e6:3b:3a:8c:5a:
64:11:20:a1:0a:1e:b2:eb:d4:0e:41:62:90:f8:52:
8e:f6:9a:e7:af:c3:fe:ae:ee:c8:e5:a4:20:f8:ba:
fb:97:c8:07:cc:07:74:cf:c1:36:06:84:35:7d:29:
91:5a:ea:c0:91:e1:1c:29:fb:2a:78:e2:6a:45:e9:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:26:21:09:19:D9:B3:ED:77:1F:39:47:50:70:0F:CD:EA:75:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqAmIQkZ2bPtdx85R1BwD83qdaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
Signature Algorithm: sha256WithRSAEncryption
7c:f1:63:13:dc:28:cc:b9:d6:fe:7b:54:42:22:4c:5b:98:7a:
1d:c5:78:c3:a7:af:cc:39:95:a4:ba:6f:40:c0:87:1a:9e:6b:
94:54:eb:52:04:bf:a9:81:9a:d1:26:df:8b:21:bb:e9:66:c2:
74:6a:f8:1a:34:f3:99:41:6e:6b:74:e2:61:10:15:b7:3b:32:
a2:45:04:3b:55:d2:dd:90:f1:97:4b:e5:9c:67:99:0b:53:e6:
d4:4a:dd:49:69:57:19:02:fa:9e:99:67:d0:16:89:1f:6b:bd:
20:b0:42:ab:fa:d4:2f:f0:a2:67:e1:c7:32:f8:f0:27:47:ef:
1c:35:2e:a2:57:5d:59:d4:eb:d2:71:07:12:12:a3:4d:02:a5:
87:49:49:14:fd:73:c7:17:c0:2c:2a:12:7c:98:92:80:76:89:
a3:74:0c:6b:9c:16:db:6f:ab:b4:44:f9:a0:91:03:5d:f2:c4:
0e:d1:8a:cd:54:00:df:08:df:58:5c:c9:08:32:a8:bd:4c:0b:
65:ee:4c:82:0f:aa:b1:fc:ee:1b:ab:b4:59:33:5a:ac:b3:a6:
c9:94:6d:09:82:9d:e6:e9:d6:45:56:73:1b:2b:3e:01:eb:53:
28:48:22:1a:71:18:05:3b:7a:b0:2d:b5:a7:75:fe:b9:71:c0:
a6:bb:90:c7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEGXTNyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
NzEyMzkxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFhMDI2MjEwOTE5
ZDliM2VkNzcxZjM5NDc1MDcwMGZjZGVhNzVhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMi7ILa9RT89diaw0BoD33Lr8yB6UXZsexKgYPAEUf58hAwf
pPYedjFErZedDIxqE8Eiq7R7Sm6lxMb6nITqwWHLz/Kb0Bu/EgLagSjXRQDdk2a8
gz+2F8LdHU1QqnwTkfajdrtElTHaZ6TaiRmNzf9oSo4+cHZHlNLn+sWuRtKPvPqQ
bvvejXGoFEWl54FZxpp9LnXbbQL9+QFIJW9Y7wiFNzlSSm2cW3MKz7/FUHuV6n2V
mKBCUcgD/3Xgw+Y7OoxaZBEgoQoesuvUDkFikPhSjvaa56/D/q7uyOWkIPi6+5fI
B8wHdM/BNgaENX0pkVrqwJHhHCn7KnjiakXpmTsCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBSKoCYhCRnZs+13HzlHUHAPzep1ozAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2lxQW1JUWtaMmJQdGR4ODVSMUJ3RDgzcWRhTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAIwJAMHBCoGoAUGcAMHBCoGoAUHQAMHBCoG
oAUHYAMHBCoGoAUHgDANBgkqhkiG9w0BAQsFAAOCAQEAfPFjE9wozLnW/ntUQiJM
W5h6HcV4w6evzDmVpLpvQMCHGp5rlFTrUgS/qYGa0SbfiyG76WbCdGr4GjTzmUFu
a3TiYRAVtzsyokUEO1XS3ZDxl0vlnGeZC1Pm1ErdSWlXGQL6npln0BaJH2u9ILBC
q/rUL/CiZ+HHMvjwJ0fvHDUuolddWdTr0nEHEhKjTQKlh0lJFP1zxxfALCoSfJiS
gHaJo3QMa5wW22+rtET5oJEDXfLEDtGKzVQA3wjfWFzJCDKovUwLZe5Mgg+qsfzu
G6u0WTNarLOmyZRtCYKd5unWRVZzGys+AetTKEgiGnEYBTt6sC21p3X+uXHApruQ
xw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net