Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jOykHNa-AEWTMiR0ILm4Etf4vNw.roa
File: jOykHNa-AEWTMiR0ILm4Etf4vNw.roa (raw, json)
Hash identifier: tXM2EjMaZsKQerRWVw5TgQPpE2D+DbWvmCJYf4picBQ=
Subject key identifier: 8C:EC:A4:1C:D6:BE:00:45:93:32:24:74:20:B9:B8:12:D7:F8:BC:DC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182E4238A776F188C0AF0A186F1789FAD33
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jOykHNa-AEWTMiR0ILm4Etf4vNw.roa
Signing time: Sun 28 Aug 2022 11:08:30 +0000
ROA not before: Sun 28 Aug 2022 11:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:860::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e4:23:8a:77:6f:18:8c:0a:f0:a1:86:f1:78:9f:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 28 11:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ceca41cd6be00459332247420b9b812d7f8bcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:40:ca:44:f0:f0:18:59:49:ce:d2:5c:78:
21:81:7c:3b:a6:9f:ad:c4:a8:b1:5d:fe:da:00:01:
4a:cb:53:f1:84:c8:a5:e2:51:84:68:9a:68:44:7d:
67:68:e9:9f:cc:cc:fa:45:0e:0e:55:a1:ce:c9:64:
9e:4a:c1:d9:8b:2c:8a:ac:b4:fa:2e:f7:c6:3f:e9:
56:89:f9:bc:db:82:00:66:c6:58:0b:49:86:fc:8d:
dc:d3:f0:2b:ea:2f:1d:bd:62:64:c2:99:61:f2:c1:
eb:b8:31:f0:49:a0:02:74:32:52:d1:33:63:5a:ec:
ae:b8:f7:c5:94:94:64:47:bd:7f:8e:55:94:15:68:
35:2f:a2:fa:af:2f:db:27:f2:e1:f0:34:53:93:61:
c1:ce:0e:96:78:c0:b9:25:78:0f:19:97:fa:1e:20:
d2:39:d7:24:2d:ec:36:cd:38:91:37:8e:ad:ae:f5:
94:d4:7b:b4:2d:ec:73:aa:76:fb:62:25:20:42:d4:
a7:28:ea:53:00:75:df:d3:c8:c3:f1:12:8c:32:74:
ac:d6:5b:b7:c7:bc:e7:77:e7:b2:00:24:14:85:ea:
82:82:f3:50:b5:ad:06:59:53:74:1b:ca:78:d8:4e:
71:d2:56:59:8a:c1:d9:62:97:7a:96:1c:0b:27:4f:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:A4:1C:D6:BE:00:45:93:32:24:74:20:B9:B8:12:D7:F8:BC:DC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jOykHNa-AEWTMiR0ILm4Etf4vNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:860::/44
Signature Algorithm: sha256WithRSAEncryption
11:3c:75:e5:d7:ca:94:d1:d9:b7:ee:74:1d:b7:d9:cd:82:75:
b0:5e:0e:13:dc:d0:9a:91:9d:d0:9a:89:82:6e:58:69:8d:b2:
2c:2f:5a:76:60:f1:be:cb:8d:d7:f2:27:7c:68:f4:dd:64:33:
82:2e:2d:99:77:0d:6c:ce:e4:bc:7b:ed:a1:87:38:d7:50:a5:
bb:6c:c4:b5:38:83:36:6a:f9:7e:9f:89:76:39:59:e6:68:16:
c7:18:2c:70:b3:ef:d5:e8:17:3d:da:a6:c9:86:58:39:02:f5:
74:ca:9f:e8:05:8d:25:58:95:fb:c2:25:68:20:cf:d7:a7:5a:
e6:c1:a7:fa:c9:a4:22:76:57:87:21:c3:a9:3c:42:f3:b3:9f:
ef:5f:1d:6f:7a:01:f5:e5:c0:c2:e5:86:37:f4:7e:a4:35:e4:
16:c3:5a:a7:dd:1b:b6:d6:39:b9:6a:9d:dd:d3:98:c9:a8:49:
a4:44:04:1e:03:29:42:16:c5:80:b0:6b:3a:c6:f1:20:30:da:
b6:5a:b5:71:56:55:54:6d:bc:f9:1f:a9:2a:19:06:2e:36:fc:
72:92:98:1b:0b:1f:38:b8:38:99:de:b8:6a:47:5e:3d:b0:c4:
04:76:75:58:77:a4:21:f8:d2:fe:bc:85:33:67:7c:8d:db:52:
8d:cc:a1:74
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYLkI4p3bxiMCvChhvF4n60zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI4MTEwODMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2VjYTQxY2Q2YmUwMDQ1OTMzMjI0NzQyMGI5YjgxMmQ3ZjhiY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwRAykTw8BhZSc7SXHghgXw7pp+t
xKixXf7aAAFKy1PxhMil4lGEaJpoRH1naOmfzMz6RQ4OVaHOyWSeSsHZiyyKrLT6
LvfGP+lWifm824IAZsZYC0mG/I3c0/Ar6i8dvWJkwplh8sHruDHwSaACdDJS0TNj
WuyuuPfFlJRkR71/jlWUFWg1L6L6ry/bJ/Lh8DRTk2HBzg6WeMC5JXgPGZf6HiDS
OdckLew2zTiRN46trvWU1Hu0Lexzqnb7YiUgQtSnKOpTAHXf08jD8RKMMnSs1lu3
x7znd+eyACQUheqCgvNQta0GWVN0G8p42E5x0lZZisHZYpd6lhwLJ08ChwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFIzspBzWvgBFkzIkdCC5uBLX+LzcMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvak95a0hOYS1BRVdUTWlSMElMbTRFdGY0dk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEKgagBQZw
AwcEKgagBQdAAwcEKgagBQdgAwcEKgagBQeAAwcEKgagBQhgMA0GCSqGSIb3DQEB
CwUAA4IBAQARPHXl18qU0dm37nQdt9nNgnWwXg4T3NCakZ3QmomCblhpjbIsL1p2
YPG+y43X8id8aPTdZDOCLi2Zdw1szuS8e+2hhzjXUKW7bMS1OIM2avl+n4l2OVnm
aBbHGCxws+/V6Bc92qbJhlg5AvV0yp/oBY0lWJX7wiVoIM/Xp1rmwaf6yaQidleH
IcOpPELzs5/vXx1vegH15cDC5YY39H6kNeQWw1qn3Ru21jm5ap3d05jJqEmkRAQe
AylCFsWAsGs6xvEgMNq2WrVxVlVUbbz5H6kqGQYuNvxykpgbCx84uDiZ3rhqR149
sMQEdnVYd6Qh+NL+vIUzZ3yN21KNzKF0
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net